Bettercap – Capturing NTLM Hashes
2016-12-19
As many of you who follow me on twitter will know, I’m a big fan of the Bettercap project. Created by @EvilSocket, this tool is a reimagining of the historicRead More →
It’s Now Commonplace for Android Banking Trojans to Include Ransomware Features
2016-12-19
The current generation of Android banking trojans are all equipped with ransomware-like features in order to lock the user’s device, and in some cases encrypt his data. Despite possessing suchRead More →
Indian Institute of Technology Kharagpur hacked by Cryptolulz666
2016-12-19
Cryptolulz666 announced another data breach, he hacked the database of the Indian Institute of Technology Kharagpur, the second of the country. Just after 24 hours of the hack of theRead More →
FBI Arrests Customer of Xtreme Stresser DDoS-for-Hire Service
2016-12-19
The FBI arrested this past week Sean Krishanmakoto Sharma, 26, from La Canada, California, for launching DDoS attacks against Chatango, an online chat service. According to court documents, Sharma, whoRead More →
Hack This: Where To Write Code
2016-12-19
The code itself, the symbols and strings that eventually dictate the behavior of a machine, is one thing, but properly preparing it and executing it requires a dedicated venue. YourRead More →
MICROSOFT PATCHES PUBLICLY DISCLOSED IE, EDGE VULNERABILITIES
2016-12-17
Microsoft today patched a half-dozen critical browser vulnerabilities that have been publicly disclosed, but apparently not used in attacks as of yet. The critical Internet Explorer and Microsoft Edge bulletinsRead More →
Department of Defense Warns Contractors About Iran-Linked Malware
2016-12-17
Shamoon, a piece of malware that tries to turn infected computers into unusable bricks, is back. Earlier this month, a number of cybersecurity firms reported that hackers had used theRead More →
NAGIOS CORE PATCHES ROOT, RCE VULNERABILITIES
2016-12-17
Nagios Core has been updated to take care of two critical vulnerabilities that can be pinned together to attack servers hosting the open source IT infrastructure monitoring software. The flawsRead More →
Security Firms Almost Brought Down Massive Mirai Botnet
2016-12-17
Following a failed takedown attempt, changes made to the Mirai malware variant responsible for building one of today’s biggest botnets of IoT devices will make it incredibly harder for authoritiesRead More →
Home routers under attack in ongoing malvertisement blitz
2016-12-17
DNSChanger causes network computers to visit fraudulent domains. As you read these words, malicious ads on legitimate websites are targeting visitors with malware. But that malware doesn’t infect their computers,Read More →
Hacking Ubuntu Linux distro exploiting the CrashDB code injection issue
2016-12-16
The exploitation of the CrashDB code injection issue could allow an attacker to remotely execute arbitrary code on machines running Ubuntu Linux distro. New problems for Ubuntu Linux distribution, the securityRead More →
Tordow Android Trojan Roots Devices, Steals Photos, Contacts, Chrome Database
2016-12-16
Comodo security researchers have spotted version 2.0 of a deadly Android trojan named Tordow, which first came to light in February this year. The trojan’s main feature is its abilityRead More →
$300 Device Can Steal Mac FileVault2 Passwords
2016-12-16
Swedish hardware hacker Ulf Frisk has published today instructions on how to build and use a $300 device that can retrieve login passwords for Macs protected by Apple’s FileVault2 diskRead More →
0-days hitting Fedora and Ubuntu open desktops to a world of hurt
2016-12-16
If your desktop runs a mainstream release of Linux, chances are you’re vulnerable. If you run a mainstream distribution of Linux on a desktop computer, there’s a good chance securityRead More →
Newly Uncovered Site Suggests NSA Exploits for Direct Sale
2016-12-15
The Shadow Brokers—a hacker or group of hackers that stole computer exploits from the National Security Agency—has been quiet for some time. After their auction and crowd-funded approach for sellingRead More →
Bluetooth-enabled safe lock popped after attackers win PINs
2016-12-15
If you use one, stop now. If you write heist movies, write safe-crackers out of your script. Attackers can locate and pop safes protected with high security commercial locks thanksRead More →
‘Originull’ Bug Allows Hackers To Read All Your Facebook Messenger Chats
2016-12-15
Short Bytes: Security firm Cynet has discovered a critical issue that affects the privacy of 1-billion Facebook Messenger users. Dubbed Originull, this flaw is also expected to affect millions of other websitesRead More →
Yahoo: One Billion More Accounts Hacked
2016-12-15
Just months after disclosing a breach that compromised the passwords for a half billion of its users, Yahoo now says a separate incident has jeopardized data from at least aRead More →
Hacked cheating site Ashley Madison will pay $1.6 million to FTC for breach
2016-12-15
Commission settlement officially $17.5 million, but fine reduced due to inability to pay. Ashley Madison, the dating website for married people seeking extramarital affairs, will pay the Federal Trade Commission (FTC)Read More →
Vulnerability in Joomla Allows Attackers to Reset Passwords and Take Over Sites
2016-12-14
The Joomla Project released version 3.6.5 of the Joomla CMS that addresses three security bugs, of which one can allow attackers to take over vulnerable sites. If this wasn’t badRead More →
