sec

Naked Security

• FBI probes possible hacks targeting phones of Democratic Party staff
• Major bank attacks thwarted by SWIFT thinking
• Pippa Middleton’s hacked iCloud photos banned from publication
• SMS spammer cops big fine for close to 8 million text message spams
• Why a massive DDoS attack on a blogger has internet experts worried

Office of Inadequate Security

• FeverClan responds to notification of claimed breach
• FTC denies LabMD’s application for a stay of Commission’s Final Order
• Habitat for Humanity Colorado discloses severely handicapping data breach
• InfoArmor: Yahoo Data Breach Investigation
• NJ Spine Center saw no other option but to pay ransom
• NZME data accessed in security breach

SANS Internet Storm Center, InfoCON: green

• ISC Stormcast For Friday, September 30th 2016 https://isc.sans.edu/podcastdetail.html?id=5189, (Fri, Sep 30th)

Full Disclosure

• KeepNote 0.7.8 Remote Command Execution
• Persistent XSS in Abus Security Center - CVSS 8.0

Dark Reading:

• Researchers Shoot Down Yahoo Claim Of Nation-State Hack
• It's Time For Legacy AV To Leave The Building: #legxit
• EMV: The Anniversary Of One Deadline, The Eve of Another
• Decrypting The Dark Web: Patterns Inside Hacker Forum Activity
• A Bug Bounty Reality-Check
• Fear & Loathing In The Cloud
• How A Pair Of Cybercriminals Scales Its Carder Business