2014
Case study of stolen password to e-mail account
On CZ.NIC's blogpost our collegue Pavel Basta published a case study of stolen password to e-mail account. What are the consequences of accesing e-ma…
Various reaction on the affects of Heartbleed Bug
Concerning the seriousness of new vulnerability The Heartbleed Bug in OpenSSL people are urged to change their passwords on all updated web portals. …
Adobe patches serious vulnerabilities
Adobe released an update for both its Flash Player and AIR software patching four critical vulnerabilities. The Flash Player vulnerabilites carry the…
New version of Wordpress was released
New stable version of Wordpress 3.8.2 is available. It releases fixes for number of weaknesses. One of them could let an attacker force their way int…
Serious vulnerability in OpenSSL
New vulnerability named The Heartbleed Bug was discovered in OpenSSL 1.0.1. through 1.0.1f(inclusive). Unfortunatelly these version were rapidly dep…
Apple released fixes for more than 25 flaws in Safari
Apple has updated its Safari browser and created 25 security fixes. Some of the vulnerabilities can lead to remote code execution or cause a denial o…
Proof-Of-Concept 30 Oracle Java Cloud Services flaws released
Polish start-up company released technical details and Proof-of-Concept codes for 30 security vulnerabilities discovered in the environment of Oracle…
Millions of Vulnerable Routers aiding Massive DNS Amplification DDoS Attacks
The new research carried out by DNS providers Nominum, provides ISPs with DNS based analytics and monetization solutions, revealed that the DNS-based…
Most Sophisticated Android Bootkit Malware ever Detected; Infected Millions of Devices
Hardly two month ago we reported about the first widely spread Android Bootkit malware, dubbed as 'Oldboot.A', which infected more than 500,000 Smart…
F-Secure has discovered MiniDuke malware samples in the wild
Security Experts at F-Secure discovered a collection of pdf documents, that had references to Ukraine, containing MiniDuke malware samples.
E-mail adresses of LinkedIn users uncovered
Through free plug-in in browser it is possible to uncover e-mail adrress of LinkedIn user. Plug-in named Sell Hack will pop up a "hack in" button on …
New security flaw in WinRAR
Israeli researchers have discovered new security flaw which might be exploited in all version of WinRAR. Vulnerability named "WinRAR file extension s…
Android Apps Hide Crypto-Currency Mining Malware
Apps downloaded by millions from Google Play and Spanish software forums include hidden altcoin-mining software. But criminals aren't getting rich qu…
Philips SmartTV susceptible to serious hack according ReVuln experts
Researchers at ReVuln firm demonstrated how to exploit the last firmware update for Philips SmartTV to steal user’s cookies and other sensitive data.
Google Says Public DNS Intercepted by ISPs in Turkey
Google on Saturday warned that its Public Domain Name System (DNS) service has been intercepted by the majority of Internet Service Providers (ISPs) …
Cisco patches six security flaws that posed DoS risk
Patches for six vulnerabilities that could be exploited without authentification were released by Cisco as a part of "patch Thursday." Vulnerabilitie…
Multiple Vulnerabilities in Firefox for Android
Security researchers at IBM have discovered new vulnerabilities in Firefox for Android that allows a malicious application to leak the sensitive info…
CASH! CASH! Hacking ATM Machines with Just a Text Message
Security researchers at Antivirus firm Symantec claimed that hackers can exploit a weakness in Windows XP based ATMs, that allow them to withdraw cas…
Another zero-day vulnerability is threatening the Microsoft world
Microsoft issued a security advisory for the presence of a zero-day vulnerability in Microsoft Word products which allows a remote code execution.
Android OS Update Process Vulnerable to Exploitation
A new type of security vulnerability has been found in the Android system’s updating process, which can be exploited to steal sensitive data, alter s…
WordPress hosting: Do not try this at home!
Compromised WordPress blogs were used to host nearly 12,000 phishing sites in February. This represents more than 7% of all phishing attacks blocked …
A Guide to Debugging Android Binaries
In this paper, I’ll describe how to start reverse code engineering in Android devices.
New variant of Zorenium Bot can infect iOS devices
Security analysts at SenceCy which are monitoring the advancement of a new Zorenium Bot discovered that it is able to infect also iOS devices.
Tor Browser in Apple’s App Store Still Packed with Spyware and Adware
The Tor Browser in Apple’s app store is allegedly still packed with spyware and adware despite repeated complaints, according to Softpedia. The tech …
National Geographic Fans Targeted with Mobile Scareware
Mobile users of the National Geographic website are targeted with scareware saying they have been infected with malware, according to the Bitdefender…
The end of support for Windows XP
We would like to kindly inform you about the end of technical support for Windows XP and possible threats that come along with that. Technical suppor…
Google Public DNS Server Traffic Hijacked, Millions users impacted
The last successfully attack against Google occurred yesterday, the Google’s public DNS (Domain name system) was hit, the Internet monitoring firm B…
Researchers crack ransomware encryption
Ransomware is nothing new. You might already have heard about it already, since it is a kind of fraud which can impact anyone and do severe damages. …
Windows Spy tool equipped with Android malware to hack Smartphones
If you are using windows operating system and Android devices, then it’s a bad news for you, because FireEye Security Researchers have identified a n…
Warning! Invitation for PC Version of 'Grand Theft Auto V' Game infects Computers with Malware
Mind this, "There is no Grand Theft Auto V for PC," accept the reality and don’t let cyber criminals take leverage of this fact. If you receive any e…
Linux Operation Windingo hit 500000 PC and 25000 dedicated servers
Operation Windigo is the name of a sophisticated malware-based campaign uncovered by security Experts at ESET, that exploiting the Linux/Ebury backdo…
Nearly 7600 critical infrastructure vulnerable to bugs in Yokogawa App
Several thousands of critical infrastructure may still be vulnerable to SCADA flaws public disclosed this week. It has been estimated that more than …
A sophisticated phishing scheme is targeting Google Docs Users
The attackers used phishing email with the subject “Documents”, the content is requesting the recipient to view an important document published on Go…
Securing Cookies with HttpOnly and secure Flags
Securing cookies is an important subject. Think about an authentication cookie. When the attacker is able to grab this cookie, he can impersonate the…
WhatsApp flaw allows hackers to steal private Chats on Android devices
A security consultant disclosed a security flaw in WhatsApp which can be exploited to gain access to the private chats of Android device owners.
Computer Forensics Investigation – A Case Study
A Computer Forensic Investigation generally investigates the data which could be taken from computer hard disks or any other storage devices with adh…
The Top 8 Ways That Privileged Accounts Are Exploited
Rogue insiders, former employees, criminal hackers and sophisticated state-sponsored attackers can exploit these unmanaged privileged accounts to ano…
162,000 WordPress instances abused for DDoS attack
Sucuri firm detected a large DDOS attack that leveraged thousands of unsuspecting WordPress websites as indirect amplification vectors. To discover i…
Samsung Galaxy backdoor allows files access on the mobile’s storage
The developer of the open source operating system Replicant OS, Paul Kocialkowski, has uncovered a backdoor pre-installed on Samsung Galaxy devices a…
Firms Warn of Rising Threat From NTP Amplification DDoS Attacks
Prolexic Technologies and Arbor Networks both issued warnings to organizations this week about the increased threat of NTP amplification DDoS attacks…
Oracle VirtualBox Memory Corruption Vulnerabilities Uncovered
Researchers at Core Security uncovered a set of serious vulnerabilities affecting Oracle VirtualBox that can be targeted to remotely execute code.
Introduction to Memory Analysis with Mandiant Redline
In a previous diary we talked about memory acqusition with Dumpit. In this diary we will talk about how to use Mandiant Redline to analysis the memor…
Hacking Facebook User 'Access Token' with Man-in-the-Middle Attack
Facebook has several security measures to protect users' account, such as a user "access token" is granted to the Facebook application (like Candy Cr…
Adobe releases important Security Updates for Flash Player
Adobe has released security updates to address important vulnerabilities in Adobe Flash Player 12.0.0.70 and earlier versions for Windows and Macinto…
DNS amplification botnet available in the underground
Security expert Dancho Danchev profiled a recently released DNS amplification DDoS service available for sale in the underground.
The marketing approach of cybercrime to phishing emails
Mark Sparshott, director at Proofpoint, explained that cybercrime manages phishing emails using techniques similar to those used by the marketing ind…
Microsoft Closes Critical IE Security Vulnerabilities in Patch Tuesday Update
The bad news - attackers have continued to leverage a highly-publicized Internet Explorer vulnerability. The good news is however that vulnerability …
Facebook 'Watch naked video of friends' malware scam infects 2 million people
Hackers spam Facebook timeline with a friend's picture and "See (Friend)'s naked video," or "(Friend Name's) Private Video."
SNAKE – The last cyber espionage campaign on a large scale
BAE Systems Applied Intelligence has disclosed a Russian cyber espionage campaign codenamed as SNAKE that targeted Governments and Military Networks.