keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // REL TO ALL // APPLIED HACKING KeySweeper KeySweeper 是一款隐蔽的基于 Arduino 的设备，伪装成一个可正常工作的 USB 墙式充电器，能够以无线方式被动嗅探、解密、记录并（通过 GSM）回传附近任何微软无线键盘的所有按键输入。 所有按键都会在线和本地记录。当输入触发词、用户名或 URL 时，设备会发送 SMS 警报，从而暴露密码。如果被拔出电源，KeySweeper 仍会依靠内置电池继续运行，并在重新通电后自动充电。基于 Web 的工具支持实时按键监控。 现场演示...

EUVD-2018-19793

Malware in sbrugna...

Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability

Microsoft Windows is a popular operating system. A security feature bypass vulnerability exists in the implementation of Microsoft Wireless Keyboard 850, which allows local attackers to exploit the vulnerability by submitting a special request to reuse an AES key to obtain keyboard input...

Security feature bypass

A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard...

Microsoft Fixes 66 Bugs in April Patch Tuesday Release

Microsoft’s April Patch Tuesday release includes fixes for 66 bugs, 24 of which are rated critical. Notable is Microsoft’s disclosure of a publicly known SharePoint elevation of privilege bug CVE-2018-1034, rated important, which has no fix but has not been publicly exploited. Microsoft SharePoin...

Microsoft Wireless Keyboard CVE-2018-8117 Local Security Bypass Vulnerability

Description Microsoft Wireless Keyboard is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Wireless Keyboard 850...