Lucene search
+L

1004 matches found

ThreatPost
ThreatPost
added 2014/05/06 2:19 p.m.7 views

USA FREEDOM Act Revised to Limit NSA Surveillance

UPDATE: A prior version of this story incorrectly noted that the bill revisions included a clause that would require an earlier re-authorization to the PATRIOT Act, when in fact the revisions push that re-authorization date more than two years further into the future. The House Judiciary Committe...

6.7AI score
SaveExploits0References4
ThreatPost
ThreatPost
added 2014/05/06 2:15 p.m.11 views

Coalition Calls For Net Reset in June

A new alliance composed of privacy and digital rights advocates are encouraging internet users to block mass surveillance and fight back against the National Security Agency on June 5. The coalition, dubbed Reset the Net is hoping to carry out its goal through the further implementation of SSL,...

7.2AI score
SaveExploits0References11
The Hacker News
The Hacker News
added 2014/05/06 8:35 a.m.13 views

Released Emails Show 'Google in a Relationship With NSA'

Edward Snowden's leaks last year questioned the integrity of several big and reputed companies such as Apple, Google and Microsoft that were found in relation with the NSA in its surveillance programs. Thereafter they maintained distance with the Agency and claimed to be unaware of such governmen...

6.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2014/05/01 6:2 a.m.11 views

Apple iOS 7 Updates Silently Remove Encryption for Email Attachments

There is no question that Mobile devices have become a staple in everyday living around the world. But have you ever asked yourself, How Secure are the Android, iPhone or any other Smart devices? It is really important for us to think about the Security and Privacy of our Data stored in...

6.4AI score
SaveExploits0
ThreatPost
ThreatPost
added 2014/04/29 10:50 a.m.11 views

The White House and Zero Day Sleight of Hand

The White House wants you to know that it did not know about the OpenSSL Heartbleed vulnerability before you did. The White House also wants you to know that administration officials don’t think stockpiling zero days isn’t necessarily good for national security. That’s all well and good, except...

7.1AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2014/04/23 12:42 a.m.13 views

NIST Removes Dual_EC_DRBG Random Number Generator from Recommendations

The National Institute of Standards and Technology NIST has announced to abandon the controversial Dual Elliptic Curve Deterministic Random Bit Generator, better known as DualECDRBG in the wake of allegations that the National Security Agency. Back in December, Edward Snowden leaks revealed that...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2014/04/20 5:17 a.m.25 views

Routers TCP 32764 Backdoor Vulnerability Secretly Re-Activated Again

At the beginning of this year, we reported about the secret backdoor ‘TCP 32764’ discovered in several routers including, Linksys, Netgear, Cisco and Diamond that allowed an attacker to send commands to the vulnerable routers at TCP port 32764 from a command-line shell without being authenticated...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2014/04/17 7:54 a.m.13 views

Several Tor Exit Nodes Vulnerable To Heartbleed Bug

Half of the Internet fall victim to the biggest threat, Heartbleed bug and even the most popular online anonymity network Tor is also not spared from this bug. Tor is one of the best and freely available privacy software, runs on the network of donated servers that lets people communicate...

6.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2014/04/15 11:17 p.m.14 views

WhatsApp Flaw leaves User Location Vulnerable to Hackers and Spy Agencies

If you are using WhatsApp to chit-chat with your friends or relatives, then you should be careful about sharing your location with them using WhatsApp ‘Location Share’ feature. No doubt, WhatsApp communication between your phone and company’s server is now encrypted with SSL, which means whatever...

6.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2014/04/13 11:37 p.m.16 views

Obama Lets NSA Use Zero-Day Exploits by labeling it as 'National Security Need'

On Saturday, the Senior Administration Officials cast light on the subject of Internet Security and said President Obama has clearly decided that whenever the U.S. Intelligence agency like NSA discovers major vulnerabilities, in most of the situations the agency should reveal them rather than...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2014/04/11 11:21 p.m.74 views

NSA denies Report that Agency knew and exploited Heartbleed Vulnerability

The Bloomberg claimed that the U.S. National Security Agency NSA knew about the most critical Heartbleed flaw and has been using it on a regular basis to gather “critical intelligence” and sensitive information for at least past two years and decided to keep the bug secret, citing two sources...

5CVSS7.9AI score0.99999EPSS
SaveExploits91
ThreatPost
ThreatPost
added 2014/04/10 3:16 p.m.13 views

OpenSSL Heartbleed Bug Exploited Before This Week?

Bruce Schneier stood on the Source Boston keynote stage yesterday and used the word “ginormous” to describe the severity of the OpenSSL heartbleed bug. “My guess is that when heartbleed became public, the top 20 governments in the world started exploiting it immediately,” Schneier said. That’s...

7.4AI score
SaveExploits0References11
The Hacker News
The Hacker News
added 2014/04/04 8:15 p.m.13 views

Facebook added Free Voice Calling Feature to its Messenger App

Have you noticed a blue color "Free Voice Call" icon that appears next to your Facebook contacts in the iOS and Android Facebook Messenger app? Yes, Facebook has updated their Messenger app that includes the ability to make free voice calls to your online pals and now Facebook users can simply ta...

6.6AI score
SaveExploits0
ThreatPost
ThreatPost
added 2014/04/04 3:41 p.m.152 views

IE 12 to Support HSTS Encryption Protocol

Microsoft confirmed today it will support HTTPS Strict Transport Protocol HSTS in Internet Explorer 12, bringing its browser in line with other major vendors in its support of the protocol. Browsers supporting HSTS force any sessions sent over HTTP to be sent instead over HTTPS, encrypting...

9.3CVSS0.4AI score0.99945EPSS
SaveExploits33References4
ThreatPost
ThreatPost
added 2014/04/03 10:40 a.m.17 views

Cyberespionage, Not Cyber Terror, is the Major Threat, Former NSA Director Says

CHANTILLY, VA–The list of threats on the Internet is long and getting longer each day. Cybercrime, nation-state attackers, cyber espionage and hacktivists all threaten the security and stability of the network and its users in one way or another. But the one threat that some experts have warned...

7AI score
SaveExploits0References3
The Hacker News
The Hacker News
added 2014/04/03 4:53 a.m.11 views

YAHOO! Now Encrypts Everything; Encrypted Yahoo Messenger Coming Soon

ON HIGH-PRIORITY YAHOO! is finally rolling out encryption implementation over their site and services in order to protect users. Yahoo is rapidly becoming one of the most aggressive supporters of encryption, as in January this year Yahoo enabled the HTTPS connections by default, that automaticall...

6.4AI score
SaveExploits0
ThreatPost
ThreatPost
added 2014/04/02 11:38 a.m.10 views

Matthew Green on the NSA and Crypto Backdoors

Dennis Fisher talks with Matthew Green of Johns Hopkins University about the paper he co-authored on the Extended Random extension for Dual EC DRBG and whether it could be considered a backdoor. Download: digitalunderground149.mp3...

1.9AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2014/04/01 7:22 p.m.25 views

Researchers explained How ANGRY BIRDS Sharing Your Personal Data

We are already aware about the fact that most probably every mobile app is collecting our data in one or the other form. Thanks to Edward Snowden, who provided the secret documents that revealed that the world's most popular Smartphone applications, including gaming apps such as Angry Birds, are...

6.6AI score
SaveExploits0
ThreatPost
ThreatPost
added 2014/04/01 2:18 p.m.8 views

Clapper: NSA Queries Databases for Information on U.S. Persons

UPDATE–The NSA searches the data it collects incidentally on Americans, including phone calls and emails, during the course of terrorism investigations. James Clapper, the director of national intelligence, confirmed the searches in a letter to Sen. Ron Wyden, the first time that such actions hav...

0.7AI score
SaveExploits0References2
ThreatPost
ThreatPost
added 2014/04/01 12:56 p.m.15 views

Extended Random Extension Made Cracking BSAFE Trivial

UPDATE: Known theoretical attacks against TLS using the troubled Dual EC random number generator— something an intelligence agency might try its hand at—are in reality a bit more challenging than we’ve been led to believe. The addition of the Extended Random extension to RSA Security’s BSAFE...

7AI score
SaveExploits0References2
Rows per page
Query Builder