Is Your Mobile Carrier Your Weakest Link?

More online services than ever now offer two-step authentication -- requiring customers to complete a login using their phone or other mobile device after supplying a username and password. But with so many services relying on your mobile for that second factor, there has never been more riding o...

Sabre Corp. Investigating Breach of Reservation System

Travel services company Sabre Corp., acknowledged this week that it’s in the middle of investigating a data breach in its Hospitality Solutions reservation system that may have spilled personally identifiable information and payment card data belonging to its customers. The Texas-based company...

Lazarus APT Spinoff Linked to Banking Hacks

SINT MAARTEN—The Lazarus Group, a nation-state level of attacker tied to the 2014 attacks on Sony Pictures Entertainment, has splintered off a portion of its operation to concentrate on stealing money to fund itself. The group, widely believed to be North Korean, has been linked to a February 201...

Russian Hacker behind 'NeverQuest' Malware, Wanted by FBI, Is Arrested in Spain

A Russian computer hacker wanted by the FBI on hacking allegations was arrested and jailed in Spain earlier this week, while a decision on his extradition to the United States has yet to be made. The Guardia Civil, Spanish law enforcement agency officers, have detained 32-year-old Stanislav Lisov...

US Voting Systems Deemed Critical Infrastructure

The Department of Homeland Security has designated the U.S. voting infrastructure, including voting machines and registration databases, as critical infrastructure. On Friday, Secretary Jeh Johnson elevated the voting infrastructure to a critical infrastructure subsector under the existing...

FBI-DHS Report Links Fancy Bear Gang to Election Hacks

In a report released Thursday the Federal Bureau of Investigation and the US Department of Homeland Security implicated Russian hacking group Fancy Bear in attacks against several election-related targets. According to the Joint Analysis Report, the hacking group Fancy Bear, believed to have ties...

FBI Warned State Election Board Systems of Hacks

The Federal Bureau of Investigation’s Cyber Division this month warned election officials nationwide to fortify voter registration data systems in the wake of two breaches it was able to detect earlier this summer. A “flash” warning sent by the agency about 10 days ago warned state boards of...

Best of Enterprise and AD Exploitation at Black Hat / DEFCON

Lots of hacks, lots of people, lots of content, and lots of parties. That basically sums up this years BlackHat and Defcon. The two conferences seem to get bigger every year with no sign of slowing down, which emphasizes how cybersecurity is becoming more and more of an issue for everyone:...

WIN $1 Million Bounty For Hacking the New iOS 9 iPhone

Good news for Hackers and Bug hunters! You can now WIN 1 Million Dollars for finding zero-day hacks for iPhones and iPads. Yes, $1,000,000.00 Reward This Huge Bug Bounty is offered by the new Security firm Zerodium, a startup of the infamous French-based Security firm "VUPEN", who is well known f...

Researchers Unveil Square Reader Mobile POS Hacks

It wasn’t long ago when hacking a point-of-sale system meant deploying a RAM scraper at a retailer, sitting back and watching the credit card numbers roll in. Now that POS has gone mobile with vendors such as Square, Intuit, Revel and others using hardware fobs connected to smartphones and tablet...

Virginia Voting Machines Exposed to Low-Level, Election Altering Hacks Since 2004

The Virginia Information Technologies Agency VITA is calling on the board of elections in that commonwealth to immediately discontinue use of its electronic voting devices after an examination revealed the systems lack strong credentials and encryption and are utterly vulnerable to vote...

FBI Officially Blames North Korea in Sony Hacks

The FBI announced today that it has gathered enough evidence to say with certainty that the government of the Democratic People’s Republic of Korea is in fact responsible for recent intrusions into the networks of Sony Pictures Entertainment SPE. This fact was all but officially stated yesterday...

dos_ssh - Use BIOS ram hacks to make a SSH server

Use BIOS ram hacks to make a SSH server out of any INT 10 13h app MS-DOS is one of those You can find a demo Youtube Video here below: Download dosssh...

Expert Warns of Chip-and-PIN Pitfalls

LAS VEGAS – The inevitable changeover from magnetic strip-based payment cards to EMV, or chip-and-PIN, is coming for consumers and merchants in the United States. And coming along with it are a raft of weaknesses and real-world attacks that shoot holes in the presumption that EMV will remedy cred...

Kaillera Multiple Clients Buffer Overflow Vulnerabilities

No description provided by source. !/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13:...

youtube blog 0.1 (rfi/sql/xss) Multiple Vulnerabilities

No description provided by source. / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title...

Factlink: X/Csrf token problem

I found that you are using X/Csrf token as a protection against CSRF attacks. But you are using same X/Csrf token in and out. eg z3qrwilV8lz7CXsMhmvqxn+93GDZm/m9w/d5DZjoj8w= This token is same before and after log-in. This must be patch as it me result session hacks...

Syrian Electronic Army Hacks Microsoft Social Media Accounts

Just a few days after it hacked Microsoft’s Skype blog and Twitter account, the Syrian Electronic Army SEA took to some of the company’s other social media accounts over the weekend, hacking both its @MSFTNews and @XboxSupport Twitter handles along with the company’s official blog. It all started...

Syrian Electronic Army Hacks Skype Twitter Account With Anti-Surveillance Message

The Syrian Electronic Army took advantage of the relative calm of New Year’s Day to make a loud statement about the NSA’s surveillance program and Microsoft’s alleged participation in it. The group compromised the Twitter account and blog of Microsoft’s Skype service and posted anti-surveillance...

Malicious Mobile Charger can Hack your iPhone within a minute

You might want to be a little more careful the next time you pick up a cheap knock-off accessory for your device to save a few bucks because new hardware hacks could be the next big thing among cyber criminals. Researchers say they've built a custom iPhone wall charger that can Install malware in...