L33tdawg: Speaking of hackathons, registration for #HackWEEKDAY at HITB Haxpo is still open with some awesome prizes up for grabs including of course EUR1337 for the 'most l33t coder' sponsored by... read more
Featured Slideshow
Security
Security
Critical Java Update Plugs 37 Security Holes
Submitted by l33tdawg on Thu, 2014-04-17 19:39
Oracle has pushed a critical patch update for its Java SE platform that fixes at least 37 security vulnerabilities in the widely-installed program. Several of these flaws are so severe that they are likely to be exploited by malware or attackers in the days or weeks ahead. So — if you have Java installed — it is time to update (or to ditch the program once and for all).
Top Chinese hacking team reveals members' identities
Submitted by l33tdawg on Thu, 2014-04-17 07:14
The Keen, a top hacking team which took down Windows 8.1. Adobe Flash in just 15 seconds and Apple’s Safari Mac OS X Mavericks system in only 20 seconds during a Pwn2Own Vancouver event in March, has divulged the identity of its members, a Chinese newspaper reported on 13 April 2014.
“50 percent of us are the top scoring students in the national college entrance examination. 50 percent are majored in mathematics, and 50 percent are from Microsoft,” said Lv Yiping, key member of the Keen and co-founder and chief operating officer of the team’s Shanghai-based parent company.
Single step authentication on Galaxy S5 leaves PayPal accounts open to abuse say German researchers.
Submitted by l33tdawg on Thu, 2014-04-17 07:11
PayPal was left fighting a rear-guard action last night after it emerged the fingerprint scanner seen on the Samsung Galaxy 5 smartphone can easily be bypassed.
Germany's Security Research Labs says the spoofing system allows access to a user's PayPal account, which is an important issue since a key feature of the scanner is one-step access to the PayPal money payment system - effectively replacing the user's ID and password with a fingerprint swipe.
Lacie confesses to year-long data breach as hackers harvest customers' details
Submitted by l33tdawg on Thu, 2014-04-17 07:01
Lacie has revealed a security breach affecting visitors to its website, who might have had their credit card details swiped.
A hacker repeatedly exploited a flaw in the Lacie website, using malware to gain access to customer details. The incident only came to light when the US Federal Bureau of Investigation (FBI) contacted Lacie on 19 March.
Canadian Heartbleed hacker arrested, charged in connection to malicious bug exploit
Submitted by l33tdawg on Thu, 2014-04-17 06:57
A 19-year-old student has been arrested for allegedly exploiting the Heartbleed vulnerability to steal taxpayer data from as many as 900 Canadians, authorities said Wednesday.
The arrest of Stephen Arthuro Solis-Reyes by the Royal Canadian Mounted Police marks the first time authorities anywhere have publicly levied charges in connection to the malicious exploitation of a defect in the widely used OpenSSL cryptography library.