Patent Troll Sues Big Companies over HTTPS
2015-12-02
ig brands are asked to pay royalties for usage of HTTPS A Texas company filed over 60 lawsuits against big brands that utilize HTTPS on their Web servers, arguing itRead More →
Malware That Hides C&C Server on Dropbox Detected in the Wild
2015-12-01
Dropbox abused by Chinese state-sponsored actors.A malware targeting mass media agencies in Hong Kong was discovered by FireEye’s security researchers. This malware, a backdoor, is unique because it hides itsRead More →
WhatsApp is blocking links to a competing messenger app
2015-12-01
This morning, Telegram users on WhatsApp noticed something strange. The chat app was blocking any links to Telegram.me, a rival chat app that grew popular in the wake of earlierRead More →
Hack Brief: Hacker Strikes Kids’ Gadget Maker VTech to Steal 5 Million Accounts
2015-12-01
WE’VE BECOME ACCUSTOMED to massive hacks targeting financial and retail institutions, but a recent digital ransacking of a popular kids’ electronics manufacturer shows that anyone is vulnerable—even children. The HackRead More →
Can’t get a break: Pwned Linux ransomware pwned again, infects 3000
2015-12-01
Versions one, two, decrypted days after launch. Pwned ransomware Linux Encoder has infected 3000 machines in a month, Russian security firm Dr Web says, despite the fact both versions ofRead More →
Hacking Smartwatches – the TomTom Runner
2015-12-01
I intended originally for this series to contain only three posts, and in order to achieve that, this post is longer than anticipated. Here is a table of contents forRead More →
Embedded Devices Share, Reuse Private SSH Keys, HTTPs Certificates
2015-12-01
Researchers have found that thousands of Internet gateways, routers, modems and other embedded devices share cryptographic keys and certificates, exposing millions of connections to man-in-the-middle attacks that open the doorRead More →
Multiple serious vulnerabilities in RSI Videofied’s alarm protocol
2015-11-30
RSI Videofied are a French company that produce a series of alarm panels that are fairly unique in the market. They are designed to be battery powered and send videosRead More →
NSA to shut down bulk phone surveillance program by Sunday
2015-11-30
The U.S. National Security Agency will end its daily vacuuming of millions of Americans’ phone records by Sunday and replace the practice with more tightly targeted surveillance methods, the ObamaRead More →
On China’s fringes, cyber spies raise their game
2015-11-30
By Clare Baldwin, James Pomfret and Jeremy Wagstaff HONG KONG/SINGAPORE (Reuters) – Almost a year after students ended pro-democracy street protests in Hong Kong, they face an online battle againstRead More →
Anonymous Takes Down Five Government Websites in Iceland to Protest Whale Hunting
2015-11-30
Group also goes after the website of a whale hunting company Online activists associated with Anonymous took down five websites belonging to the Icelandic government and two other related sites,Read More →
DecryptorMax Ransomware Decrypted, No Need to Pay the Ransom
2015-11-30
Emsisoft researchers creates decryption tool.Fabian Wosar of Emisoft has created a tool capable of decoding files encrypted by the DecryptorMax ransomware, also known as CryptInfinite. The ransomware gets its nameRead More →
Russians embrace Bitcoins, the West sticks with PayPal
2015-11-28
One day, as you’re busy surfing on one of your favorite online stores, you stumble upon a pair of chic shades … they’re the very ones you’ve been looking for,Read More →
Windows Phone hacked! Unlock Lumia bootloader, get root access, flash custom ROMs
2015-11-28
If you are the type of person that likes to tinker, Linux-based operating systems are for you. You would probably have many hours of fun playing with an Android device orRead More →
Google Translate Website Affected by XSS Bug, Google Says It’s OK
2015-11-28
The bug is in the website’s “translate a document” feature.Madrid-based Francisco Javier Santiago Vazquez, a security auditor for Mnemo, has discovered a cross-site scripting (XSS) vulnerability in Google Translate’s interface.Read More →
When children are breached—inside the massive VTech hack
2015-11-28
4.8 million records from a Hong Kong toy company were compromised. I suspect we’re all getting a little bit too conditioned to data breaches lately. They’re in the mainstream newsRead More →
VPN Vulnerability “Port Fail” Reveals User’s Real IP Address
2015-11-27
Attackers can unmask users hidden under a VPN connection. A vulnerability into how VPN providers deal with port forwarding exposes the real IP address of some users, say the network securityRead More →
ISIS: Ghost Sec, Anonymous hack Islamic State website
2015-11-27
IT’S enough to make Islamic State sit up and take notice, or at the very least get a little hot under the collar. A group associated with activist group AnonymousRead More →
HTTPSohopeless: 26,000 Telstra Cisco boxen open to device hijacking
2015-11-27
Embedded device mayhem as rivals share keys. More than 26,000 Cisco devices sold by Australia’s dominant telco Telstra are open to hijacking via hardcoded SSH login keys and SSL certificates.Read More →
VTS scans Android devices for publicly-known vulnerabilities
2015-11-27
Vulnerability Test Suite (VTS) is a free application for Android that scans devices running the operating system for publicly-disclosed vulnerabilities. Publicly-disclosed vulnerabilities remain a threat months or even years afterRead More →
