Jeremy KirkAustralia Correspondent, IDG News Service

Jeremy reports on security and regional news for the IDG News Service.

microsoft don mattrick xbox one launch sad

How hackers built, then sold, a pre-release XBox One to the FBI

Group member Dylan Wheeler said the FBI ended up buying a mockup of the XBox One for $5,000, after gathering enough confidential information to build it themselves.

QNAP TurboNAS TS-251

Shellshock attacks target QNAP's NAS boxes, FireEye says

A backdoor gives hackers full control over the NAS device, according to the security vendor

mobile privacy

Malware program targets Hong Kong protesters using Apple devices

The program is related to an Android one that seeks to spy on activists, Lacoon Mobile Security said

Google triples bug bounty reward range to $15,000 (and sometimes more)

The company says it will even break that ceiling for outstanding reports.

PCWorld News

Shellshock flaw could pose risks to payments industry

No problems have been reported yet, but those in the industry should patch if possible

PCWorld News

EPIC seeks enforcement action over Arizona data breaches

The Maricopa County Community College District lost more than 2.5 million records in two data breaches

shellshock

Apple releases patches for OS X's 'Shellshock' Bash shell vulnerability

The vulnerability posed little risk to most users.

shellshock

Two scenarios that can make OS X vulnerable to the Shellshock Bash bug

Intego has seen some proof-of-concept exploits for OS X using Bash

the jerusalem post malware ads

Malicious ads distributed 'on a large scale' by Zedo, Google's DoubleClick ad networks

The advertisements redirect victims to the Nuclear exploit kit, which tries to install the Zemot malware.

Google to turn on encryption by default in next Android version

greenbot.com

Law enforcement would have to approach a device's owner since the encryption keys are stored on the device

PCWorld News

CloudFlare can provide its caching service without your SSL keys

The company said it has made an encryption breakthrough that will put financial institutions at ease

PCWorld News

Encryption goof fixed in TorrentLocker file-locking malware

A new variant of TorrentLocker fixes a problem that allowed encrypted files to be freed

PCWorld News

US military unaware of Chinese attacks against transport contractors

The Defense Department has been ordered to close gaps in how cyber incidents are reported

PCWorld News

Apple turns on iCloud two-step verification after nude selfie scandal

Two-step verification is not mandatory though Apple recommends it

PCWorld News

Hackers accessed Goodwill hosting provider for 18 months before card breach

C&K Systems, which provided payment technology to Goodwill, said two other unnamed businesses were also affected