Onion Ransomware Demands Bitcoins, Uses Tor, Advanced Encryption

More details about a new family of encryption ransomware that uses the anonymous network Tor and requires users pay by Bitcoin have emerged. The ransomware, known in some circles as Critoni or CTB-Locker, has been dubbed Onion by researchers at Kaspersky Lab as its creators use command and contro...

Researchers Demonstrate Zero-Day Vulnerabilities in Tails Operating System

The critical zero-day security flaws, discovered in the privacy and security dedicated Linux-based Tails operating system by the researcher at Exodus Intelligence that could help attackers or law enforcements to de-anonymize anyone’s identity, actually lie in the I2P software that’s bundled with...

Warning — Zero-Day Vulnerabilities Identified in Tails Operating System

The critical zero-day security flaws has been discovered in the privacy and security dedicated Linux-based operating system “Tails” that could be used by an attacker to unmask your identity. Tails, which is been used and recommended by the global surveillance whistleblower Edward Snowden to remai...

Researchers Plan to Disclose Critical Bugs to TAILS Team Soon

The developers of the TAILS operating system are poised to release a new version of the software–which is designed to preserve privacy and anonymity–and it includes several security fixes. However, there are several other security issues that aren’t patched in the new release, vulnerabilities...

Critroni - File Encrypting Ransomware out in the Wild

A new ransomware from the Crypto-Ransomware family has been detected by the security researcher, which is being sold in different underground forums from the last month and recently included in the Angler exploit kit. The latest ransomware, given the name “Critroni”, includes a number of odd...

Critroni Crypto Ransomware Seen Using Tor for Command and Control

There’s a new kid on the crypto ransomware block, known as Critroni, that’s been sold in underground forums for the last month or so and is now being dropped by the Angler exploit kit. The ransomware includes a number of unusual features and researchers say it’s the first crypto ransomware seen...

Beware of the NSA, If You Are Privacy Conscious and Security Enthusiast

We all are aware of the National Security Agency’s NSA mass surveillance program to track non-Americans. Thanks to former NSA contractor Edward Snowden, who provided confidential documents about the widely spread surveillance programs conducted by the government intelligence agency such as NSA an...

Firefox onreadystatechange Event DocumentViewerImpl Use After Free

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

kitForm CRM Extension 0.43 (sorter.php, sorter_value param) - SQL Injection

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Happy easter.. Product: phpManufaktur / kitForm Version: = 0.43 2013-11-22 Date: 2014-04-20 Criticality: Medium Exploitable from: Remote Impact: SQL Injection Product URL: https://github.com/phpManufaktur/kitForm 1...

Tor 0.1.2.15 ControlPort Missing Authentication Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25188/info Tor is prone to an unauthorized-access vulnerability due to a design error when handling multiple connections to the ControlPort. An attacker can exploit this issue to reconfigure Tor and significantly weaken t...

Fedora Update for tor FEDORA-2014-7296

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tor < 0.1.2.16 ControlPort Remote Rewrite Exploit

No description provided by source. !-- Tor 0.1.2.16 with ControlPort enabled not default Exploit for Tor ControlPort torrc Rewrite Vulnerability http://secunia.com/advisories/26301 Rewrites the torrc to log to a different location: C:\Documents and Settings\All Users\Start...

Fedora Update for tor FEDORA-2014-7274

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: tor-0.2.4.22-2.fc20

Tor is a connection-based low-latency anonymous communication system. Applications connect to the local Tor proxy using the SOCKS protocol. The local proxy chooses a path through a set of relays, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the...

[SECURITY] Fedora 19 Update: tor-0.2.4.22-2.fc19

Tor is a connection-based low-latency anonymous communication system. Applications connect to the local Tor proxy using the SOCKS protocol. The local proxy chooses a path through a set of relays, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the...

Fedora 19 : tor-0.2.4.22-2.fc19 (2014-7274)

Update to 0.2.4.x branch which contains bug fixes, security fixes and new features. Release notes: http://ur1.ca/hi7sn Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

How To Remove File Metadata

How To Remove File Metadata For those of you who want to remove file metadata from any shared data, you can use existing document or image editor software which typically have built-in metadata editing capability. In this tutorial, we will introduce a standalone metadata cleaner tool which is...

Student Decrypts Simplocker Android Ransomware that Encrypts Files

In a previous story, I reported about a new ransomware threat known as Simplocker discovered by researchers at the security firm ESET, targeting Android users in the UK, Switzerland, Germany, India and Russia, for ransom. Simplocker Android/Simplocker.A is the latest Android ransomware that has...

openSUSE Security Update : tor (openSUSE-SU-2014:0143-1)

fixes potentially poor random number generation for users who 1 use OpenSSL 1.0.0 or later, 2 set 'HardwareAccel 1' in their torrc file, 3 have 'Sandy Bridge' or 'Ivy Bridge' Intel processors and 4 have no state file in their DataDirectory as would happen on first start. Users who generated relay...

openSUSE Security Update : tor (openSUSE-SU-2014:0719-1) (Heartbleed)

tor 0.2.4.22 bnc878486 Tor was updated to the recommended version of the 0.2.4.x series. - major features in 0.2.4.x : - improved client resilience - support better link encryption with forward secrecy - new NTor circuit handshake - change relay queue for circuit create requests from size-based...