Is Babar a Bunny?

[f-secure.com] Lately there has been a lot of research and publicity around a strange case of Babar, a malware connected to suspected high-level espionage operation called SNOWGLOBE. SNOWGLOBE was first brought to media attention about a year ago by French newspaper Le Monde , when they wrote about top secret SCEC slides leaked by, who else than Edward Snowden himself. In the set of slides, there are numerous claims about French-originating malware which internally calls itself Babar. It …

Air traffic control vulnerability could allow criminals to hack the skies

[eset.com]

Lysa Myers: “There are still only a handful of women in the security field”

[eset.com] There

The TSA's FAST Personality Screening Program Violates the Fourth Amendment

[schneier.com] New law journal article: "A Slow March Towards Thought Crime: How the Department of Homeland Security's FAST Program Violates the Fourth Amendment," by Christopher A. Rogers. From the abstract: FAST is currently designed for deployment at airports, where heightened security threats justify warrantless searches under the administrative search exception to the Fourth Amendment. FAST scans, however, exceed the scope of [infosec]

UK police arrest 57 people including alleged Yahoo and US Department of Defense hackers

[techworld_security] Mega-bust dragnet [infosec]

Mandarin Oriental coughs to credit card breach

[theregister.com] Swanky hotel chain left with Michelin-starred egg on face Upmarket hotel chain Mandarin Oriental has admitted to a credit card breach.… [infosec]

France fingered as source of Syria-spying Babar malware

[theregister.com] Crack team of malware boffins think DGSE coded reconware France's spy agency has been fingered as the likely author of complex reconnaissance malware, researchers say.… [infosec]

Fujitsu image-processing tech able to identify blurry people in CCTV footage

[techworld_security] The company claims the technology could be used by a business owner to plan the layout of a shop or restaurant [infosec]

GoPro cameras' WiFi security is GoAmateur

[theregister.com] Slurp sick sports selfies without getting off your skateboard Net nuisances can harvest the cleartext SSIDs and passwords of wireless networks accessed by sports selfie box GoPro.… [infosec]

Now Corporate Drones are Spying on Cell Phones

[schneier.com] The marketing firm Adnear is using drones to track cell phone users: The capture does not involve conversations or personally identifiable information, according to director of marketing and research Smriti Kataria. It uses signal strength, cell tower triangulation, and other indicators to determine where the device is, and that information is then used to map the user's travel patterns. "Let's [infosec]

Online bank Trojans declined in 2014 as arrests and takedowns bite

[techworld_security] UK is still the second most targeted country [infosec]

BILLION email address spam scam: Feds collar two blokes, hunt another

[theregister.com] Servers hijacked in 'largest ever' US hack, claim prosecutors The US Department of Justice (DoJ) has shed light on what it's calling the largest computer security breach in American history – after three men were charged with hacking email hosting firms, stealing email addresses, and then using the businesses' data centers to run a spam operation.… [infosec]

Mind-reading DNS security analysis offers early warning for APT attacks

[theregister.com] Precog security tech looks to predict online typo terror The application of predictive algorithms to DNS data may be able to spot malware sites before they serve up nasties.… [infosec]

Low Hanging Fruit: Flash Player

[f-secure.com] Flash Player version 16.0.0.296 is now available . In Windows, you can check what version you have installed via Flash's Control Panel applet. According to Adobe Security Bulletin APSA15-01 , users who have enabled auto-update will have received the update starting on January 24th. Manual downloaders needed to wait a couple of days. We're not exactly sure why manual downloads were delayed, but whatever the reason, auto-updates are recommended. And not only that, but more. A…

Apple iOS 8.1.3 Terms and Conditions

[f-secure.com] This may already be old news since everybody always reads the terms and conditions of the software they install, but we sometimes don't — and we think this section of iOS 8.1.3's terms to be of interest. Privacy: Location Services part we kind of assumed. But automatically including your zip code? New to us. We didn't notice that bit earlier. Anyway… now you know. On 29/01/15 At 01:18 PM

Payment Cards for Sale on Underground Sites Suggests Natural Grocers' Breach

[sans.org] used at Natural Grocers' stores across the country have been found for sale on underground sites, suggesting that the company's system suffered a security breach [infosec,forensic,sans]

Pentagon 'network intruder', dozens more cuffed in British cops' cyber 'strike week'

[theregister.com] 'Just the first step', chuckles fraudbust bigwig A "strike week" against suspected hackers by the UK's National Crime Agency has resulted in 57 arrests.… [infosec]

CIA Planning Overhaul To Handle Modern Cyber Threats

[google.com] These will oversee the agency's cyber operations, including monitoring ... in its 67-year history in part to respond to the growing threat of cyber warfare [infosec,cyber,security]

Bitdefender to Patch Certificate Flaw

[sans.org] says it will release fixes for several of its products to address a flaw that allows revoked certificates to be replaced with legitimate certificates [infosec,forensic,sans]

Hacking tools that terrorise the internet

[google.com] If it's a really good tool, then you can sell the rights to a commercial cyber security company and retire (or work as a consultant). It's a career path [infosec,cyber,security]