South Korea defense bans Smartphones for data security

South Korea's Ministry of National Defense is banning its employees from using the smart phones inside of the ministry's building in a bid to prevent military data leaks. At present, the only way to ensure sensitive corporate and Defense data is not lost is to provide employees with devices owned...

PRISM like Surveillance system in France to intercept billions of communications

The US isn't the only western country with an Digital eye i.e PRISM like surveillance program, designed to monitor internet and phone communications. French is leading member at European Parliament and they voted to launch an in-depth inquiry against the US's based PRISM surveillance project. The...

Android Vulnerability Bypasses App's Digital Signature

A vulnerability exists in the Android code base that would allow a hacker to modify a legitimate, digitally signed Android application package file APK and not break the app’s cryptographic signature—an action that would normally set off a red flag that something is amiss. Researchers at startup...

STOP using Facebook and Google and if you fear US spying

Edward Snowden, a former NSA systems analyst, have revealed the NSA's sweeping data collection of U.S. phone records and some Internet traffic and the programs target foreigners and terrorist suspects mostly overseas.According to the Constitution of all countries, capturing and reading emails or...

Nokia 1280 Denial Of Service

Exploit Title: Nokia 1280 DoS Vulnerability Author : Un0wnX E-Mail : [email protected] Date : Monday, July 01,2013 Product: http://www.nokia.com/in-en/phones/phone/nokia-1280/ Vulnerability Advisory ======================= You can send a SMS containing the malicious buffer and can crash the phon...

FAQ: The NSA Metadata and PRISM Programs

The details of extensive government surveillance of U.S. citizens through collection of cell phone metadata, and email and Internet activities through the PRISM program has raised a lot of questions and caused quite a bit of confusion about what’s actually happening. To help users sort through th...

How I Got Here: Robert "Rsnake" Hansen

Dennis Fisher talks with Robert Hansen, a renowned security researcher, about his early days climbing telephone poles to clip into phone lines, how he got his start in the security world, the evolution of [email protected] from early webrings and what he’s learned along the way. Download: 07rsnake.mp3...

Hacking Facebook Account with just a text message

Can you ever imagine that a single text message is enough to hack any Facebook account without user interaction or without using any other malicious stuff like Trojans, phishing, keylogger etc. ? Today we are going to explain you that how a UK based Security Researcher, "fin1te" is able to hack a...

Threat Outbreak Alert: Fake Mobile Phone Credit Notification Email Messages on June 25, 2013

Medium Alert ID: 29783 First Published: 2013 June 25 16:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a mobile phone credit notification for the recipient. The text in the email message attempts to...

CVE-2013-4632

The Huawei Access Router AR before V200R002SPC003 allows remote attackers to cause a denial of service device reset via a crafted field in a DHCP request, as demonstrated by a request from an IP phone...

Cross site request forgery (csrf)

The Huawei Access Router AR before V200R002SPC003 allows remote attackers to cause a denial of service device reset via a crafted field in a DHCP request, as demonstrated by a request from an IP phone...

NSA Whistleblower Snowden on PRISM, surveillance, privacy

NSA whistleblower Edward Snowden said a “continuing litany of lies” from senior U.S. leaders prompted his public uncovering of widespread surveillance of Americans’ phone calls and alleged data sharing between large technology companies and the government. In a two-hour online question-and-answer...

Turkish PM Erdogan’s staff emails hacked and leaked by Syrian Electronic Army Hackers as #OpTurkey

Syrian Electronic army appears to be taking part in ongoing operation against Turkey government website. Hackers collectively called Anonymous and SEA breached into Turkish Ministry of Interior website and the private information of staffers in PM Tayyip Erdogan's office. Hackers claimed that the...

YeaLink IP Phone Firmware 9.70.0.100 - Phone Call

YeaLink IP Phone Firmware 9.70.0.100 - Phone Call Exploit Title: YeaLink IP Phone SIP-TxxP firmware garnelo.eu Vendor Homepage: http://yealink.com Software Link: http://yealink.com/productlist.aspx?BaseInfoCateId=147&CateId=147&ProductsCateID=147 Version: 9.70.0.100 and lower Tested on: YeaLink I...

YeaLink IP Phone Firmware <=9.70.0.100 Unauthenticated Phone Call Vulnerability

Exploit for hardware platform in category web applications Exploit Title: YeaLink IP Phone SIP-TxxP firmware garnelo.eu Vendor Homepage: http://yealink.com Software Link: http://yealink.com/productlist.aspx?BaseInfoCateId=147&CateId=147&ProductsCateID=147 Version: 9.70.0.100 and lower Tested on:...

YeaLink IP Phone Firmware 9.70.0.100 Missing Authentication

Exploit Title: YeaLink IP Phone SIP-TxxP firmware garnelo.eu Vendor Homepage: http://yealink.com Software Link: http://yealink.com/productlist.aspx?BaseInfoCateId=147&CateId=147&ProductsCateID=147 Version: 9.70.0.100 and lower Tested on: YeaLink IP Phone SIP-T20P and SIP-T26P hardware VoIP phone...

International Airlines any user is bound to any phone,any reset a user's password-vulnerability warning-the black bar safety net

In my information point to modify the phone to send the verification code to set up burpsuite cut package Phone=1 5 0&userName=admin Modify your mobile phone number and want to reset the password of the username there is a very magical thing to modify is successful will directly jump to you to...

Twitter Enables Two-Factor Authentication

Responding to a wave of high-profile account takeovers in recent months, Twitter has implemented a phone-based two-factor authentication scheme that will require a numerical code along with a username and password when users log in to their accounts. The feature, known as login verification, is...

Reporters legally threatened after revealing vulnerability that exposes sensitive data of 170,000 customers

For millions of low income families, the federal government's Lifeline program offers affordable phone service. But an online security lapse has exposed tens of thousands of them to an increased risk of identity theft, after their Social Security numbers, birth dates and other pieces of highly...

Q&A: TJ Campana

REDMOND, Wash.–The Microsoft Digital Crimes Unit has been spearheading botnet takedowns and other anti-cybercrime operations for many years, and it has had remarkable success. But the cybercrime problem isn’t going away anytime soon, so the DCU is in the process of building a new cybercrime cente...