Tor — How to Protect Your Digital Environment?

Are you aware of everything that your users are accessing from your environment? While most of the time, non-work-related Internet browsing is harmless looking at pictures of cats, online shopping, social media, etc. there are some instances where you could be an unknowing and unwilling participa...

Dennis Fisher and Mike Mimoso Discuss the 2015 Security Analyst Summit

Dennis Fisher and Mike Mimoso discuss their takeaways from the SAS 2015 conference, including the Equation Group APT analysis, hacking car washes, indexing the dark web and hacking home appliances. Download: digitalunderground187.mp3 Music by Chris Gonsalves...

Indexing the Dark Web One Hacking Forum At A Time

CANCUN–There are only so many ways to tip-toe around some of the Internet’s darker, seedier corners. Sites offering illegal drugs, DDoS for hire and other questionable merchandise are often laden with malware, hazardous to visit, and in turn, can be hard to fully get a grip on. But according to...

Silk Road founder Ross Ulbricht Convicted of All 7 Charges; Faces Life In Prison

A jury has found Silk Road founder Ross Ulbricht a.k.a Dread Pirate Roberts guilty on all seven counts and faces Life In Prison for running an underground black market i.e. Silk Road. Ross Ulbricht, a San Francisco 30-year-old web developer was arrested by FBI in a sting operation in October 2013...

Silk Road Reloaded Switches from Tor to I2P Anonymous Network

Multiple successors of the original Silk Road have come and all have been taken offline in recent years, but aside from selling illegal goods and services, they all have had one thing in common – they've all relied on the Tor network. A new version of the anonymous online black market Silk Road,...

Thunderstrike Apple Mac OS X Firmware Bootkit Unveiled

A vulnerability at the heart of Apple’s Mac OS X systems—one thus far only partially addressed by Apple—opens the door to the installation of malicious firmware bootkits that resist cleanup and give hackers persistent, stealthy control over a compromised Mac. The research is the work of a reverse...

EC3 Head Paints Bleak Cybercrime Picture

WASHINGTON D.C. – Everyone has the right to privacy, said Troels Oerting, head of the Europol’s European Cybercrime Center EC3, at Georgetown Law’s Cybercrime2020 conference yesterday. However, he went on, if you break your contract with society, that right can be taken away. Oerting noted that i...

Tor Project Looking for Answers Following Operation Onymous

Officials at the Tor Project are continuing to look for answers following the takedown late last week of hundreds of Tor hidden services, including the popular black market website Silk Road 2.0. In a blog entry yesterday Tor made it clear that it wasn’t entirely sure how or why the services that...

DigiCert Considering Certs for Hidden Services

News broke last week that Facebook had built a hidden services version of its social network available to users browsing anonymously via the Tor Project’s proxy service. Unlike any .onion domain before it, Facebook’s would be verified by a legitimate digital signature, signed and issued by...

Facebook Creates .Onion Site; Now Accessible Via Tor Network

UPDATE – This story has been updated with commentary from the Tor Project. Facebook announced today that the social network will now be directly available to users as a Tor hidden service. The Tor Project is an Internet-traffic anonymization service that relays user traffic through a number of...

CVE-2014-5851

The Dark Summoner aka com.darksummoner application 1.03.39 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Dark Summoner aka com.darksummoner application 1.03.39 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5851

The CVE-2014-5851 entry concerns The Dark Summoner Android app (package com.darksummoner) version 1.03.39, where SSL/TLS connections do not verify X.509 certificates. This allows a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via a crafted certificate. The referenced ...

CVE-2014-5851

The Dark Summoner aka com.darksummoner application 1.03.39 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

In the Wake of the Snowden Revelations, A Wave of Innovation

It was an absurd scene. Keith Alexander, the director of the NSA and a four-star general in the Army, stood alone on the stage, squinting through the floodlights as members of the standing-room-only crowd shouted insults and accusations. Armed men in dark suits roamed the area in front of the...

Dark Age CMS 2.0 'login.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33271/info Dark Age CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

CoCSoft Stream Down 6.8.0 Universal exploit metasploit

No description provided by source. $Id: streamdownBOF.rb 1 2011-12-18 $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

PenPals Authentication Bypass

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: PenPals Authentication Bypass Vendor url:http://www.anblik.com Version:1.0 Price:1200$ Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW...

websitebaker add-on concert calendar 2.1.4 - Multiple Vulnerabilities

No description provided by source. Advisory: Websitebaker Add-on 'Concert Calendar 2.1.4' XSS & SQLi vulnerability Advisory ID: SSCHADV2013-001 Author: Stefan Schurtz Affected Software: Successfully tested on Concert Calendar 2.1.4 Vendor URL:...

Mythic Entertainment Dark Age of Camelot 1.6x Encryption Key Signing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9960/info An encryption key signing vulnerability has been reported to exist in Dark Age of Camelot. This issue is due to a design error in the application that carries out encryption without having the encryption key...