Skip to main content

Security

Hacker breaches security firm in act of revenge

posted onJuly 13, 2020
by l33tdawg
Credit: ZDNet

A hacker claims to have breached the backend servers belonging to a US cyber-security firm and stolen information from the company's "data leak detection" service.

The hacker says the stolen data includes more than 8,200 databases containing the information of billions of users that leaked from other companies during past security breaches.

Yahoo engineer hacked 6,000 accounts looking for homemade porn

posted onJuly 8, 2020
by l33tdawg
Credit: metro.co.uk

Reyes Daniel Ruiz, 34, will face no jail time for the offence which saw him abuse his position to hack 6,000 accounts of Yahoo Mail users.

He has been sentenced to five years of probation and home confinement and ordered to pay a $5,000 fine and $118,456 repatriation to Yahoo – where he worked as an engineer from 2009 to 2019.

Hackers Are Exploiting a 5-Alarm Bug in Networking Equipment

posted onJuly 6, 2020
by l33tdawg
Credit: Wired

Any company that uses a certain piece of networking equipment from Seattle-based F5 Networks had a rude interruption to their July 4 weekend, as a critical vulnerability turned the holiday into a race to implement a fix. Those who haven't done so by now may now have a much larger problem on their hands.

North Korean hackers linked to Magecart attack spree

posted onJuly 6, 2020
by l33tdawg
Credit: IT Pro

North Korean hackers with ties to Lazarus Group have pivoted to skimming online shopping platforms in recent months, following in the footsteps of the Magecart hacking collective.

Security researchers have found links between recent global skimming activity and previously documented North Korean hacking operations, particularly cyber criminals linked with the group known as Lazarus, or HIDDEN COBRA.

An old piece of Android malware is back and more dangerous than before

posted onJuly 6, 2020
by l33tdawg
Credit: BGR

An old and dangerous piece of Android malware called FakeSpy has resurfaced in a big way, according to a new report from Cybereason. FakeSpy, which was first discovered by security researchers nearly three years ago, is a particularly nasty piece of malware designed to steal a user’s text messages, financial data, bank login information, app data, contact lists, and more.

F5 patches vulnerability that received a CVSS 10 severity score

posted onJuly 6, 2020
by l33tdawg
Credit: ZDNet

F5 Networks, one of the world's largest provider of enterprise networking gear, has published a security advisory this week warning customers to patch a dangerous security flaw that is very likely to be exploited.

The vulnerability impacts the company's BIG-IP product. These are multi-purpose networking devices that can work as web traffic shaping systems, load balancers, firewalls, access gateways, rate limiters, or SSL middleware.

New Apple macOS Big Sur feature to hamper adware operations

posted onJuly 6, 2020
by l33tdawg
Credit: ZDNet

With macOS 11, also known as Big Sur, Apple has removed the ability to install macOS profile configurations from the command-line.

This ability was previously a core feature of macOS' enterprise package, which allows system administrators to deploy new configurations company-wide via automated scripts.

How to Passcode-Lock Any App on Your Phone

posted onJuly 6, 2020
by l33tdawg
Credit: Wired

You are, we hope, already protecting your phone with a PIN, a fingerprint, or a face (or all three), but sometimes you'll want to add an extra barrier to particular apps—if you're lending your phone to a friend, say, or if your kids or partner are always borrowing your phone for whatever reason.

New hack runs homebrew code from DVD-R on unmodified PlayStation 2

posted onJune 29, 2020
by l33tdawg
Credit: Flickr

Nearly 20 years after its initial release, a hacker has found a way to run homebrew software on an unmodified PlayStation 2 using nothing but a carefully burned DVD-ROM.

Previous efforts to hack the PS2 relied on internal modifications, external hardware (like pre-hacked memory cards and hard drives), or errors found only on very specific models of the system. The newly discovered FreeDVDBoot differs from this previous work by exploiting an error in the console's DVD video player to create a fully software-based method for running arbitrary code on the system.

How to Get Safari's New Privacy Features in Chrome and Firefox

posted onJune 29, 2020
by l33tdawg
Credit: Wired

Apple just unveiled a raft of changes coming with the new macOS Big Sur later this year. Along with the visual redesign, the introduction of Control Center, and upgrades to Messages, the built-in Safari browser is getting new-and-improved privacy features to keep your data locked away.

You don't have to wait for macOS Big Sur to drop to get a lot of these upcoming features though—both Mozilla Firefox and Google Chrome have similar features, or they can with the help of a third-party extension. Here's how you can get Firefox or Chrome up to par with Safari in macOS Big Sur today.