Top 10 Stories

A popular children's toy made by LeapFrog is susceptible to a variety of attacks that leverage Adobe Flash vulnerabilities. Security expert Mark Carthy explains in a blog post how he probed a LeapFrog LeapPad ULTRA that he recently purchased at a toy store. Carthy admits that it was his original intention to go out and buy a Hello Barbie, a Wi-Fi-connected iteration of the popular doll that suffers from its own security issues. View full...

Millions of customers of Australia's largest banks are the target of a sophisticated Android attack which steals banking details and thwarts two-factor authentication security. Commonwealth Bank, Westpac, National Australia Bank and ANZ Bank customers are all at risk from the malware which hides on infected devices waiting until users open legitimate banking apps. The malware then superimposes a fake login screen over the top in order to capture usernames and passwords. The malware is designed...

WASHINGTON — The moment a U.S. official pressed a computer key Tuesday, dozens of security experts who gathered in an underground control room girded themselves for a cyber attack — a drill meant to thwart the kinds of intrusions that have recently crippled health networks and retail giants. View full story ORIGINAL SOURCE: Military Times

Security researchers have discovered a new vector for DDoS amplification attacks – and it's quite literally trivial. Improperly configured services such as DNS or Network Time Protocol (NTP) have been exploited to launch a string of DDoS attacks over the last couple of years. Researchers at Edinburgh Napier University have discovered that the TFTP protocol (Trivial File Transfer Protocol) might be abused in a similar way. Unlike DNS and NTP, TFTP has no business being...

This month's bumper release of security patches has one bulletin that affects every supported version of Windows. Microsoft said on its regularly scheduled Patch Tuesday that users on Windows Vista and later -- including Windows 10 -- should patch as soon as possible to prevent attackers from exploiting a flaw in how the operating system handles media files. View full story ORIGINAL SOURCE: ZDNet

Guests who recently lodged at Rosen Hotels & Resorts properties in theme-park destination Orlando, Fla. must hope their data hasn't been taken for a wild ride, after the hospitality company announced its properties have suffered a long-undiscovered payment card data breach. In a corporate statement, Rosen confirmed that an investigation of its payment card network turned up malware capable of reading cards' magnetic stripe data as it is routed through affected systems. The malware collected...

US retailer Home Depot agreed to pay at least US$19.5 million (A$26.1 million) to compensate consumers harmed by a 2014 data breach affecting more than 50 million cardholders. The home improvement retailer will set up a US$13 million fund to reimburse shoppers for out-of-pocket losses, and spend at least US$6.5 million to fund 1-1/2 years of cardholder identity protection services. View full story ORIGINAL SOURCE: IT News

Are you a Mac or Linux user who has been feeling smug about the lack of malware on your operating system? Well, your days are numbered. Brazilian crime gangs are working to change this by packaging malware into Java archive (jar) files, which run across Macs, Linux, Windows and – in some circumstances – Android mobile devices. View full story ORIGINAL SOURCE: International Business Times

Cyberattack group Pawn Storm have added Turkish political targets to an ever-increasing list of people to spy upon for the benefit of Russia. On Monday, Trend Micro researchers said in a blog post that Pawn Storm, well-known for spying upon political targets across the world, is now targeting several government offices -- including the Prime Minister's office and the Turkish parliament -- as well as one of the largest media publications in the country. Pawn...

The Clark County Water Reclamation District has been hit with a cyber-attack but officials say operations haven't been disrupted and no customer or employee information was hacked. The agency said in a statement Monday that its computer system was attacked late Friday night. Computers were shut down as a precaution but operations at all seven treatment facilities and customer service centers were not affected. Authorities are investigating and law enforcement has been notified.   Original...