BuzzSec

Prosecutors ask judge to give Baratov 94 months for stealing accounts on behalf of FSB The Canadian hacker who helped Russian agents by breaking into more than 11,000 Yahoo email accounts could spend the next eight years behind bars, if prosecutors in the California Northern District Court get their way.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/19/yahooii_hackerii_facesii_nearlyii_eightii_yearsii_inii_prisonii/

I'm fsck-ed off it took this long, rages affected Reg reader Some of the 15 million Britons affected by the Equifax mega-hack are only now receiving letters notifying them that they were affected by the breach, eight months after the event.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/19/slow_equifax_breach_notification_letters_uk/

Poorly configured S3 buckets strike again US social network data aggregator LocalBlox has been caught leaving its AWS bucket of 48 million records – harvested in part from Facebook, LinkedIn and Twitter – available to be viewed by anyone who stopped by.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/19/48_million_personal_profiles_left_exposed_by_data_firm_localblox/

Home Office admits national and local databases don't talk to each other, so everything is manual The UK government has admitted it can only delete custody images from its massive database through a complex manual process, and that it would cost too much to weed out all the images of innocent people by hand.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/19/cutting_custody_snaps_too_costly_for_cops_says_ukgov/

Don't panic… until you finish reading RSA 2018   The Wi-Fi sync feature in Apple's iOS can allow attackers to remotely copy and control iPhones, opening up the possibility of serious data theft.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/18/iphone_pwned_wifi/

Poorly protected wetware could use the brain for protection Boffins from Belgium have tested the security of a wireless brain implant called a neurostimulator and found that its unprotected signals can be hacked with off-the-shelf equipment.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/18/boffins_break_into_brain_implant/

Less checked online services bear brunt Identity fraud in Blighty hit a record high of 174,523 incidents last year – and the vast majority of it happened online.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/18/id_theft_in_uk_at_record_high_cifas_report/

Cyber resiliency of the UK's health service still in disarray Nearly a year has passed since the unprecedented WannaCry cyber attack and the UK's NHS has yet to agree an action plan, according to a report by MPs.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/18/mps_slam_nhs_for_lack_of_action_plan_one_year_on_from_wannacry/

RSA panel tackles the big stories of the year RSA 2018   Speaking at the 2018 RSA conference, a board of some of the most respected names in security spoke on Tuesday and were scathing about Facebook and the response to the Spectre processor bug.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/17/moxie_marlinspike_on_why_facebook_is_like_exxon_and_paul_kocher_on_what_made_spectre_so_hard_to_report/

And I 'could' sing a duet with Taylor Swift Comment   The British Army's troubled Watchkeeper drones "could still be deployed on operations", a defence minister has insisted.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/17/watchkeeper_drone_could_go_to_war/

Train to outwit the cyber criminals Promo   Even as IT systems grow and become more complex, so new and ingenious methods for stealing vital data or holding organisations to ransom proliferate at an increasingly rapid pace.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/17/build_up_your_security_credentials_at_sans_london_june_2018/

After all, it's where the data is US and UK cyber authorities have launched another round of pin the tale on the Russians, with a warning that Moscow-sponsored hackers are trying to subvert the world's network devices.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/16/ruskies_are_gunning_for_your_router/

HTTP 404: Secure code not found Automated source code analysis of 33 web applications has found that 94 per cent of them have at least one high-severity vulnerability, according to security biz Positive Technologies.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/16/web_app_security_sucks/

Study finds high-severity flaws in 31 of 33 web apps tested Automated source code analysis of 33 web applications has found that 94 per cent of them have at least one high-severity vulnerability, according to security biz Positive Technologies.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/16/web_app_security_yep_it_still_sucks/

GCHQ's cyber guys don't say why... GCHQ's cyber security advice group has formally warned of the risk of using ZTE equipment and services for the UK's telco infrastructure.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/16/zte_gchq_warning/

And password crackers are getting a lot smarter An analysis of free Android apps has shown that developers are leaving their crypto keys embedded in applications, in some cases because the software developer kits install them by default.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/16/android_apps_prove_a_goldmine_for_dodgy_password_practices/

'We can see you everywhere and so can our friends in the UK', says Border Force Australia’s Border Force (ABF) has warned that “people shouldn’t assume the dark web is invisible to Australian agencies” after cuffing a woman who bought illicit drugs using Bitcoin and had them shipped from the UK to Australia.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/16/australian_border_force_reveals_dark_web_btc_buy_survelliance_capability/

Bug bounty sales are getting very complicated, financially and morally B-SIDESSF   Barely a decade ago the mere idea of selling vulnerabilities was highly controversial. Today the market is mature, but increasingly complicated - researchers can now choose between making lots of money, being moral and making less, or going fully black.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/15/mature_bug_bounty_market_bsidessf/

The wacky week in security Roundup   It has been a busy week for security, with the CYBERUK 2018 conference in the UK and the industry gearing up for BSides and the RSA conference in San Francisco next week.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/14/security_roundup/

Never. Is never a good time to get vulnerability fixes? Never is OK with you? Cool, never it is Let's nail this once and for all: Too many Android smartphone makers simply aren't rolling out Google's security bug fixes for the mobile operating system.… from The Register - Security http://go.theregister.com/feed/www.theregister.co.uk/2018/04/13/slow_android_security_fixes/