CeBIT attendees on Thursday fell victims to a series of well-executed hacks. Thankfully, they weren. Though Mitnick The link for this article located at PC Pro UK is no longer available. . CeBIT 2015 showcased impressive hacking techniques by Kevin Mitnick that amazed and surprised all attendees.. Kevin Mitnick, CeBIT 2015, hacking tactics, cybersecurity skills. . Dave Wreski
As I recently reported in the Guardian, the NSA has secret servers on the Internet that hack into other computers, codename FOXACID. These servers provide an excellent demonstration of how the NSA approaches risk management, and exposes flaws in how the agency thinks about the secrecy of its own programs.. Here are the FOXACID basics: By the time the NSA tricks a target into visiting one of those servers, it already knows exactly who that target is, who wants him eavesdropped on, and the expected value of the data it hopes to receive. Based on that information, the server can automatically decide what exploit to serve the target, taking into account the risks associated with attacking the target, as well as the benefits of a successful attack. The link for this article located at Schneier on Security is no longer available. . Explore the tactics employed by the NSA's FOXACID infrastructure, emphasizing their strategies for mitigating potential threats and leveraging information efficiently.. NSA Operations,Risk Management,Cyber Surveillance,Data Exploitation. . Dave Wreski
There's now a threat to online life that's so potentially potent it requires a new form of defence. Rootkits hide inside the operating system, actively defending themselves and hiding their presence. To arm your system against rootkits, you first need to understand them. So, where have they come from, how have they evolved and how, crucially, can they be stopped?. A rootkit is a program that allows a hacker to come and go as he pleases, unhindered by your computer's defences. No firewall will stop him and no antivirus program will detect his activities. Rootkits subvert the way the operating system works to make it lie about the processes, files, Registry entries and kernel modules that might give away the rootkit's presence to humans and antivirus software. Unlike viruses, rootkits have had a low profile for the past 20 years, but that's changing as their methods merge with those of mainstream malware to produce a threat that requires dedicated software to deal with it. The name 'rootkit' comes from the 'superuser' account in Unix (and Linux). This is called 'root', and logging into it gives the user complete control over the computer, arguably even more so than an administrator account does in Windows. Normally, only a system administrator has access to root because it's so powerful. The link for this article located at techRadar is no longer available. . Grasp the concept of malware: examine its mechanics and the strategies to identify and eliminate it for robust system protection.. Rootkit Detection, Malware Analysis, System Integrity, Linux Security Best Practices. . LinuxSecurity.com Team
The facts are staggering... Spam emails are estimated to cost anywhere between US$10 to $87 billion per year in direct costs and lost productivity. What's more, 90% of computer viruses are spread by email attachments. Spam has become so insidious that every company has to consider the cost and means of reducing its impact. Sometimes it's as simple as implementing a basic spam filter and applying best practices-- i.e., following a few rules for recognizing and eliminating spam. . On the other end of the spectrum are the most aggressive tactics, which involve turning the tables on spammers. This article provides ten tips to help eliminate spam email from your inbox. The link for this article located at IT Security is no longer available. . On the other end of the spectrum are the most aggressive tactics, which involve turning the tables o. facts, staggering, emails, estimated, anywhere, between, us$10, billion. . LinuxSecurity.com Team
In this increasingly virtual online world, you have to be careful to protect your data. Learn the basics of encoding and encrypting important bits of information, such as passwords, credit card numbers, and even entire messages. Get an overview of what it means to encrypt and decrypt information, as well as some practical examples involving passwords and other data, using PHP's built-in functionality. . Consider how today's world differs from the world of just 20 years ago. Long ago, in the 1980s, encryption was spy stuff -- something you read about in a techno-thriller by Tom Clancy. If somebody wanted to keep a bit of information private, he encrypted the data with a password, a pass phrase, or another basic method. The link for this article located at IBM is no longer available. . Dive into fundamental encryption principles and discover how PHP can safeguard your information right now. Master the art of securely encrypting both passwords and communications effortlessly.. php encryption,data protection,secure passwords,cybersecurity techniques. . LinuxSecurity.com Team
Hackers are taking a page from the open-source playbook, using the same techniques that made Linux and Apache successes to improve their malicious software, according to McAfee Inc. . Nowhere is this more apparent than within the growing families of "bot" software, which allow hackers to remotely control infected computers. Unlike viruses of the past, bots tend to be written by a group of authors, who often collaborate by using the same tools and techniques as open source developers, said Dave Marcus, security research and communications manager with McAfee's Avert Labs. The link for this article located at InfoWorld is no longer available. . Cybercriminals are utilizing freely available resources to improve their harmful software strategies, such as malware bots.. Open Source Tactics, Hackers, Malicious Software, Bot Software, Cybersecurity. . LinuxSecurity.com Team
For as long as modern computers have been around, they have been associated with encryption in one way or another. It is no coincidence that the first semi-programmable computer, Colossus, was developed to decrypt messages during the Second World War. Encryption relies on encoding information in a way that makes it difficult to decode without either a key (cipher) or an awful lot of mathematical muscle. The longer the length of the cipher (in bits), the more difficult it will be to break. Although there are many encryption techniques that are unbreakable in practice, there are very few that are unbreakable in theory, given enough time or processing power. . Encryption techniques separate into two main types, explains Bernard Parsons, chief technology officer at security software company BeCrypt. Symmetric encryption dates back to the Roman empire and beyond, but asymmetric encryption is more recent. The link for this article located at ComputerWeekly.co.uk is no longer available. . Encryption techniques separate into two main types, explains Bernard Parsons, chief technology offic. modern, computers, around, associated, encryption. . LinuxSecurity.com Team
"Not only can we turn back the clock on an attack to undo the damage, we can also go back to any point during the attack to observe exactly how the intruder breached the system," says University of Michigan computer-science professor Peter Chen. Traveling back in time may be the way to thwart hack attacks, say computer scientists at the University of Michigan.. . .. "Not only can we turn back the clock on an attack to undo the damage, we can also go back to any point during the attack to observe exactly how the intruder breached the system," says University of Michigan computer-science professor Peter Chen. Traveling back in time may be the way to thwart hack attacks, say computer scientists at the University of Michigan. Losses from computer crime are soaring -- already approaching the US$2 billion mark, according to industry experts -- and the end is not in sight. Computer hackers, however, drop few clues at their crime scenes, leaving security experts and system administrators with slim options for accurate detection. Using a time machine to watch the crime unfold and nail the perps red-handed may sound like an outlandish Hollywood movie plot, but going back to stop a hack is precisely what Peter Chen has in mind. . Investigate groundbreaking methods such as digital simulations to thwart breaches and scrutinize infiltration strategies more efficiently.. Virtual Time Machine, Hack Prevention, Intrusion Detection, Cybersecurity Techniques, Security Innovation. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.