Linux Hacks & Cracks - Page 23

Discover Hacks/Cracks News

Cyberattack disrupted Baltimore emergency responders

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

There appears to be no honor among thieves. Threat actors have been cashing in on hacking and cyberattacks for years. Pillaging bank accounts, stealing identities, selling access to botnets to disrupt websites -- the possibilities are endless.

LinuxSecurity.com Team
Mar 28, 2018

As predicted, more branch prediction processor attacks are discovered

Researchers from the College of William and Mary, Carnegie Mellon, the University of California Riverside, and Binghamton University have described a security attack that uses the speculative execution features of modern processors to leak sensitive information and undermine the security boundaries that operating systems and software erect to protect important data.

LinuxSecurity.com Team
Mar 27, 2018

Thousands of etcd installs are leaking secret server keys online

Thousands of servers running etcd are exposing user credentials publicly on the Internet. According to security researcher Giovanni Collazo, a quick query made through the Shodan search engine revealed a total of 2,284 etcd servers which are leaking credentials, including the passwords and keys required for cms_admin, mysql_root, and postgres server infrastructure.

LinuxSecurity.com Team
Mar 26, 2018

A “tamper-proof” currency wallet just got backdoored by a 15-year-old

For years, executives at France-based Ledger have boasted their specialized hardware for storing cryptocurrencies is so securely designed that resellers or others in the supply chain can't tamper with the devices without it being painfully obvious to end users.

LinuxSecurity.com Team
Mar 21, 2018

Open-source Exim remote attack bug: 400,000 servers still vulnerable, patch now

Admins are being urged to update email server program Exim, patched in February, to close a remote execution flaw.

LinuxSecurity.com Team
Mar 07, 2018

Hacking operation uses malicious Word documents to target aid organisations

A newly uncovered 'nation-state level' cyber espionage operation has targeted humanitarian aid organisations around the globe via the use of backdoors hidden within malicious Word documents.

LinuxSecurity.com Team
Mar 05, 2018

Hackers use anti-adblocking service to deliver nasty malware attack

More than 500 websites that used a free analytics service inadvertently exposed their visitors to a nasty malware attack made possible by a hack of PageFair, the anti-adblocking company that provided the analytics.

LinuxSecurity.com Team
Nov 04, 2015

Hacking Team returns with encryption cracking tool pitch to customers

As law enforcement grumbles over the uptake in encryption services offered by technology firms, Hacking Team is keen to get on in the game and restore its client list through a new set of encryption-breaking tools.

LinuxSecurity.com Team
Nov 02, 2015

000webhost hacked, 13 million customers exposed

Free website hosting service 000webhost has suffered a data breach which has placed the service's security practices under scrutiny. 000webhost is a free web hosting service which supports both PHP and MySQL, catering for millions of users worldwide. On Wednesday, the firm told users in a Facebook message that the company had suffered a databreach on its main server.

LinuxSecurity.com Team
Oct 29, 2015

Webmasters have only hours to deploy patches, Joomla incident shows

Four hours -- that's the time Joomla website owners had to apply a patch recently before attackers started to exploit the flaw it fixed. Those who still haven't updated their websites are likely to find them compromised.

LinuxSecurity.com Team
Oct 27, 2015

15-year-old arrested over TalkTalk hack

A 15-year-old teenager has been arrested in Northern Ireland by law enforcement over their alleged role in the TalkTalk hack. In a statement released late Monday, the UK Metropolitan Police force said the Police Service of Northern Ireland (PSNI) and detectives from the Metropolitan Police Cyber Crime Unit (MPCCU) executed a search warrant and arrested a 15-year-old boy in County Antrim, Northern Ireland.

LinuxSecurity.com Team
Oct 27, 2015

Is it still possible to do phone phreaking? Yes, with Android on LTE

In the 1960s and 70s, technically savvy enthusiasts sought to game telecommunications systems to make free calls, keeping telecom engineers on their toes.

LinuxSecurity.com Team
Oct 23, 2015

10-Second Hack Delivers First Ever Malware to Fitness Trackers

A security researcher has developed a method by which one can exploit a vulnerability in FitBit fitness trackers and subsequently deliver malware to the target device in 10 seconds.

LinuxSecurity.com Team
Oct 21, 2015

The first rule of zero-days is no one talks about zero-days (so we

How do you defend yourself against the unknown? That is crux of the zero-day vulnerability: a software vulnerability that, by definition, is unknown by the user of the software and often its developer as well.

LinuxSecurity.com Team
Oct 20, 2015

Magento sites targeted by Neutrino exploit kit

Some websites running the e-commerce platform Magento appear to have been infected with code that directs victims to the Neutrino exploit kit. It's not exactly clear how the Magento sites were infected, wrote Denis Sinegubko, a senior malware researcher with Sucuri, a Delware-based security company.

LinuxSecurity.com Team
Oct 19, 2015

"USB Killer" flash drive can fry your computer

USB sticks have long been a mechanism for delivering malware to unsuspecting computer users. A booby-trapped flash drive, for instance, was the means by which the US and Israel reportedly infected Iran's Natanz uranium enrichment facility with the Stuxnet worm. And, in case anyone thought USB stick attacks had lost their novelty, last year's Bad USB proof-of-concept exploit delivered a highly programmable attack platform that can't be detected by today's defenses.

LinuxSecurity.com Team
Oct 15, 2015

Hackers Can Silently Control Siri From 16 Feet Away

Siri may be your personal assistant. But your voice is not the only one she listens to. As a group of French researchers have discovered, Siri also helpfully obeys the orders of any hacker who talks to her

LinuxSecurity.com Team
Oct 14, 2015

25-GPU cluster cracks every standard Windows password in

A password-cracking expert has unveiled a computer cluster that can cycle through as many as 350 billion guesses per second. It's an almost unprecedented speed that can try every possible Windows passcode in the typical enterprise in less than six hours.

LinuxSecurity.com Team
Oct 09, 2015

This vigilante virus protects you against malware attacks, quotes Richard Stallman

Forget about traditional PC malware: Infecting routers and other Internet-connected devices is the new hotness among malicious actors, given its effectiveness and relative ease. But there

LinuxSecurity.com Team
Oct 05, 2015

WinRAR Vulnerability Is Complete Bullshit

So Twitter exploded earlier with calls of a remote code execution WinRAR vulnerability leaving half a BILLION users open for some hardcore exploitation.

LinuxSecurity.com Team
Oct 01, 2015

Linux Hacks & Cracks - Page 23

Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions

Perfctl Unveiled: Risks, Detection, and Proactive Defense Measures

Unveiling the WolfsBane Backdoor: Gelsemium's Linux Variant of Gelsevirine