On Wikileaks Apple Hacking Tool Dump, LastPass, Android Security and More

Mike Mimoso and Chris Brook discuss the news of the week, including the latest Wikileaks dump of Apple hacking tools, the LastPass vulnerabilities, a new Android security report, and the “Encryption Workarounds” paper. Download: ThreatpostNewsWrapMarch242017.mp3 Music by Chris Consalves...

Wikileaks Reveals How CIA Was Hacking Your iPhones And MacBooks

As part of its "Vault 7" series, Wikileaks — the popular whistle-blowing platform — has just released another batch of classified documents focused on exploits and hacking techniques the Central Intelligence Agency CIA designed to target Apple MacOS and iOS devices. Dubbed "Dark Matter," the leak...

Mozilla Patches Pwn2Own Zero Day in Firefox

Mozilla was quick to patch a zero day vulnerability identified in the Firefox browser at the Pwn2Own hacking competition last week. The company remedied the issue just shy of 24 hours of being made aware of the flaw, pushing out the updated version 52.0.1 of the browser late Friday. Asa Dotzler,...

Hackers Take Down Reader, Safari, Edge, Ubuntu Linux at Pwn2Own 2017

Hackers took down Adobe Reader, Apple Safari, Microsoft Edge, and Ubuntu Linux over the course of 11 hours on Wednesday, the first day of Pwn2Own, the annual hacking competition held in tandem with the CanSecWest conference in Vancouver. Contestants with the Chinese security firm Qihoo 360 were t...

cgPwn - Cyber Grand Pwnage Box

A lightweight VM for hardware hacking, RE fuzzing, symEx, exploiting etc and wargaming tasks. This is a Ubuntu VM tailored for hardware hacking, RE and Wargaming. Tools included Pwndbg Pwntools Binwalk Radare2 Capstone, Unicorn and Keystone Engines Qira Timeless Debugger AFL Valgrind , VGdb...

7 Things That Happened After WikiLeaks Dumped The CIA Hacking Files

This week WikiLeaks published "Vault 7" — a roughly 8,761 documents and files claiming to detail surveillance tools and tactics of the Central Intelligence Agency CIA. The leak outlined a broad range of flaws in smartphones and other devices that the agency uses to intercept communications and sp...

Comey Talks Strong Crypto, Silent on WikiLeaks

CHESTNUT HILL, Ma.—FBI director James B. Comey today revived the Going Dark discussion during a keynote address at the Boston Conference on Cyber Security, saying it’s time for an adult conversation on the prevalence of strong encryption and how it hinders criminal and national security...

10 Things You Need To Know About 'Wikileaks CIA Leak'

Yesterday WikiLeaks published thousands of documents revealing top CIA hacking secrets, including the agency's ability to break into iPhones, Android phones, smart TVs, and Microsoft, Mac and Linux operating systems. It dubbed the first release as Vault 7. Vault 7 is just the first part of leak...

Proposed Bill Would Legally Allow Cyber Crime Victims to Hack Back

Is it wrong to hack back in order to counter hacking attack when you have become a victim? — this has been a long time debate. While many countries, including the United States, consider hacking back practices as illegal, many security firms and experts believe it as "a terrible idea" and...

WikiLeaks Exposed CIA's Hacking Tools And Capabilities Details

WikiLeaks has published a massive trove of confidential documents in what appear to be the biggest ever leak involving the US Central Intelligence Agency CIA. WikiLeaks announced series Year Zero, under which the whistleblower organization will reveal details of the CIA's global covert hacking...

Database of 1.4 Billion Records leaked from World’s Biggest Spam Networks

A database of 1.4 billion email addresses combined with real names, IP addresses, and often physical address has been exposed in what appears to be one the largest data breach of this year. What's worrisome? There are high chances that you, or at least someone you know, is affected by this latest...

Old version of vBulletin vulnerability to be exploited: hackers leak from the 126 Forum of the 82 million accounts-vulnerability warning-the black bar safety net

Since the older versions of vBulletin there is a serious vulnerability, this is an Internet forum widely used software has been used by hackers, and leakage from the 126 Forum of the 82 million account.@ CrimeAgency on Twitter claim that hackers stole from the forum administrator and registered...

Critical Flaw in ESET Antivirus Exposes Mac Users to Remote Hacking

What could be more exciting for hackers than exploiting a vulnerability in a widely used software without having to struggle too much? One such easy-to-exploit, but critical vulnerability has been discovered in ESET's antivirus software that could allow any unauthenticated attackers to remotely...

D-Link DSL-2730U - Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc Exploit Title: D-Link DSL-2730U - Denial of Service Date: 2016-02-26 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM email protected Home : http://persian-team.ir/ Tested on: Windows AND Linux Demo : @PersianHackTeam POC : daemo...

Malware Hijacks Microphones to Spy On Ukrainian Businesses, Scientists and Media

Ukraine has once again been a target of a potential hacking attack that infected computer systems from dozens of Ukrainian businesses with highly sophisticated malware, allowing hackers to exfiltrate sensitive data and eavesdrop on their network. Late last year, the country also suffered a power...

Police Arrested Suspected Hacker Who Hacked the 'Hacking Team'

Remember the Hacker who hacked Hacking Team? In 2015, a hacker named Phineas Fisher hacked Hacking Team – the Italy-based spyware company that sells spying software to law enforcement agencies worldwide – and exposed some 500 gigabytes of internal data for anyone to download. Now, the Spanish...

Over 70% of Washington DC's CCTV Were Hacked Before Trump Inauguration

Just days before the inauguration of President Donald Trump, cyber criminals infected 70 percent of storage devices that record data from feds surveillance cameras in Washington D.C. in a cyber attack. Any guess, What kind of virus could have hit the storage devices? Once again, the culprit is...

President Trump's @POTUS Twitter Linked To A Private Gmail Account

It seems like the new American President's Twitter account could easily be hacked due to security blunders he made with the most powerful Twitter account in the world, experts warned. Days after we got to know that the newly inaugurated President Donald Trump was still using his old, insecure...

Russian Hacker behind 'NeverQuest' Malware, Wanted by FBI, Is Arrested in Spain

A Russian computer hacker wanted by the FBI on hacking allegations was arrested and jailed in Spain earlier this week, while a decision on his extradition to the United States has yet to be made. The Guardia Civil, Spanish law enforcement agency officers, have detained 32-year-old Stanislav Lisov...

SDR-RepeatRF

This is a module that could be used to repeat previously saved RF data for debugging purposes. In order to save or repeat RF signals an SDR is needed. !/usr/bin/env python2 -- coding: utf-8 -- GNU Radio Python Flow Graph Title: Exploit Pack - RF Hacking Author: Juan Sacco Description: RF Repeater...