Top 10 Stories

If you use an Apple iPhone, iPad or other iDevice, now would be an excellent time to ensure that the machine is running the latest version of Apple’s mobile operating system — version 9.3.1. Failing to do so could expose your devices to automated threats capable of rendering them unresponsive and perhaps forever useless. View full story ORIGINAL SOURCE: Brian Krebs

Grey hat security researchers have discovered new flaws in the systems of Panama leak firm Mossack Fonseca. A self-styled “underground researcher” claims to have found a SQL injection flaw on one of the corporate systems of the Panamanian lawyers. “They updated the new payment CMS, but forgot to lock the directory /onion/,” he said via the “1x0123” Twitter profile. Mossack Fonseca specialises in helping its clients to set up firms in tax havens such as the British...

Criminals have resorted to bribes in order to smuggle malware into the source code of mobile gaming apps. The scam, in which malware authors bribed the employees of a legitimate mobile games company in China to embed malware into mobile apps, was uncovered by security researchers from Check Point. The bribe ensured that malicious software was whitelisted (i.e. approved for download without scanning) by Qihoo 360, China's biggest antivirus software firm. This meant that Chinese...

The Russian government has begun working with Russia's Central Bank to develop a package of measures aimed at fighting Buhtrap, the recently discovered  hacker group, which, to date, has stolen around RUB 4 billion (£42 million) from Russian and Western banks, and is reportedly planning further attacks on the EU banking system. An official spokesman of Xenia Yudaeva, the first Deputy Chairman of the Russian Central Bank, told SCMagazineUK.com that the hacker group uses sophisticated cyber-attacks, the...

A patch that disarms the Petya ransomware has been posted online by an anonymous programmer and includes a tool that exploits shortfalls in the way the malware encrypts a file that allows Windows to start up. It’s thought that the developer, who goes by the Twitter handle @leo_and_stone, produced the key generator to help his father-in-law unlock his computer, which had been hit by the malware. Tim Stiller, Senior Systems Engineer at Rapid7 told us "What is unique about Petya ransomware and this new decryption...

People could be able to access their mobile banking by an app recognising how they hold, swipe, or type into their device, due to an innovation from Britain's biggest building society. Nationwide Building Society has developed a prototype within a mobile banking app, which could provide an extra layer of "behavioural biometrics" security by recognising unique patterns from people's natural interactions with their smartphone or tablet. We heard from Barry Scott, CTO EMEA at Centrify, who told us that “as Nationwide...

The security expert Mike Olsen warned about the presence of malware in products sold through the Amazon service. Olsen was searching for outdoor surveillance cameras on Amazon for a friend’s home. He has found an interesting offer on Amazon, a deal for a set of 6 poe cameras and recording equipment. Once in possession of the outdoor camera set, he tried to install its control software on the friend’s machine. By logging into the admin webpage he noticed the interface...

The first update to Australia's cyber security policy since 2009 have been leaked just a few weeks ahead of their expected arrival. Documents, seen by iTnews, reveal the Federal Government's plan to focus on five key areas in the fight against cyber crime. The files also revealed that Australia has a cyber security skills 'crisis' and is currently lacking the quality and quantity of professionals to protect the country from cyber attacks. View full story ORIGINAL...

Malwarebytes hacker Jerome Segura says black hats have made a mess of efforts to unleash an Adobe Flash zero day vulnerability as part of their popular exploit kit, reducing the pool of potential victims. If done right, the remote code execution exploit had the potential to hurt millions of Flash users, but Adobe was able to release a patch last week closing off CVE-2016-1019 among two dozen others. View full story ORIGINAL SOURCE: The Register

More than 135 Million modems around the world are vulnerable to a flaw that can be exploited remotely to knock them offline by cutting off the Internet access. The simple and easily exploitable vulnerability has been uncovered in one of the most popular and widely-used cable modem, the Arris SURFboard SB6141, used in Millions of US households. View full story ORIGINAL SOURCE: Hacker News