Unseen 4096-Bit Encrypted Email, Chat and File Sharing Service to counter NSA Spying

With the beginning of a new week, we always came across a new revelation of surveillance programs run by the U.S. Government. A Recent NYT Report disclosed that how whistleblower Edward Snowden downloaded 1.7 million classified files which are revealing a number of secret spying projects that are...

NSA allegedly hacked Belgian Cryptography Expert with spoofed LinkedIn Profile

Cryptographer Professor Jean-Jacques Quisquater has become the part of a targeted attack by the US National Security Agency NSA and its British counterpart GCHQ, first reported on Saturday morning by De Standaard. A few months back in September 2013 it was revealed that, Belgacom, the largest...

NSA will not stop spying on us, next move Quantum computer to break strongest Encryption

--- Image Credit: The guardian If I say that NSA National Security Agency will never stop spying on us then it won’t be wrong. After the exposure of the large number of surveillance scandals including PRISM, DROPOUTJEEP, XKeyscore and many many more which are now publicly known as well as unknown...

Jacob Appelbaum 2013 30c3 keynote on NSA Surveillance

Cryptographer, developer and activist Jacob Appelbaum took to the pages of Germany’s Der Spiegel and the keynote dais of the 30th Chaos Communication Congress this weekend to deliver a damning expose of the catalog of backdoors, monitoring programs and products that potentially have and could be...

Schneider Electric PLCs Vulnerabilities

OVERVIEW --------- Begin Update B Part 1 of 2 -------- This updated advisory is a follow-up to the previous advisory update titled ICSA-13-077-01A Schneider Electric PLCs Vulnerabilities Update A that was published March 20, 2013, on the ICS-CERT Web page. It is also a follow-up to the updated...

Snowden reveals, GCHQ planted malware via LinkedIn and Slashdot traffic to hack Belgacom Engineers

Edward Snowden, a former contractor at America's National Security Agency NSA, has rocked the intelligence world by leaking secret documents which reveal the previously unknown extent of global spying. But looks like the NSA isn't the only one using dirty digital tricks to hack its targets. Back ...

Scientific Linux Security Update : selinux-policy bug fix update on SL6.x i386/x86_64 (20130612)

This update fixes the following bug : - When using some versions of Quantum with netns support, SELinux denied various operations, which caused Quantum to fail. AVCs did not appear unless in permissive mode, due to a 'dontaudit' rule for these operations. With this update, SELinux no longer denie...

PT-2013-1323 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description: The issue is related to errors in security mechanisms, which...

CVE-2013-0664

The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests...

Code injection

The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests...

CVE-2013-0663

Cross-site request forgery CSRF vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary...

CVE-2013-0663

CVE-2013-0663 affects Schneider Electric Modicon M340, Quantum 140NOE7711x/140NWM10000, and Premium TSXETY4103/5103/TSXWMY100 PLC modules. The vulnerability is a Cross-Site Request Forgery (CSRF) in the web server interface that permits remote attackers to hijack user authentication and issue com...

CVE-2013-0664

CVE-2013-0664 affects Schneider Electric Modicon PLCs (Quantum 140NOE77111, 140NWM10000, M340 BMXNOE0110x, Premium TSXETY5103). The vulnerability arises in the FactoryCast feature: remote authenticated users can embed Modbus messages in SOAP HTTP POST requests, enabling arbitrary code execution o...

Schneider Modicon SCADA Ladder Logic Upload/Download

A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...

Schneider Modicon SCADA Remote START/STOP Command

A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...

SCADA Schneider Modicon Quantum Password Recovery

...

Schneider Electric Quantum Ethernet Module Hard-Coded Credentials

OVERVIEW --------- Begin Update B Part 1 of 3 -------- This updated advisory is a follow-up to the updated advisory titled ICSA-12-018-01A Schneider Electric Quantum Ethernet Module Hard-Coded Credentials that was published on June 04, 2013, on the ICS-CERT Web site. It is also a follow-up to the...

Multiple Vendor Products Security Vulnerabilities

Quantum Scalar i500, Dell ML6000, and IBM TS3310 are prone to following vulnerabilities: 1. An information disclosure vulnerability 2. A cross-site scripting vulnerability 3. A cross-site request-forgery vulnerability 4. A security bypass vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG So...

Multiple Vendor Products Security Vulnerabilities

Quantum Scalar i500, Dell ML6000, and IBM TS3310 are prone to following vulnerabilities: 1. An information-disclosure vulnerability 2. A cross-site scripting vulnerability 3. A cross-site request-forgery vulnerability 4. A security-bypass vulnerability An attacker may leverage these issues to...

CVE-2012-1841

Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to read arbitrary files via a full pathname in...