The Register

1. OpenBSD bugs, Microsoft's bad update, a new Nork hacking crew, and more

   Meanwhile, the DOJ sets its sights on money mules

   Welcome to yet another El Reg security roundup. Off we go.…

2. China fires up 'Great Cannon' denial-of-service blaster, points it toward Hong Kong

   Protest organizers come under fire from network traffic barrage

   China is reportedly using the 'cannon' capabilities of its massive domestic internet to try and take down anti-government websites in Hong Kong.…

3. Reasons to be fearful 2020: Smishing, public Wi-Fi, deepfakes... and all the usual suspects

   Too soon for New Year Resolutions?

   Cybercriminals will continue to exploit tried-and-tested fraud methods but also adopt a couple of new takes and targets in the year ahead.…

4. SANS Announces 13th Holiday Hack Challenge and 2nd KringleCon infosec conference

   Sign up, tune in, expand your knowledge, and compete in hacking contests

   Promo  Next week, SANS will launch its second annual KringleCon virtual conference followed shortly thereafter by its 13th Holiday Hack Challenge.…

5. Tricky VPN-busting bug lurks in iOS, Android, Linux distros, macOS, FreeBSD, OpenBSD, say university eggheads

   OpenVPN, WireGuard, IKEv2/IPSec also vulnerable to tampering flaw, we're told

   A bug in the way Unix-flavored systems handle TCP connections could put VPN users at risk of having their encrypted traffic hijacked, it is claimed.…

6. VCs find exciting new way to blow $1m: Wire it directly to hackers after getting spoofed

   Who needs an elevator pitch when you have man-in-the-middle attack?

   A group of hackers used a compromised email account to steal a start-up's $1m venture capital payment.…

7. If there's somethin' stored in a secure enclave, who ya gonna call? Membuster!

   Boffins ride the memory bus past Intel's SGX to your data

   Computer scientists from UC Berkeley, Texas A&M, and semiconductor biz SK Hynix have found a way to defeat secure enclave protections by observing memory requests from a CPU to off-chip DRAM through the memory bus.…

8. Scammy and spammy harassers are chasing veteran pros off crypto-collab platform Keybase

   What happens when you throw your lot in with crypto-coin types

   Collaboration site Keybase, once touted for its encrypted meetup channels and robust developer features, is struggling to ward off an epidemic of harassment and spam brought about by its shift toward cryptocurrency.…

9. Feds slap $5m bounty on 'Evil Corp' Russian duo accused of running ZeuS, Dridex banking trojans

   Account-draining malware masterminds charged but remain in motherland

   US prosecutors have slapped a $5m bounty on the heads of two Russian nationals they claim are part of the malware gang behind the banking trojans ZeuS and Dridex.…

10. How to fool infosec wonks into pinning a cyber attack on China, Russia, Iran, whomever

    Learning points, not an instruction manual

    Black Hat Europe  Faking digital evidence during a cyber attack – planting a false flag – is simple if you know how, as noted infosec veteran Jake Williams told London's Black Hat Europe conference.…