On the heels of the Hacking Team dump, this week’s US-CERT advisory, a cyber-security bulletin which provides a summary of new security vulnerabilities, was about twice its usual size with all the Adobe Level 10 alerts included in the report. Remind me – why are these products still around?
Category: Computers & Programming
Are Wild Neutron’s latest attacks related to the zero-day exploit(s) in Hacking Team’s drop?
Both Kaspersky and Symantec released reports this week pointing out the increase in attacks by Wild Neutron (aka Jripbot, Morpho, or Butterfly). WN had gone mostly dormant (or undetected?) since 2013 after hitting Apple, Facebook, Twitter, and Microsoft using zero-day Java exploits (seeded in the hacked forums of various websites) and the OSX/Pintsized Mac OS…
14 days running a secret Dark Web pedophile honeypot (and why I now think Tor is the devil)
Before discoursing the lengthy analysis of the Dark Web honeypot (the pedophile honeypot in particular), let’s answer the question that is surely on everyone’s mind – did the honeypot allow me to reveal the true identity of the person visiting the site?
JPMorgan Chase security breach not what you think – military attack against key financial institutions could turn over keys to the kingdom.
Although I’m disappointed that JPMorgan Chase delayed the disclosure of the breach that touched more than 83 million U.S. households (they knew about it at least four months ago), I’m even more upset at what they disclosed – that key customer financial data was not stolen. JPMorgan may tout the expertise of their security team…
Heartbleed OpenSSL (SSL/TLS) vulnerability – analysis of a mind-blowingly simple bug
The OpenSSL encryption flaw, known as the Heartbleed bug, is being called one of the biggest security flaws ever seen on the Internet. One security analyst called it “catastrophic” and said that on a scale of 1 to 10, the vulnerability was an 11. The newly discovered vulnerability isn’t “big news” because of its complexity,…
Evidence emerges suggesting hijacking of huge chunks of Internet traffic
Researchers from network intelligence firm Renesys published an assessment this week that documents dozens of distinct hijacking events within the last few months where huge chunks of Internet traffic were purposefully diverted through distant service providers leading them to speculate that the traffic may have been “surreptitiously monitored or modified before being passed along to…
Tango Tor down – U.S. authorities take down world’s largest Deep Web host (and dose Tor with uncloaking malware)
Word has hit the streets that the FBI has arrested Eric Eoin Marquesm the alleged owner of Freedom Hosting, the largest Deep Web hosting platform on the planet. The arrest was made in Ireland with the takedown reportedly disrupting the entire Tor network which is, sadly, the home of the majority of all illegal online…
Illuminati obsessed hacker – mysterious “Guccifer” entertains while outing prominent politicians and media personalities
His screen name is a bit humorous – and a bit scary. Nobody knows where the Illuminati-obsessed hacker originates from (IP addresses originate from Russia but language appears to be distinctly American). And his hacking expertise is well worth noting, especially if you are a politician that has found yourself in his cross-hairs. Right now,…
Digital ATM heist nets thieves $45 million – biggest ATM fraud in history
Federal prosecutors in Brooklyn have revealed that an international team of thieves had stolen close to $45 million in a matter of hours using hacked ATM debit cards. In New York City alone, thieves struck 2,094 ATM machines in 10 hours withdrawing $2.4 million in cash. It was the largest ATM heist in history.
Corps of Engineers confirms that sensitive National Inventory of Dams (NID) database was hacked by Chinese
The Army Corps of Engineers has admitted that an unauthorized Chinese user has hacked the National Inventory of Dams (NID) database in January 2013 and that the attack was not discovered until sometime in April. There are about 8,100 major dams in the U.S., and the NID database has information about all of them, including…
