Send a text message to an ATM - Then collect Cash (from someone else's account)

 I am not sure how easy it will be to connect a Cell phone to a ATM. However, this attack has been successful.

According to the article:- 

A new technique that has been discovered is the use of mobile technology to control an ATM remotely. The threat, Backdoor.Ploutus, was originally discovered in Mexico but is now available in the English language, suggesting that the new variation -- Backdoor.Ploutus.B -- is expanding to other countries.

By simply sending a text message to the compromised system, hackers can control the ATM, walk up to it, and collect dispensed cash

BUT -  First. the attacker must connect the ATM to a mobile phone via USB tethering.

While modern ATMs often have enhanced security, including encrypted hard drives, models running on Windows XP are not protected well against these types of attacks. In addition, while money is usually locked away inside a safe, the computer system often is not -- leaving the access point to cash vulnerable.

The links below has more information:

http://www.zdnet.com/hackers-text-atms-for-cash-via-windows-xp-flaws-7000027672/#ftag=RSS4d2198e

Secure Domain Foundation (SDF) - Formed Yesterday.

 It is a non-profit organization whose goal is to facilitate information sharing among Internet domain registrars and registries

Another small but important additional layer of Security. Hopefully, this should help reducing a few malicious players.


According to the article:- 

The SDF will analyze and report the email and IP addresses of bad actors, making it easier for Internet domain registrars and registries to uniformly block them, Davis says. The organization also has developed methods for recognizing potentially malicious domains and measuring the reputation of applicants to help registrars screen their applicants.

"The SDF provides an entirely free service that not only validates the contact registration data provided, but also lets the registrar and registry know if we have seen that data used previously in relation to cyber crime," Ritchie says.



The links below has more information

http://www.darkreading.com/vulnerability/secure-domain-foundation-launches-will-s/240166802

Tools / Utilities - AV/Anti-Malware Malwarebytes 2.0 Released (Free/Paid)

 

I have always been a fan of this product. This product was able to find malware that a few expensive commercial versions could not.


Ver 2.0 has a new look and claimed to have better protection.

Still free or pay $19.00 for lifetime license.


NOTE:
The free version does not have real-time protection.



You can download it from the vendor site

https://www.malwarebytes.org/

Useful Add-On - For Symantec DLP - for better dashboard with Real-time Data. (if you have extra money to spend)

This might help those who need real-time data

According to the article:- 

MetriX provides those within security with an unprecedented view into the organization’s security posture, while providing you with real-time notifications when thresholds or service levels are not being met. This ensures that IT can respond quickly to threats, thereby reducing risk associated with lack of timely visibility.


The links below has more information:
http://www.symantec.com/connect/forums/dlp-real-time-dashboard-security-visability

Virtual CISO at no cost .(I am not kidding)

  CISO "in residence" program in Howard County, Maryland.

According to the article:- 

The program, known as HOCO CISO, is currently providing "virtual" CISOs that offer security guidance to member companies of the Howard Tech Council (HTC) that do not have their own CSO or CPO. All organizations have to do is submit a request for counsel from the program, and one of the virtual CISOs on call will contact them to discuss a strategic security approach.

The Howard Tech Council has an affinity group known as HACKIT (Howard County Affinity for Cyber Knowledge and Intelligence Technologies/Talks), and the leaders of the group serve as the virtual CISOs that provide consultations.

"Every one of our virtual CISOs works on a volunteer basis," said Taule. "The intent here is to provide this guidance at essentially no cost. It's all part of our mission to give back."

In terms of the type of consultations that organizations will receive from the virtual CISOs, the advice is intended to help stroke that perfect balance between strong protection and optimizing security spending. The advice is the key here, not specific security services; if a company is looking to have some pen testing done, for service.

The links below has more information:

http://www.csoonline.com/article/750179/hoco-ciso-program-breaking-ground-with-virtual-cisos

Interim Solution - Temp Fix available for an Unpatched vulnerability in MS Word

According to the article:- 

Microsoft announced today that an unpatched vulnerability in Microsoft Word is being exploited in the wild.


Microsoft also says that Microsoft Outlook could also be exploited with such an RTF file if Word were set as the viewer for Outlook. In the default configuration Word is the viewer in Outlook 2007, 2010 and 2013.


Microsoft Security Advisory Link
http://technet.microsoft.com/en-us/security/advisory/2953095


The link below has more Details and the "FIX IT" Solution:

https://support.microsoft.com/kb/2953095

Android Vulnerability - If exploited - Reboot endlessly or lose all user data (recovery)

Sounds nasty but, I am not sure how easy it is to exploit.

According to the article:- 

We believe that this vulnerability may be used by cybercriminals to do some substantial damage on Android smartphones and tablets, which include 'bricking' a device, or rendering it unusable. 

"An even worse case is when the malware is written to start automatically upon device startup," they said. "Doing so will trap the device in a rebooting loop, rendering it useless."

The only method to recover from such an attack would be to perform a factory reset from the bootloader options, but this implies deleting all user data and preferences stored on the device including contacts, photos and files, the Trend Micro researchers said.

The links below has more information:

http://www.csoonline.com/article/750181/rogue-apps-could-exploit-android-vulnerability-to-brick-devices