Unnamed researchers allege evidence that BT installed firmware backdoors connecting its modems to GCHQ and possibly NSA surveillance operations.
A German researcher reports a remote code execution vulnerability in eBay. Security researchers track ransomware to its (largely Russian) sources. Rogue AV signed with stolen certificates surges in the wild.
The "Advanced Power" botnet targets Firefox users, using them in an automated scan for sites vulnerable to data theft. (Note: automated cyber crime calls for automated reverse engineering in response.)
Criminals are reverse-engineering popular Android and iOS apps, the better to infect the unwary.
Versions of the "Chewbacca" Trojan have added Tor to their dropper.
An Android botnet (apparently the work of Chinese criminal gangs) is stealing SMS messages in Korea. The goal is theft, not espionage.
Small and mid-sized US defense contractors are expected to be most affected by emerging NIST cyber security standards. Lockheed Martin's CEO sees surveillance controversy having little effect on demand for cyber services and solutions.
In the US, contents of the Presidential panel on intelligence and privacy slowly leak out, and skeptics remain skeptical (we await release of the report). The Defense Department appoints a high-level cyber lead. NRO takes point on Intelligence Community networking.
A US Federal court finds NSA bulk collection in violation of the Fourth Amendment but, given the novelty of the problem, gives the Government the opportunity to appeal. Opinions vary on the effect of the ruling, but it seems clear the future of surveillance will be significantly decided in court.