Researchers have discovered a security flaw in macOS, Linux, and several other operating systems that could let attackers hijack a wide range of virtual private network (VPN) connections. Learn more about this networking attack: . The bug, discovered by University of New Mexico researchers William J Tolley, Beau Kujath, and Jedidiah R. Crandall, lets a malicious access point or someone on the same network snoop on a user’s VPN session. The snooper can tell that they’re on a VPN and figure out what site they’re visiting. The researchers explain: This provides everything that is needed for an attacker to hijack active connections inside the VPN tunnel. The attack begins by working out the VPN client’s virtual IP address, which is the fake IP address that a VPN gives you when you use it to pretend that you’re somewhere else. It does this by sending SYN (short for synchronization) and ACK (short for acknowledgement) packets to the device. Because it doesn’t know the device’s exact address, it sends these packets to all addresses in the virtual IP space. When this noisy attack eventually hits the victim’s machine, it will respond with a reset (RST) packet that drops the connection. The link for this article located at Naked Security is no longer available. . A security flaw in macOS and Linux could allow VPN hijacking, exposing user browsing. Learn about this significant risk.. researchers, security, macos, linux, other, operating, systems. . Brittany Day
Remember the O.MG cable? A project by self-taught electronics hacker _MG_ , it’s a malicious Lightning cable that looks just like the regular overpriced piece of wire that connects your iPhone to a computer. The cable is now about to hit mass distribution. Learn more: . Embedded in it is a tiny Wi-Fi transceiver that can operate as an access point or a wireless client. When the victim plugs it into their computer, an attacker within radio distance can connect to the cable with a mobile app and use it to manipulate the computer. An attacker can reach the O.MG cable from 300 feet away using Wi-Fi from a regular phone, but a suitable booster antenna connected to your computer or phone could enable a connection from even further away. The link for this article located at NakedSecurity is no longer available. . The O.MG cable appears as a normal Lightning cable but hides dangerous capabilities, allowing cyber attackers to exploit users connecting their devices.. Malicious Cable, Wi-Fi Transceiver, Electronics Hack. . LinuxSecurity.com Team
The FBI issued an alert this week warning that wireless Internet networks, often called Wi-Fi hotspots, are more vulnerable to hackers than most users probably realize. In South Florida, Wi-Fi hotspots are at airports, fast food restaurants, bookstores, coffee shops, sports bars, school campuses, malls, supermarkets -- just about everywhere. Several cities and neighborhoods in the region plan to eventually install networks for residents, too. How secure do you think is your local hotspot? Do you trust it to do your finances or other personal tasks via a coffee shop Wi-Fi access point?. The link for this article located at Red Orbit is no longer available. . The link for this article located at Red Orbit is no longer available.. issued, alert, warning, wireless, internet, networks, often, called, wi-fi, hotspo. . Bill Locke
Republicans and Democrats may hold to different ideologies, but they're pretty much the same -- lame -- when it comes to locking down wireless, a Boston-area firm said Thursday. As it did in late July when the Democrats held their convention in Boston, Newbury Networks, a provider of location-based wireless security solutions, conducted a "wardrive" around Madison Square Garden, the site of the Republican National Convention that wraps up today. . . .. Republicans and Democrats may hold to different ideologies, but they're pretty much the same -- lame -- when it comes to locking down wireless, a Boston-area firm said Thursday. As it did in late July when the Democrats held their convention in Boston, Newbury Networks, a provider of location-based wireless security solutions, conducted a "wardrive" around Madison Square Garden, the site of the Republican National Convention that wraps up today. Newbury's casual cruise on August 24 found thousands of unsecured wireless access points and adapters and hundreds of vulnerable wireless networks near Madison Square Garden. The link for this article located at Gregg Keizer is no longer available. . The digital infrastructure at political rallies often lacks proper safeguards, leaving networks open to attack.. Wireless Security Solutions, Unsecured Networks, Wireless Access Points, Network Assessment. . Anthony Pell
Several Cisco wireless access points (APs) are susceptible to a previously undetected security breach, the company said in an advisory issued this week.. . .. Several Cisco wireless access points (APs) are susceptible to a previously undetected security breach, the company said in an advisory issued this week. The APs will send Wired Equivalent Privacy static keys as clear text to simple network protocol (SNMP) servers under certain circumstances. Those who wish to break into the network can easily intercept and use the clear text keys. The specific APs with the vulnerability are Cisco's 1100, 1200 and 1400 series running the company's IOS software. The problem only occurs when the "snmp-server enable traps wlan-wep" command is enabled, the company said in its advisory. The link for this article located at SecurityPipeline.com is no longer available. . Numerous Cisco wireless access points (APs) are at risk due to a recently identified security flaw that poses a threat to overall network integrity.. Cisco Access Points, Wireless Security, Network Breach, IOS Vulnerability. . LinuxSecurity.com Team
Road warriors know the frustration: you're in a foreign city and want to find a Wi-Fi access point. Normally that means looking on the Internet for site directories that can tell you where the nearest hotspots are located, such as WiFinder . . . . Road warriors know the frustration: you're in a foreign city and want to find a Wi-Fi access point. Normally that means looking on the Internet for site directories that can tell you where the nearest hotspots are located, such as WiFinder or WiFiMaps. Most of the time, it's trial and error. Now, there is a much easier solution. US peripherals maker Kensington has introduced worlds first: a detector that will locate Wi-Fi networks. No more booting up your notebook to find a Wi-Fi signal. The small device detects 802.11b and 802.11g signals from up to 200 feet away and filters out other wireless signals, including cordless phones, microwave ovens and Bluetooth networks. Three lights indicate signal strength. For $29.95 that's seems a bargain. . Unveil a cutting-edge Wi-Fi finder designed for globe-trotters to swiftly identify internet connections in unfamiliar urban landscapes.. Wi-Fi Access Points, Wireless Detection, Mobile Connectivity. . Anthony Pell
Wireless LANs are a blessing and a curse. They offer tremendous relief to large organizations whose employees need greater flexibility and mobility. But a wireless access point is also a radio station broadcasting your company's private information. . .. Wireless LANs are a blessing and a curse. They offer tremendous relief to large organizations whose employees need greater flexibility and mobility. But a wireless access point is also a radio station broadcasting your company's private information . The good news is that you can greatly reduce the security risks of wireless LAN segments, using the tools you already have and techniques you've applied before. The seemingly new problem of securing wireless LANs has an old solution: defense in depth. When you consider how to reduce the risks of incorporating WLANs into your trusted networks, begin by examining the many measures your organization already implements to protect wired LANs. Once you have done this, then consider how to apply these to wireless LANs. The link for this article located at SCMagazine is no longer available. . Wireless local area networks (WLANs) enhance user convenience but introduce serious security risks. Explore methods to protect sensitive data from potential threats.. Wireless Security, WLAN Protection, Access Point Risks, Network Defense, Data Privacy. . Anthony Pell
In a Wireless LAN (WLAN), things are different. Its physical medium is the electromagnetic spectrum, which exists everywhere and respects few boundaries. Wi-Fi is now available at two different frequencies-IEEE 802.11b at 2.4GHz and IEEE 802.11a at 5GHz-and both can suffer interference from neighboring networks and other sources.. . .. In a Wireless LAN (WLAN), things are different. Its physical medium is the electromagnetic spectrum, which exists everywhere and respects few boundaries. Wi-Fi is now available at two different frequencies-IEEE 802.11b at 2.4GHz and IEEE 802.11a at 5GHz-and both can suffer interference from neighboring networks and other sources. The only way to know for sure which will work best in a particular environment is to perform a comprehensive site survey before buying a single access point. Even if you have no intention of investing in Wi-Fi, knowing what's passing through your airwaves can still be useful. In addition to full-featured hardware and software analyzers, several vendors are pitching simpler, cheaper versions as security tools. These are designed to detect and track down rogue access points-WLAN base stations set up by employees without the IT department's knowledge. Almost all Wi-Fi hardware has its security features off by default, and the cheaper consumer-level models may not include any security at all, so these rogues can act as an open door into an otherwise well-protected network. The link for this article located at Network Magazine is no longer available. . Wireless LAN analyzers are crucial for identifying rogue access points by monitoring traffic and signal patterns, enhancing network security against threats.. Wireless LAN, Wi-Fi Security, WLAN Analysis, Network Tools, Rogue Access Points. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.