European Aviation Agency Warns of Aircraft Hacking

The director of one of Europe’s top aviation agencies warned on Thursday that hackers could infiltrate critical systems in an airplane on the ground. Patrick Ky director of the European Aviation Safety Agency, said a consultant hired by the agency—one who is a commercial pilot as well—exploited...

PIXORD Vehicle 3G Wi-Fi Router 3GR-431P - Multiple Vulnerabilities

Exploit Title: Vehicle 3G Wi-Fi Router - PIXORD - Multiple Vulnerabilities Date: May 01, 2015 No response from Vendor till date Discovered by: Karn Ganeshen Vendor Homepage: http://www.pixord.com/en/productsshow.php?show=17 Version: Model Name :3GR-431P Software Version :RTA-A00102 Wireless Drive...

Your GPS Location and Calls Can be Spied Using Network Vulnerability

Yes, you heard it right. It's the dirty truth that’s featuring what is being called the largest privacy breach ever. Billions of cell phone users are at risk of a vulnerability in the SS7 inter-carrier network that allows hackers and spies agencies to track locations and intercept all voice calls...

Fiat Chrysler Automobiles UConnect allows a vehicle to be remotely controlled

Overview Fiat Chrysler Automobiles FCA UConnect may allow a remote attacker to control physical vehicle functions. Description According to a WIRED news article, an unknown vulnerability in FCA UConnect software allows some functions of recent models of Jeep Cherokee to be controlled by a remote...

Satellite-Based Monitoring Constitutes a Fourth Amendment Search

The Supreme Court has weighed in on a series of lower court decisions, issuing a summary opinion that satellite-based monitoring is in fact a Fourth Amendment search. What remains to be decided is whether GPS-based tracking constitutes an unreasonable search and is thus a violation of the Fourth...

Ghiro 0.2 - Automated Digital Image Forensics Tool

Sometime forensic investigators need to process digital images as evidence. There are some tools around, otherwise it is difficult to deal with forensic analysis with lot of images involved. Images contain tons of information, Ghiro extracts these information from provided images and display them...

CVE-2014-9194

Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...

Design/Logic Flaw

Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...

CVE-2014-9194 Arbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity

Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...

CVE-2014-9194

The CVE-2014-9194 issue affects Arbiter Systems’ 1094B GPS Substation Clock. The vulnerability is described as Insufficient Verification of Data Authenticity (CWE-345) allowing remote attackers to spoof GPS satellite broadcasts via crafted radio transmissions, leading to clock disruption or servi...

Uber’s Android app is Literally Malware?

The popular ride-sharing service Uber has been hit by various controversies lately, but now the things gone even worse for the company when a security researcher made a worrying discovery this week and claims, "Uber’s app is literally malware." The ride-hailing company is in disputes of handling...

Samsung Insists Find My Mobile Service Safe

Samsung this week tried to quell recent reports that its Find My Mobile service is vulnerable to hacking, firing back at NIST National Institute of Standards and Technology who warned last month that the feature could be exploited. In a blog post on the company’s global blog Tuesday, Samsung...

CVE-2014-5982

The RunKeeper - GPS Track Run Walk aka com.fitnesskeeper.runkeeper.pro application 4.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5982

The CVE-2014-5982 entry concerns the RunKeeper - GPS Track Run Walk Android app (com.fitnesskeeper.runkeeper.pro) version 4.7 that does not validate X.509 certificates when connecting to SSL servers. This omission enables man-in-the-middle attackers to spoof servers and obtain sensitive informati...

CVE-2014-5968

The iGolf - Golf GPS aka com.igolf application 20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The iGolf - Golf GPS aka com.igolf application 20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5968

The CVE-2014-5968 entry concerns the Android app iGolf - Golf GPS (com.igolf) version 20, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certificate. The associated NVD...

Arbiter Systems 1094B GPS Clock Spoofing Vulnerability

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on December 11, 2014, and is being released to the NCCIC/ICS-CERT web site. Arbiter Systems has identified a GPS clock spoofing vulnerability in its 1094B clock. Arbiter Systems has produced a new product that is no...

SandroRAT — Android Malware that Disguises itself as "Kaspersky Mobile Security" App

Researchers have warned users of Android devices to avoid app downloads from particularly unauthorized sources, since a new and sophisticated piece of malware is targeting Android users through phishing emails. The malware, dubbed SandroRAT, is currently being used by cybercriminals to target...

Google Play Store Update Allows Apps to Silently Gain Control of Your Device

Google just made a huge change to the way application permissions work on Android devices which has left a potential door open to malicious app developers and hackers. Google narrows down Android's 145 permissions into 13 broad categories and groups app permissions into 'groups of related...