Untitled @bureauofcybersecurity-blog - Tumblr Blog

SPECTRE THE VULNERABILITY ALLOWS TO BYPASS THE SECURITY OF INTEL SGX

To exploit the vulnerability, the local intruder must be authorized in the system or run a special program. Security researchers at Ohio State University (USA) have discovered a way to bypass the protection of Intel SGX and view protected areas (enclaves) using the Specter vulnerability. Intel SGX is an Intel technology for application developers who need to protect the source code and data from…

View On WordPress

The teenager used social engineering to access the CIA’s secret plans.

A British school-boy passed himself off the head of the CIA, obtained the access to the head’s computer and took possession of the secret plans of the reconnaissance operations in Afghanistan and Iran.

On it informs The Telegraph with the reference to the court records.

The 15-years old Kane Gamble living in Leicestershire with his mother used methods of social engineering to obtain the access to…

View On WordPress

#CIA #hackers #social engineering

Hackers are using vulnerabilities in MS Office to spread Zyklon the backdoor

The attackers are exploiting three relatively recent vulnerabilities in the MS Office package in spam campaigns aimed at telecommunications firms, as well as enterprises in the insurance and financial sector. As part of the attacks, attackers distribute malicious software Zyklon – a full backdoor that can record keystrokes, collect passwords, and download and install additional plug-ins for crypto…

View On WordPress

#backdoor #backdoors #Microsoft Office #spam #vulnerabilities #Zyklon

Israeli scientists invented the method for detection of spy drons

Israeli experts from Ben-Gurion University and Weizmann Research Institute have developed a technique to determine when a drone is following an object. They suggested creating periodic visual stimuli, for example, outbreaks. According to them, if the unmanned aerial vehicle is actually watching the object, the bitrate of the image will increase significantly. This method works even if the drones…

View On WordPress

#dron #espionage

MICROSOFT HAS ISSUED CORRECTIONS FOR VULNERABILITY MELTDOWN AND SPECTRE

Representatives of the company warned about the incompatibility of patches with some antivirus solutions. Microsoft has released extraordinary security updates that fix the dangerous vulnerabilities of Meltdown and Specter, which affect almost all processors that have been released since 1995. The company did not plan to release updates until next week, but was forced to post corrections after…

View On WordPress

#BSoD #Meltdown #Microsoft #Spectre #updates

VMware has closed three dangerous vulnerabilities in vSphere

VMware, a member of the Dell Technologies group, has released patches for three critical vulnerabilities affecting the vSphere server virtualization platform. These gaps (CVE-2017-15548, CVE-2017-15549, CVE-2017-15550) were covered in vSphere Data Protection (VDP), a solution that provides backup and restore images of virtual machines. Vulnerabilities are affected by VDP versions 6.1.x, 6.0.x and…

View On WordPress

#virtual server #VMware #vSphere #vulnerabilities

EXPLOIT FOR ATTACK TO ROUTERS BY HUAWEI PUBLISHED IN THE PUBLIC DOMAIN

Pastebin the portal has published an exploit, used by malicious software Satori (a version of Mirai) to infect Huawei Home Gateway routers. This was reported by a security researcher named Ankit Anubhav in his blog. The exploit for vulnerability CVE-2017-17215 was used by a hacker under the pseudonym Nexus Zeta to distribute malicious software called Satori, also known as Okiku. According to Maya…

View On WordPress

Dangerous vulnerability was found in Samsung Internet Browser

Vulnerability allows you to steal passwords and cookies when you visit a site controlled by an attacker.

In the browser Samsung Internet Browser, pre-installed on hundreds of millions of Android-devices from Samsung, found a dangerous vulnerability, which allows you to steal passwords and cookies when you visit a site controlled by an attacker.

The vulnerability of CVE-2017-17692 discovered by…

View On WordPress

Thousands of top sites take stealth countermases against blockers for advertising

Advertising blockers of are the serious threat to the business that relies on Internet advertising. In this regard, the sites began to take appropriate measures. Some of them politely ask visitors to add them to the “white” list or disable the blocker, and other ones embed advertising directly into the site. According to a new study by experts at the University of Iowa and the University of…

View On WordPress

#advertising #blockers

Exploit for hacking Sony Playstation 4 is published

A developer under the pseudonym Specter published on the portal GitHub exploit for the Sony PlayStation 4 game console with the firmware version 4.05, which allows executing arbitrary code and jailbreak the console. A developer known as Specter released an exploit for Sony PlayStation 4 on GitHub. As follows from the developer’s statement, the exploit namedobj for the PlayStation 4 with the…

View On WordPress

#exploit #hacking instruments #playstation

Programmer released the first tool for hacking the iPhone X

According to Redmond Pie, a programmer named Jonathan Levin presented a tool which is called LiberiOS for hacking the iPhone X, iPhone 8 and other 64-bit mobile devices by Apple. This is the first public jailbreak tool released since the debut of iOS 11 in September of this year.

As it was noted, LiberiOS can work on all iPhone, iPad and iPod touch devices based on versions of iOS 11 – iOS…

View On WordPress

#Apple #iOS #jailbreak

TP-Link neglects the safety of its customers

The European official sites of the Chinese manufacturer TP-Link lag far behind in the issue of providing new firmware versions in comparison with the resources of other vendors, Norwegian researcher Daniel Aleksandersen found out. The expert was convinced of this on his own experience when he tried to download the firmware for the recently acquired TP-Link repeater from the Norwegian company…

View On WordPress

Intel has fixed a number of critical vulnerabilities in Management Engine.

Intel Corporation has fixed a number of vulnerabilities in various versions of a firmware for a subsystem known as Management Engine (ME) and related components Intel Trusted Execution Engine (SPS) and Server Platform Service (TXE).

In total, 10 problems were detected in the internal audit process of Intel ME. Vulnerabilities affect systems based on 6, 7 and 8 generations of Intel Core…

View On WordPress

#critical vulnerability #Intel #vulnerability

Experts warned Tinder users of the blackmail threat from the "russian" hackers.

Experts warned Tinder users of the blackmail threat from the “russian” hackers.

The National Cyber Security Center (NCSC) of the Great Britain warned of the possibility of hacking user profiles on Facebook and other social networks through the application Tinder. The experts of the center revealed a vulnerability in the protection of the popular dating service, which manifests itself in the process of uploading new photos to the Tinder folder by the user. At this point, a…

View On WordPress

Bank trojan called Terdot can spy for users now.

A complicated bank trojan called Terdot which has been developed on the basis of the notorious Zeus the malware, is back. Now it has new abilities which allow to monitor and modify users’ posts on Facebook and Twitter as well as intercept e-mails.

The trojan has been active since the middle of 2016 and mainly attacks the users in the USA, Canada, the Great Britain, Germany and Australia.

The…

View On WordPress

#bank trojan #malware #Terdot #trojan

The ex-head of the NSA thinks private companies should not answer cyber attacks.

The military subdivision of the Cyber Security of the USA and the ex-director of the National Security Agency, named Keith Alexander, think that the private companies are not entitled to carry on cyber attacks in revenge for hackers.

Keith Alexander states the corporations should not respond by using hacks on the hacks.

“We cannot allow the companies to start a cyberwar, this will lead to the…

View On WordPress

#cyber attacks #cyber security #hack #hack back #hackers #NSA

Vulnerability in Tor Browser allows to determine true IP addresses of the users.

Tor Project the organization has fixed a vulnerability in the Tor browser for Mac and Linux that reveals real IP addresses of users. The problem, called TorMoil, was discovered by the director of the Italian company We Are Segment, Filippo Cavallarin. Last week, the researcher privately informed the Tor Project, and the organization, released an update together with the developers of Firefox (the…

View On WordPress

#fixing vulnerabilities #Tor #vulnerability

Trending Blogs

Recently Viewed Blogs

Untitled