8793 matches found
Screenlogger - A keylogger app for Android and iOS Smartphones
Are you using a pattern lock for your Smartphone to remain untouched from cyber criminals? But you are not aware that even your swipe gestures can be analyzed by hackers. Neal Hindocha, a security adviser for the technology company Trustwave, has developed a prototype malware for the Smartphones...
Boasting Better Encryption, Bug Fixes, OpenSSH 6.5 Released
The OpenBSD Project pushed out a new build on Thursday of the OpenSSH security suite, adding a new private key format, a new transport cipher and fixing 15 bugs in the Secure Shell. OpenSSH version 6.5 adds support for the key exchange using elliptic-curve Diffie Hellman within cryptographer Dani...
Mobile Malware Captures Keystrokes and Screengrabs
New proof-of-concept mobile malware logs keystrokes and captures screen-grabs on jailbroken iOS and Android devices in order to steal online log-in credentials and other sensitive information from targeted devices. In an interview with Threatpost, Trustwave senior security consultant Neal Hindoch...
Honey Encryption Deceives Hackers with Plausible Data
Traps are constantly set on the Internet to snare hackers in order to research their behavior and tactics. Many of these traps are honeypots or honeynets that take the form of deliberately unpatched computers or infrastructure exposed to the Internet that lure attackers to break in while their...
U.S. Oil, Gas Targeted by Espionage Malware Campaign
American gas and oil companies have been targeted by a hacking group with ties to the Russian Federation for close to 18 months, a new research report indicates. The attackers have leveraged watering hole attacks to infect users inside the critical infrastructure organizations to spread a remote...
RedHat Update for gnupg RHSA-2014:0016-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cyber criminals targeting another cryptocurrency 'Primecoin' with malicious miners
Like Bitcoin, There are numerous other cryptocurrency similar in nature, including MasterCoin, ProtoShares, Litecoin, Peercoin, BitBar and many more. One of them is Primecoin sign: Ψ; code: XPM, a peer-to-peer open source cryptocurrency that implements a scientific computing proof-of-work system...
Medium: gnupg
Issue Overview: GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. NOTE:...
Dennis Fisher and Mike Mimoso Discuss the Target Data Breach and More
Dennis Fisher and Mike Mimoso discuss the news of the weird in the security industry since the holidays, including the latest revelations about the Target data breach and the decision by some speakers to boycott the RSA Conference because of the NSA revelations. Target image via imprint777‘s Flic...
CentOS Update for gnupg CESA-2014:0016 centos5
Check for the Version of gnupg OpenVAS Vulnerability Test CentOS Update for gnupg CESA-2014:0016 centos5 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Scientific Linux Security Update : gnupg on SL5.x i386/x86_64 (20140108)
It was found that GnuPG was vulnerable to side-channel attacks via acoustic cryptanalysis. An attacker in close range to a target system that is decrypting ciphertexts could possibly use this flaw to recover the RSA secret key from that system. CVE-2013-4576 %NASLMINLEVEL 70300 C Tenable Network...
CentOS Update for gnupg CESA-2014:0016 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 5 : gnupg (CESA-2014:0016)
An updated gnupg package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Moderate: Red Hat Security Advisory: gnupg security update
An updated gnupg package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
List of Canceled RSA Talks Continues to Grow
A relatively small but influential list of speakers for the upcoming RSA Conference have decided to withdraw from the show in the wake of stories implicating RSA as a co-conspirator in the NSA’s surveillance efforts. The group is a tiny fraction of the hundreds of speakers scheduled to talk next...
ESA-2013-080: RSA Security Analytics Multiple Vulnerabilities
ESA-2013-080.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-080: RSA Security Analytics Multiple Vulnerabilities EMC Identifier: ESA-2013-080 CVE Identifier: CVE-2013-6180 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected Products: RSA Security Analytics 10...
EMC RSA Security Analytics vulnerabilities
Privilege escalation...
gnupg security update
1.4.5-18.1 - fix CVE-2013-4576 acoustic side channel attack on RSA private keys...
ESA-2013-079: RSA Archer® GRC Multiple Cross-Site Scripting Vulnerabilities
ESA-2013-079.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-079: RSA Archer® GRC Multiple Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2013-079 CVE Identifier: CVE-2013-6178 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected Products: RSA Archer...