The ‘Perfect Storm’ of Disinformation and Hacking

We live in an age of fake news, misinformation and disinformation. Recently, we have been falling for it – mostly. That is largely thanks to a confluence of social media, hacking and good old fashion disinformation campaigns, according to Matt “Pwn all the Things” Tait, a senior cybersecurity...

GCHQ Found -- and Disclosed -- a Windows 10 Vulnerability

Now this is good news. The UK's National Cyber Security Centre NCSC -- part of GCHQ -- found a serious vulnerability in Windows Defender their anti-virus component. Instead of keeping it secret and all of us vulnerable, it alerted Microsoft. I'd like believe the US does this, too...

Microsoft Issues Emergency Windows Security Update For A Critical Vulnerability

Microsoft has just released an emergency security patch to address a critical remote code execution RCE vulnerability in its Malware Protection Engine MPE that could allow an attacker to take full control of a victim's PC. Enabled by default, Microsoft Malware Protection Engine offers the core...

Crack for Charity — GCHQ launches 'Puzzle Book' Challenge for Cryptographers

The UK's Signals Intelligence and Cyber Security agency GCHQ has launched its first ever puzzle book, challenging researchers and cryptographers to crack codes for charity. Dubbed "The GCHQ Puzzle Book," the book features more than 140 pages of codes, puzzles, and challenges created by expert cod...

Firefox 46 Patches Critical Memory Vulnerabilities

Mozilla yesterday updated Firefox and patched 10 vulnerabilities, one which was rated critical. Firefox 46 also included patches for four vulnerabilities that Mozilla rated as high severity. Critical bugs enabled remote code execution without user interaction, while bugs rated high can be exploit...

CentOS 5 / 6 / 7 : thunderbird (CESA-2016:0460)

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS Update for firefox CESA-2016:0373 centos5

Check the version of firefox SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882416";...

Memory corruption with malicious NPAPI plugin — Mozilla

The CESG, the Information Security Arm of GCHQ, reported a dangling pointer dereference within the Netscape Plugin Application Programming Interface NPAPI that could lead to the NPAPI subsystem crashing. This issue requires a maliciously crafted NPAPI plugin in concert with scripted web content,...

British Intelligence is Legally Allowed to Hack Anyone, Court Says

Hacking of computers, smartphones and networks in the United Kingdom or abroad by the Government Communications Headquarters GCHQ is LEGAL, the UK's Investigatory Powers Tribunal IPT ruled. So, the UK is giving clean chit to its intelligence agency to spy on its people as well as people living...

How to Crack GCHQ Crypto Puzzle? — Here's the Solution

GCHQ has finally released the solution to their head spinning Xmas Puzzle, after all, the participants failed to reach the final answer. GCHQ had released a crypto puzzle, dubbed Xmas Puzzle, on 9th December in the form of a Christmas Card that went viral online soon after its release. Nearly...

How Spy Agencies Hacked into Israeli Military Drones to Collect Live Video Feeds

--- Featured Image Only. See Original leaked images below. In a joint surveillance program, the US intelligence agency NSA National Security Agency and the British intelligence agency GCHQ Government Communications Headquarters hacked into, decrypted, and tracked live video feeds of Israeli...

British Intelligence Open-Sources its Large-Scale Graph Database Software

UK's Secretive Spy Agency Government Communications Headquarters GCHQ has open-sourced one of its tools on code-sharing website GitHub for free... A graph database called 'Gaffer.' Gaffer, written in Java, is a kind of database that makes it "easy to store large-scale graphs in which the nodes an...

NSA-linked Spying Malware Infected Top German Official's Computer

The German authorities have initiated a further investigation into espionage by the United States secret service NSA and British intelligence agency GCHQ after... ...the head of the German Federal Chancellery unit had his private laptop infected. According to a recent report published by Der...

THN Weekly RoundUp – 12 Hacking Stories You Don’t Want To Miss This Week

Here we are with our weekly roundup, showcasing last week's top cyber security threats and challenges. Just in case you missed any of them ICYMI, THN Weekly Round-Up helps you provide all important stories of last week in one shot. We advise you to read the full story just click ‘Read More’ becau...

British Intelligence Agency Can Hack Any Smartphone With Just a Text Message

Former NSA contractor and global surveillance whistleblower Edward Snowden told the BBC investigative programme Panorama Monday night that the British intelligence agency GCHQ has powers to hack any smartphones without their owners' knowledge. You heard right. The British Spying Agency have speci...

Facebook Hires Ex-Yahoo CISO Alex Stamos

Facebook has hired away the top security executive at Yahoo, Alex Stamos, to become the company’s new CSO. Stamos said Wednesday that he is joining Facebook because he believes the company is in the best position to address some of the large security challenges facing users and companies right no...

UK Government Rewrites Laws to Let GCHQ Hack Into Computers Legally

The UK Government has quietly changed the Anti-Hacking Laws quietly that exempt GCHQ, police, and other electronic intelligence agencies from criminal prosecution for hacking into computers and mobile phones and carrying out its controversial surveillance practices. The details of the changes wer...

Gemalto Officials Say SIM Infrastructure Not Compromised

Despite leaked documents from the NSA showing otherwise, officials at Gemalto on Wednesday said the company has found no evidence that its SIM card infrastructure was compromised several years ago by the NSA and GCHQ. The company identified a handful of what it called sophisticated attacks in the...

Gemalto Hack May Have Far-Reaching Effects

Security experts are still trying to assess the effects of the reported attack on SIM card manufacturer that resulted in the theft of millions of encryption keys for mobile phones around the world, but it’s safe to say that the operation has caused reverberations throughout the industry and...

NSA Stole Millions Of SIM Card Encryption Keys To Gather Private Data

Edward Snowden is back with one of the biggest revelations about the government's widespread surveillance program. The US National Security Agency NSA and British counterpart Government Communications Headquarters GCHQ hacked into the networks of the world's biggest SIM card manufacturer, accordi...