L33tdawg: As seen at #HITB2016AMS - Peering into the Depths of TLS Traffic in Real-Time
Security firm Bitdefender has found a vulnerability in public cloud infrastructures which it said allows a third party to eavesdrop on communications encrypted with transport layer security (TLS) protocol.
Digital megabreaches have lately become so commonplace as to be almost indistinguishable on the alarm scale—a hundred million passwords stolen from one social media service one day, a few hundred million more the next. It all becomes a depressing blur. But not all password disasters are equally disastrous. And the difference between a Three Mile Island and a Hiroshima sometimes comes down to an arcane branch of cryptography: hashing.
A hacker that has targeted several American social media sites has now hit the Russian version of Facebook.
On the heels of several American social networking site breaches including LinkedIn, Tumblr and Myspace, a hacker has obtained a database containing roughly 171 million user accounts associated with the Russian-based, Facebook-inspired, social networking site VK.com.
“Is your company vulnerable?”
This is one of the first questions any IT pro needs to ask themselves when starting a conversation about cybersecurity in the workplace.
Two researchers from the University of Illinois at Urbana-Champaign have devised a method for turning vibration motors, like the ones found in smartphones, into makeshift microphones, capable of recording the sound around them.
Their method doesn't yield perfect results and also needs physical access to the device, but it puts in place the theoretical details needed to carry out and refine such attacks in the future.