Linux Hacks & Cracks - Page 28

Discover Hacks/Cracks News

Hola VPN Exposed: Assessing Privacy Threats and DDoS Issues Ahead

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Hola is a VPN provider that purports to offer its users freedom from censorship, a way to access geoblocked content, and anonymous browsing. The service claims that more than 47 million people are part of its peer-to-peer network. But according to a group of researchers (calling themselves Adios), it's dangerously insecure: the client software has flaws that allow for remote code execution and features of the client enabled tracking.

LinuxSecurity.com Team
Jun 02, 2015

Linux/Moose Worm Brute-Forces Weak Passwords for Router Attacks

A new worm targeting Linux routers is exploiting them not through a vulnerability per se, but rather by simply brute-forcing weak passwords, according to researchers at ESET. The malware, which researchers have dubbed Linux/Moose, could be used for a wide variety of purposes -- including DNS hijacking, DDoSing, and deep network penetration -- but so far attackers only seem to be using it for tame social networking fraud.

LinuxSecurity.com Team
May 29, 2015

The Role of Hacking in Aviation Safety and Cybersecurity

In the brave new world of self-driving cars and Wifi-enabled pacemakers, everything we do as information security professionals, everything we hack, every joke we make on Twitter, has real, quantifiable consequences.

LinuxSecurity.com Team
May 22, 2015

HTTPS Attack Advisory: Critical Risk For Top Websites And Mail Servers

Tens of thousands of HTTPS-protected websites, mail servers, and other widely used Internet services are vulnerable to a new attack that lets eavesdroppers read and modify data passing through encrypted connections, a team of computer scientists has found.

LinuxSecurity.com Team
May 21, 2015

LogJam Flaw Risks User Data Security on Web and Email Servers

Computer security experts said they've found a new encryption flaw closely related to one found earlier this year that puts Web surfers' data at risk.

LinuxSecurity.com Team
May 20, 2015

Chris Roberts Incident Analysis: Avionics Security and Cyber Surveillance

Last month ago I blogged about security researcher Chris Roberts being detained by the FBI after tweeting about avionics security while on a United flight:

LinuxSecurity.com Team
May 19, 2015

Naikon Cyber Espionage Group Targets Governments and Militaries

The activities of yet another long-running apparently state-sponsored hacking crew have finally been exposed. The Naikon cyber-espionage group has been targeting government, military and civil organisations around the South China Sea for at least five years, according to researchers at Kaspersky Lab.

LinuxSecurity.com Team
May 18, 2015

QEMU Zero-Day Advisory: Critical Risk for Cloud Services and VMs

Critical vulnerability in the open-source QEMU hypervisor lets attackers break out of a virtual machine, execute code on a host machine and access all the other VMs on the host.

LinuxSecurity.com Team
May 18, 2015

QEMU: Venom Vulnerability Resolved - Urgent Security Patch for VMs

Venom (Virtualized Environment Neglected Operations Manipulation), the recently discovered security hole in the open-source QEMU virtual machine hypervisor, has been fixed.

LinuxSecurity.com Team
May 14, 2015

WordPress Backdoor Issue: Zscaler Warns About Credential Risks

WordPress site administrators just cannot come up for air. With a raft of WordPress vulnerabilities

LinuxSecurity.com Team
May 11, 2015

New Jellyfish Linux Rootkit Exploits GPUs For Stealth Operations

A team of developers has created a rootkit for Linux systems that uses the processing power and memory of graphics cards instead of CPUs in order to remain hidden.

LinuxSecurity.com Team
May 11, 2015

DefCon 2023 Reveals Critical IoT Device Security Vulnerabilities Exposed

Hackers will put Internet-connected embedded devices to the test at the DefCon 23 security conference in August. Judging by the results of previous Internet-of-Things security reviews, prepare for flaws galore.

LinuxSecurity.com Team
May 06, 2015

Google's Updated Password Alert Extension Improves Phishing Protection

For the second time in less than a week, Google has updated its Password Alert extension for Chrome to address a method for bypassing the warning screens that alert users that they

LinuxSecurity.com Team
May 05, 2015

Boeing 787 Advisory: Critical Software Bug Impacts Pilot Control

A software vulnerability in Boeing's new 787 Dreamliner jet has the potential to cause pilots to lose control of the aircraft, possibly in mid-flight, Federal Aviation Administration officials warned airlines recently.

LinuxSecurity.com Team
May 01, 2015

Recover Files From TeslaCrypt Ransomware: Cisco Decryption Tool Available

Some users whose computers have been infected with a ransomware program called TeslaCrypt might be in luck: security researchers from Cisco Systems have developed a tool to recover their encrypted files.

LinuxSecurity.com Team
Apr 28, 2015

Evaluating Internet Security Threats in Aviation Hacking Risks

Imagine this: A terrorist hacks into a commercial airplane from the ground, takes over the controls from the pilots and flies the plane into the ground. It sounds like the plot of some "Die Hard" reboot, but it's actually one of the possible scenarios outlined in a new Government Accountability Office report on security vulnerabilities in modern airplanes.

LinuxSecurity.com Team
Apr 24, 2015

SANS Conference 2015: Six Dangerous New Attack Techniques

Experts with the SANS Institute convened at RSA Conference for their annual threats panel, this time dishing on the six most dangerous new attack techniques. Led by SANS Director John Pescatore, the panel featured Ed Skoudis, SANS faculty fellow and CEO of CounterHack Challenges, Johannes Ullrich, dean of research for SANS, and Michael Assante, SANS project lead for Industrial Control System (ICS) and Supervisory Control and Data Acquisition (SCADA) security.

LinuxSecurity.com Team
Apr 23, 2015

Understanding User Behavior: Seven Ways Users Compromise Security

Common knowledge has it that users are the weakest link in the IT risk management world

LinuxSecurity.com Team
Apr 21, 2015

APT Group Tactics: Malware Warfare Against Rival Cyber-Spy Gang

Cyber-spy groups, whose numbers are growing with little constraint, have begun hacking each other. Hellsing, a small and technically unremarkable cyber-espionage group, was subjected to a spear-phishing attack by another threat actor last year, before deciding to strike back with its own malware-infected emails.

LinuxSecurity.com Team
Apr 16, 2015

Security Advisory: New South Wales Internet Voting Flaws Exposed

A security flaw in New South Wales

LinuxSecurity.com Team
Apr 13, 2015

Community Poll

More Polls