Anonymous Ukraine claims it's published "more than 800 million credit cards" (Risk Based Security says 955,579). Most of the data belong to Russian Visa, Mastercard, American Express, and Discover cardholders. Anonymous Ukraine doesn't claim, at least for now, any particular political objective.

The threat to Windows XP manifests itself in exploits. Symantec finds "Plotus," crimeware that enables thieves to steal cash from compromised ATMs running XP. The theft is initiated by SMS.

The Gameover Zeus Trojan, specializing in web injections for man-in-the-browser attacks, has been detected pursuing consumers of online employment services. Jobseekers using both CareerBuilder and Monster are affected.

Exploitation of the Microsoft Word/Outlook zero-day continues. Users are advised to apply Microsoft's (quickly developed) mitigation.

Analysts have speculated at length (and sometimes informatively) on hacking as a possible cause of the loss of flight MH370. It's appropriate, however, to temper fear of avionics hacking with a realistic appraisal of the risks. Boeing, which has obviously thought a lot about that risk, explains why a cyber attack on an airliner is a very difficult proposition.

Symantec finds a worm, "Linux.Darlloz," infesting the Internet-of-things.

Malware infection rates vary worldwide, but the Middle East's run high.

RAND's cyber threat study prompts somber reflection on how black markets keep criminal innovation inside defensive OODA loops. The problem's not new: a 2008 NRAC report explains how it works.

Attack information sharing remains too aspirational, but a new anonymization engine seeks to change that.

In the US, President Obama announces his proposed electronic surveillance reforms.