January 2016 Apple Security Patches iOS, OS X, Safari

Apple on Tuesday released security patches for iOS, OS X and an update for the Safari browser. The patches come less than a week after a ShmooCon presentation by Synack director of research Patrick Wardle revealed that Apple’s Gatekeeper security feature in OS X can be bypassed by an attacker wit...

LastPass Mitigates LostPass Phishing Attack

LastPass has taken measures to mitigate a phishing attack described this weekend at ShmooCon that put at risk users’ credentials and information stored by the password manager. Researcher Sean Cassidy, chief technology officer of cloud security company Praesidio, demonstrated an attack where he w...

POC Android botnet - Command and Control Channel over SMS

POC Android botnet - Command and Control Channel over SMS To avoid detection, this proof-of-concept code utilizes the Short Messaging Service SMS as a command & control channel. This adds fault tolerance because, if a smartphone is not available on the GSM network due to being powered off or out...

Sign of the Times: Shmoocon Tickets Scalped on eBay

How do you know when your alt.hacking conference has arrived? Maybe when scalpers are offering tickets for the event on eBay for almost three times the face value. That’s the situation the organizers of hacking conference Shmoocon have found themselves in, as illicit auctions for tickets to next...

ShmooCon

Washington D.C., U.S. Go to Shmoo. Enjoy yourself at Shmoo. But for God’s sake, just don’t ask anyone at Shmoo who they work for. This D.C. based hacking con, now in its seventh year, is lousy with spooks and other assorted hackers in the employ of Uncle Sam. The show was started and took its nam...

BlackBerry Spyware Package Shown at ShmooCon

This video demonstrates a proof-of-concept BlackBerry spyware package developed by Tyler Shields, one of Veracode’s senior security researchers...

VMware Server 2.0.1 ESXi Server 3.5 - Directory Traversal

VMware Server 2.0.1 ESXi Server 3.5 - Directory Traversal source: https://www.securityfocus.com/bid/36842/info VMware products are prone to a directory-traversal vulnerability because they fail to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain...

Jikto download-vulnerability warning-the black bar safety net

Sources of information: B. S. T What is the Jikto it? CNET network 4 on 4, International reports Web Security vendor SPI Dynamics originally don't want to make a network on the PC into hack helper tool for the outflow, but now the tools of the source code or the outflow went. "Jikto source code h...