Top 10 Stories

Android's full-disk encryption on millions of devices can be cracked by brute-force much more easily than expected – and there's working code to prove it. Essentially, if someone seizes your Qualcomm Snapdragon-powered phone, they can potentially decrypt its file system's contents with a friendly Python script without knowing your password or PIN. View full story ORIGINAL SOURCE: The Register

The U.S. Congress has a small window of time to stop proposed changes in federal court rules that will expand the FBI’s authority to hack into computers during criminal investigations, a senator said Thursday. The rule changes allowing expanded FBI searches of computers, approved by the Supreme Court in April, go into effect in December unless Congress votes against them, and getting Congress to move in a contentious election year will be difficult, said Senator Ron Wyden, an...

Makers of popular PDF reader Foxit have patched 12 dangerous vulnerabilities that could have resulted in remote code execution. Some 400 million users run the flagship reader billed as an alternative to Adobe Reader. The dozen flaws are patched in Windows and Linux variants. Users would need to be conned into opening a malicious PDF with Foxit Reader or PhantomPDF in order to be compromised using the vulnerabilities. View full story ORIGINAL SOURCE: The Register

Security experts from Arbor Networks have uncovered over 100 botnets that are controlled using various variations of LizardStresser, the DDoS stresser created by the original Lizard Squad members. While most of Lizard Squad's first members are in jail or hiding and hoping that law enforcement won't come knocking on their door, the group continues to live on through new members, new attacks, but also through the LizardStresser toolkit, which they leaked online at the start...

The transport sector is a booming lucrative playground for cyber criminals that is increasingly fragmented, IBM researchers say. The findings in a report Security trends in the transportation industry reveal that airlines, trucking, and parking sector companies are being hosed for credit cards and sensitive information. Big Blue cites multiple menus for the budding transport hacker including raiding frequent flier and rewards schemes, citing breaches of British Airways and United Airlines. View full story ORIGINAL SOURCE: The...

President Barack Obama’s agreement with China over cyber espionage seems to be making a dent in hacking attacks from the country, according to a top Justice Department official. Government agencies and cybersecurity companies are actively assessing Chinese hacking attacks, and "it seems like generally people have seen a change in activity," Assistant Attorney General John Carlin, who oversees the Justice Department’s national security division, said on Tuesday. View full story ORIGINAL SOURCE: Bloomberg

Facebook user Aaron Thompson has exposed an online thief who gained access to his account simply by sending the support team a fake passport to unlock the account. It granted the "hacker" access to Mr Thompson's personal and business Facebook pages. Mr Thompson shared his experience on news site Reddit when he realised he was locked out of his accounts. Facebook later restored them to him and apologised. The social network decline to comment. View full story...

Breach affects credit and debit cards used at just some locations. Fast-casual restaurant chain operator Noodles & Company said Tuesday a recent data security incident may have compromised the security of payment information of some its customers. The company said the possible data security incident has affected customers who used debit or credit cards at some of its locations between Jan. 31 and June 2. View full story ORIGINAL SOURCE: Fortune  

Much of the product line from security firm Symantec contains a raft of vulnerabilities that expose millions of consumers, small businesses, and large organizations to self-replicating attacks that take complete control of their computers, a researcher warned Tuesday. "These vulnerabilities are as bad as it gets," Tavis Ormandy, a researcher with Google's Project Zero,wrote in a blog post. "They don’t require any user interaction, they affect the default configuration, and the software runs at the...

Hackers are stealing credit card information in Europe with malware that can spoof the user interfaces of Uber, WhatsApp and Google Play. The malware, which has struck Android users in Denmark, Italy and Germany, has been spreading through a phishing campaign over SMS (short message service), security vendor FireEye said on Tuesday. View full story ORIGINAL SOURCE: PC World