Alisa Esage G (Page 130)

Working as a cyber security solutions architect, Alisa focuses on application and network security. Before joining us she held a cyber security researcher positions within a variety of cyber security start-ups. She also experience in different industry domains like finance, healthcare and consumer products.

iPhone passcode bypassed with NAND mirroring attack

On: September 21, 2016

In: Incidents, Mobile Security, Vulnerabilities

FBI says it’s impossible but Cambridge computer security expert proves them wrong. Passcodes on iPhones can be hacked using store-bought electronic components worth less than $100 (£77), according to oneRead More →

The Spider That Crawls the Dark Web Looking for Stolen Data

On: September 20, 2016

In: Important, Incidents, Vulnerabilities

A start-up alerts organizations when their sensitive information pops up for sale online. When police officers respond to a theft or a mugging, they’ll usually ask for the serial numbersRead More →

Ransomware is lucrative: Attacker’s profits near $100 million

On: September 20, 2016

In: Malware

Hackers are increasingly targeting healthcare institutions with malware because of their poor cyber-security posture, reliance on legacy IT systems, third-party services and the need to access information as soon asRead More →

Car Hacking Research: Remote Attack Tesla Motors

On: September 20, 2016

In: Incidents, Vulnerabilities

With several months of in-depth research on Tesla Cars, we have discovered multiple security vulnerabilities and successfully implemented remote, aka none physical contact, control on Tesla Model S in bothRead More →

iSpy Keylogger

On: September 20, 2016

In: Incidents, Malware

Keyloggers have always been present in attackers’ toolkits. They give attackers the power to record every keystroke from a victim’s machine and steal sensitive information. Zscaler ThreatLabZ recently came acrossRead More →

FACEBOOK FIXES VULNERABILITY THAT LED TO ACCOUNT TAKEOVER, PAYS RESEARCHER $16K

On: September 20, 2016

In: Important, Incidents, Vulnerabilities

Facebook quickly resolved a vulnerability in its Business Manager tool late last month that could have let an attacker take over any Facebook page. Arun Sureshkumar, a security researcher in India, disclosed theRead More →

Boffins analyzed EXIF metadata in photos on principal blackmarkets

On: September 19, 2016

In: Important, Incidents, Malware, Vulnerabilities

Two researchers have analyzed images Exif metadata included in the photos used by crooks to advertise their products on black marketplaces in the dark web. Darknets are a privileged environmentRead More →

Nearly 800,000 FTP Servers Accessible Online Without Authentication

On: September 19, 2016

In: Vulnerabilities

Very few have write access enabled, though. A recent brute-force scan of FTP servers available online via an IPv4 address revealed that 796,578 boxes can be accessed without the needRead More →

CVE-2016-6415 – CISCO confirms a new Zero-Day linked to Equation Group hack

On: September 19, 2016

In: Incidents, Vulnerabilities

Cisco revealed the existence of another zero-day vulnerability, tracked as CVE-2016-6415, in the Equation Group archive leaked by the Shadow Broker hackers. This summer a group of hackers known as ShadowRead More →

H1N1 Malware Adds Support for Infostealing Features, UAC Bypass

On: September 19, 2016

In: Data Security

This blog is the first in a 3 part series that will provide an in-depth technical analysis on the H1N1 malware. I’ll be looking at how H1N1 has evolved, its obfuscation,Read More →

HDDCryptor Ransomware Overwrites Your MBR Using Open Source Tools

On: September 19, 2016

In: Malware

HDDCryptor, sometimes spelled HDD Cryptor and also identified as Mamba, is a new ransomware variant that rewrites a computer’s MBR (Master Boot Record) boot sectors and locks users out ofRead More →

PSA: DetoxCrypto Ransomware imitating Malwarebytes

On: September 17, 2016

In: Malware

Scammers will always try and imitate legitimate tools and services in an effort to trick people into harming their accounts and devices. If it isn’t fake logins, it’s dubious linksRead More →

NAND mirroring – Unlock San Bernardino shooter’ iPhone with just $100

On: September 17, 2016

In: Mobile Security

A researcher has demonstrated that the NAND mirroring technique was able to bypass the passcode retry limitations on the San Bernardino shooter’s iPhone. The battle between the FBI and Apple for unlockingRead More →

LuaBot Author Says His Malware Is “Not Harmful”

On: September 17, 2016

In: Malware

Author says he’s not interested in launching DDoS attacks. Two weeks ago, a security researcher that goes by the name of MalwareMustDie had come across a new Linux trojan that accordingRead More →

BUGS IN SIGNAL MESSAGING APP CORRUPT ATTACHMENTS, CRASH APP

On: September 17, 2016

In: Mobile Security, Vulnerabilities

Makers of the mobile encrypted chat app Signal say they have fixed vulnerabilities in the Android version of the messaging app that allowed attackers to corrupt encrypted attachments and remotely crash the application.Read More →

Mozilla plans Firefox fix for same malware vulnerability that bit Tor

On: September 17, 2016

In: Malware, Vulnerabilities

Weakness in certificate pinning protections may open users to MitM attacks. Mozilla officials say they’ll release a Firefox update on Tuesday that fixes the same cross-platform, malicious code-execution vulnerability patched FridayRead More →

Hackers Actively Scanning Drupal Sites for Vulnerability Patched in July

On: September 16, 2016

In: Vulnerabilities

Attackers looking for vulnerable Drupal 7.x sites. A security flaw patched on July 13 in core modules built into the Drupal CMS are being exploited in live attacks, according to JohannesRead More →

Windows Safe Mode Can Be Used to Steal PC Logins, Disable Antivirus Software

On: September 16, 2016

In: Incidents

Safe Mode proves to be a valuable tool for hackers.Research published by CyberArk, a US cyber-security vendor, reveals various attack scenarios that leverage Windows Safe Mode to carry out maliciousRead More →

A backdoor on Xiaomi device allows silent and remote deliver of any app

On: September 16, 2016

In: Malware

A Dutch Computer Science student discovered the presence of a backdoor that could allow an attacker to silently install any app on Xiaomi phones. A Dutch Computer Science student, Thijs Broenink,Read More →

Mamba: The new Full Disk Encryption Ransomware Family Member

On: September 16, 2016

In: Incidents, Malware

A Brazilian Infosec research group, Morphus Labs, just discovered a new Full Disk Encryption (FDE) Ransomware this week, dubbed Mamba. Mamba, as they named it, uses a disk-level encryption strategyRead More →

Alisa Esage G (Page 130)

Cyber Security Channel