Skip to main content

Security

Thousands of Australian computer log-ins up for sale on dark web

posted onAugust 30, 2016
by l33tdawg

Computers from a federal research network, a peak sporting body, a school and a local council are among tens of thousands of machines which have been hacked and had their login details put up for sale in a dark web marketplace, a Four Corners investigation has revealed.

Other major companies including Jetstar and Suzuki have systems suspected to have been compromised, but both companies deny being breached.

Kaspersky fixes antivirus crash bug

posted onAugust 30, 2016
by l33tdawg

Internet and antivirus giant Kaspersky has fixed a number of flaws that could be used to crash its flagship software, rendering its protection useless.

Talos Group, the security arm of Cisco, said in a blog post that three of the flaws were denial-of-service flaws that could crash the software, and the fourth could leak data, which may allow an attacker to exploit a local system.

Though the flaws are "not particularly severe", the security team warned that security systems can become targets of attacks.

Leaked NSA Zero Days Already Being Exploited By Whoever Thinks They Can Manipulate Them

posted onAugust 30, 2016
by l33tdawg

There are still people out there who think it's a good idea for the government -- whether it's the FBI, NSA, or other agency -- to hoover up exploits and hoard vulnerabilities. This activity is still being defended despite recent events, in which an NSA operative apparently left a hard drive full of exploits in a compromised computer. These exploits are now in the hands of the hacking group that took them… and, consequently, also in the hands of people who aren't nearly as interested in keeping nations secure.

Sri Lanka police arrest teen over hacking president's website

posted onAugust 30, 2016
by l33tdawg

Sri Lanka police on Monday arrested a 17-year old school boy on suspicion of hacking into the president's official website, demanding that his university entrance examination dates not be changed, officials said on Monday.

The website of President Maithripala Sirisena, www.president.gov.lk, was first hacked on Thursday and then again on Friday.

More than 86% of the world’s iPhones can still be hacked with just a text

posted onAugust 30, 2016
by l33tdawg

More than 86% of Apple iPhones in the world are apparently still vulnerable to a security flaw that allows a hacker to completely take over the device with just a text message, according to data from mobile and web analytics firm MixPanel.

A surprising number of people have not yet updated the iPhone’s mobile operating system — despite an urgent warning to do so coming from Apple last week — in light of a major security problem the company was forced to correct in iOS 9.3.5.

Hackers had a chance to hamper voting by deleting records

posted onAugust 30, 2016
by l33tdawg

In June, attackers managed to steal administrative login credentials from a county official in the U.S. A U.S. cybersecurity monitor on Monday described another breach of a voter election system just after after a leaked FBI report revealed two similar attacks.

In June, anonymous hackers stole administrative login credentials in an unnamed county that would have let them delete voter registration records and prevent citizens from casting ballots.

As FBI Warns Election Sites Got Hacked, All Eyes Are on Russia

posted onAugust 29, 2016
by l33tdawg

In any other year, hackers breaking into a couple of state government websites through common web vulnerabilities would hardly raise a blip on the cybersecurity community’s radar. But in this strange and digitally fraught election season, the breach of two state board of election websites not only merits an FBI warning—it might just rise to the level of an international incident.

Meet USBee, the malware that uses USB drives to covertly jump airgaps

posted onAugust 29, 2016
by l33tdawg

In 2013, a document leaked by former National Security Agency contractor Edward Snowden illustrated how a specially modified USB device allowed spies to surreptitiously siphon data out of targeted computers, even when they were physically severed from the Internet or other networks. Now, researchers have developed software that goes a step further by turning unmodified USB devices into covert transmitters that can funnel large amounts of information out of similarly "air-gapped" PCs.

Hacking smart cities: Dangerous connections

posted onAugust 18, 2016
by l33tdawg

L33tdawg: Opposing Force's talk on Abusing Smart Cities happens next Friday, 26th of August at 11:30am at #HITBGSEC

Once just a curiosity for technology enthusiasts, the Internet of Things (IoT) has become mainstream. In fact, the IoT security market is estimated to grow from USD 7.90 billion in 2016 to USD 36.95 billion by 2021, at a CAGR of 36.1%, according to MarketsandMarkets.

Americans want passwords, not biometrics, survey finds

posted onAugust 18, 2016
by l33tdawg

Most people aren’t interested in fingerprint authentication and other biometric logins, a study has found.

Free email portal mail.com and Yougov surveyed over a thousand folks around the world in July and discovered over half (58 percent) prefer traditional passwords.