Top 10 Stories

Police detention officers leaked the identity of an anonymous witness in a murder trial after hacking into the intelligence database, a court has heard. Rupert Ross, 34, and Leon De St Aubin, 38, were both sentenced to life imprisonment for the “vicious execution” of Darcy Austin-Bruce on 1 May 2009. Aubin’s girlfriend Lydia Lauro, 33, and Ross’s mother Diana Lank, 60, allegedly discovered the identity of a protected witness in the case. Lauro got a...

WASHINGTON — Computer hackers have been using ransomware to extort money from upstate New York municipalities, including  the Town of Manlius in Onondaga County and the village of Ilion in Herkimer County. Ilion paid an $800 ransom to unlock its computers two years ago, while Manlius was able to thwart the attack, Sen. Charles Schumer told reporters Wednesday. He said small municipalities often are targets because “they lack technology teams and sophisticated software to protect them...

WhiteHat Security founder Jeremiah Grossman has published details that could help victims of domain hijacking. The penetration tester writes how he helped an unnamed video production house to fight a scammer who had opened a mimic website to defraud customers. He says the company had more than a dozen published TV shows under its belt, such that the scam was causing "real brand damage" and the business impact was "severe". View full story ORIGINAL SOURCE:...

The computer of a Bangladesh central bank official was hacked to carry out one of the largest cyber heists in history, a Bangladesh diplomat said on Thursday. John Gomes, Bangladesh Ambassador to the Philippines, told a Philippine panel investigating how the stolen $81 million from Bangladesh central bank ended up in Manila, the hackers were neither Filipino or Bangladeshi. There is also no evidence directly linking anyone in Bangladesh to the cyber heist, Gomes said....

Salesforce.com has revealed that a bug in the firmware of its storage arrays was behind last week's data loss incident. The mess started in the company's Washington data centre on May 9th, when admins noticed “a circuit breaker responsible for controlling power into the data center had failed.” “The team engaged the circuit vendor who began the process of replacing the failed breaker. Multiple redundant power systems had not engaged, which led to power failures...

Republican presidential candidate Donald Trump on Tuesday warned that a dangerous financial bubble has formed in the technology industry - and Silicon Valley responded with a collective eye roll. In a Reuters interview, the New York billionaire said technology start-ups that had never earned a profit were able to sell shares at very high prices, likening the situation to the overheated stock market in 2007. View full story ORIGINAL SOURCE: Reuters

It's Borg Bug Day, and this week Cisco's issued patches of interest to users of its Adaptive Security Appliances (ASAs). The two newly-announced bugs are CVE-2016-1379, a VPN block memory exhaustion vulnerability; and CVE-2016-1385, a problem with the ASA XML parser. The memory exhaustion vulnerability affects ASA software releases later than 9.0, and can be exploited remotely. View full story ORIGINAL SOURCE: The Register

TPG-owned telecommunications provider iiNet is experiencing a nationwide outage across its voice, email, and contact centre services due to a "serious fault". iiNet customers are experiencing difficulties in reaching contact centres, as well as with using email and voice services, according to the telco's service status page. "Engineers are continuing to investigate with the assistance of our vendor with highest priority, there is no current ETR," the page notes. View full story ORIGINAL SOURCE: ZDNet

Major U.S. banks are scrutinizing security of the SWIFT messaging network following cyber attacks in Bangladesh and Vietnam involving fraudulent transfer requests, according to media reports on Tuesday. JPMorgan Chase & Co (JPM.N) has limited SWIFT access to some employees amid questions about the breaches at two Asian banks, The Wall Street Journal reported, citing people familiar with the matter. The actions are not tied to a specific concern about JPMorgan's vulnerability to SWIFT, but are...

British white hat hacker and Google Project Zero chap Tavis Ormandy is making life miserable for Symantec again: the bug-hunter has turned up an exploitable overflow in “the core Symantec Antivirus Engine used in most Symantec and Norton branded Antivirus products”. Described here, the problem is in how the antivirus products handle executables compressed using an early version of the Aspack compression tool. If the engine encounters truncated section data – “when SizeOfRawData is greater than...