Hack The Sec-Leading Resource Of Linux Tutorial

Global Internet Authority — ICANN Hacked Again! Thursday

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/global-internet-authority-icann-hacked.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">Global Internet Authority — ICANN Hacked Again!</a></h1>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ICANN</b> (Internet Corporation for Assigned Names and Numbers) – the organisation responsible for allocating domain names and IP addresses for the Internet – <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">has been hacked</b>, potentially compromising its customers’ names, email addresses, hashed passwords, and more.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The US-administered non-profit corporation <a href="https://www.icann.org/news/announcement-2015-08-05-en" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">admitted</a> on Wednesday that its server security was breached within the past week and that…</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyeyKkX0uhNsyX827rcmelkRVTbrgRbDJkFGUygFsVx92ByydxRYoI3RRKK8A1Rj7ZgxDIbgtSHTv1JhcxcV7Fo3hPIvu0EN4wgcsqHS6eLlUB-l52yS8eBFPXHy1rE0vYzAM55z9OZQo/s1600/icann-website-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyeyKkX0uhNsyX827rcmelkRVTbrgRbDJkFGUygFsVx92ByydxRYoI3RRKK8A1Rj7ZgxDIbgtSHTv1JhcxcV7Fo3hPIvu0EN4wgcsqHS6eLlUB-l52yS8eBFPXHy1rE0vYzAM55z9OZQo/s1600/icann-website-hacked.png" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
…an "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">unauthorised person</i>" <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">gained access to usernames</b>,<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> email addresses</b></i>, and encrypted passwords for profile accounts on <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ICANN.org</i> public website.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The organisation believes that the leaked information includes harmless information such as user preferences, public biographies, interests, newsletters, and subscriptions.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Less than ten months ago, ICANN was hacked by a hacker who gained access to its internal system following a spear phishing attack in November last year. Employees were tricked into handing over their credentials after receiving malicious emails apparently sent from the ICANN's own domain.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
With those details, the hackers then managed to access ICANN systems, including the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Centralized Zone Data System</i></b> (CZDS), the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">domain registration Whois portal</i></b>, the wiki pages of the ICANN<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Governmental Advisory Committee</i></b> (GAC), and ICANN blog.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The passwords compromised in the latest data breach were encrypted one-way using the bcrypt algorithm.</div>
<blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"These encrypted passwords (hashes) are not easy to reverse,"</i> ICANN said, <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"but as a precaution we [require] that all users reset their passwords."</i></blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, there's no evidence that any profile accounts, or its internal systems have been accessed without authorization, nor any operational data, financial data, or <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">IANA (Internet Assigned Numbers Authority) systems</i></b> were involved.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The IANA is also a part of ICANN, which performs the actual management of the DNS root zone, globally-unique names and numbers.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Users are recommended to change their online account passwords, or just not using the same password across multiple websites.</div>
</div>
</div>

Global Internet Authority — ICANN Hacked Again! Thursday

Global Internet Authority — ICANN Hacked Again! ICANN (Internet Corporation for Assigned Names and Numbers) – the organisation responsi...

SSL Encryption — Securing Internet of Things (IoT) Wednesday

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 align="justify" class="post-title url" itemprop="headline name" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/ssl-encryption-securing-internet-of.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">SSL Encryption — Securing Internet of Things (IoT)</a></h1>
<div class="shareinpost" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 10px 0px 0px; outline: 0px; padding: 8px 15px; vertical-align: baseline;">
<div align="left" class="socialleft" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span class="st_plusone_hcount" displaytext="Google +1" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_fblike_hcount" displaytext="Facebook Like" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_facebook_hcount" displaytext="Facebook" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_twitter_hcount" displaytext="Tweet" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" st_via="TheHackersNews #Security" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_linkedin_hcount" displaytext="LinkedIn" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_sharethis_hcount" displaytext="ShareThis" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span></div>
</div>
<div class="post-body entry-content" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 30px !important; margin: 0px; outline: 0px; padding: 5px; text-align: justify; vertical-align: baseline;">
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">nternet of Things (IoT)</i></b> with the purpose of providing convenience to the users enabled every object in the universe to be as smart as a whip.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
By assigning IP address to all sorts of devices, ranging from household appliances, machines, medical devices and sensors to other day-to-day objects, and putting them all together on a standardised network is a common Internet of Things (IoT) practice.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUbpQsuu_LwrhJxl80MFQ4Gdx0_05nGxJqocNj8aOlGEBLIEc5JyAnocjuJthxaxizgMee12co0yblMwE_D141v5OK9IesMHJCemoAhIrh5hIwA9ekR39geX3P9nH5qb_5v03sU72poK9R/s1600/SSL-Encryption-internet-of-things.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUbpQsuu_LwrhJxl80MFQ4Gdx0_05nGxJqocNj8aOlGEBLIEc5JyAnocjuJthxaxizgMee12co0yblMwE_D141v5OK9IesMHJCemoAhIrh5hIwA9ekR39geX3P9nH5qb_5v03sU72poK9R/s1600/SSL-Encryption-internet-of-things.jpg" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Is Internet of Things Secure?</h3>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
In my previous articles, I gave you a glance of the most vulnerable smart cities that are increasingly adopting devices connected to the Internet in an attempt to add convenience and ease to daily activities.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
By 2020, there will be more than 45 Billion Internet-connected devices that will transform the way we live and work.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">The bottom line:</i></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
As the number of IoT enabled systems increases, the complexity of handling them increases; leading to an introduction of new risk and vulnerabilities associated with them.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Security of Internet of Things (IoT) Can’t Be Ignored</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The risks can be mitigated by more robust authentication methods at the time when the ‘<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Internet-connected devices</b></i>’ initiate communication with each other, hence developing secure identification management.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
For secure communication among the IoT devices, many security mechanisms and protocols have been implemented, including:</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<ul style="border: 0px; font-stretch: inherit; margin: 20px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Public Key Infrastructure (PKI) system</i></b> for securing communications between the Internet-connected devices.</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Secure Socket Layer (SSL) protocol </i></b>implementation for IoTs to encrypt their communication over the network.</li>
</ul>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
As it is evident, Security solutions for embedded devices connected to the Internet is also necessary. The devices also need to be secured from attacks like eavesdropping, DDoS and tampering of network traffic.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
SSL Encryption for Internet of Things (IoT)</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
For SSL/TLS implementation in IoT devices, INSIDE Secure has introduced a new open source embedded SSL called <a href="http://www.matrixssl.org/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">MatrixSSL Tiny</b></u></a> as an extension to MatrixSSL - a source for web servers to implement encryption layer for secure management of remote devices.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
MatrixSSL Tiny is going to be demonstrated this week at Black Hat conference in Las Vegas, where the security researchers will be representing its full suite of security products and will talk about its solution for cyber attacks focussed at IoT.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
MatrixSSL Tiny is a lightweight TLS software implementation for IoT devices with limited memory to make secure communications among them, yet demand more robust security to prevent eavesdropping and tampering of network traffic.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The software also performs real time functions that nulls the memory on completion of a particular session. According to researchers, MatrixSSL Tiny is the world’s smallest, yet powerful IoT security solution.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Why SSL is Not Sufficient?</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Despite developments for enhancing the security, IoT infrastructure is still massively prone to cyber attacks that lead to offer open gateways for people with malicious intents.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Any command initiated on a smart device, be it an application or a firmware, must be verified through a chain of trust.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
If we consider a situation, where communication is taking place on a traditional IT system and an IoT smart device, we see that IT systems follow a layered security procedure; whereas in IoT smart devices authenticity and confidentiality can be tampered with.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Therefore, multi-layer security measures are needed for IoT devices too so that the IoT devices could differentiate that the information received or sent is by an authorized user or an intruder.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">To sum up, I would say…</i></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The security of IoT enabled devices are becoming critical and a thing of concern for the security enablers. The point to be worried about is its future developments where, it is seen as a boon and not a bane.</div>
</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="articlebodyonly" id="articlebodyonly" itemprop="articleBody" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px 0px 15px; outline: 0px; padding: 0px; vertical-align: baseline;">
<div id="aim12388579919672172336" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<div dir="ltr" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: left; vertical-align: baseline;" trbidi="on">
<div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
</div>
</div>
</div>
</div>
</div>
</div>
</div>

SSL Encryption — Securing Internet of Things (IoT) Wednesday

SSL Encryption — Securing Internet of Things (IoT) nternet of Things (IoT) with the purpose of providing convenience to the users ...

SysAid Help Desk 'rdslogs' Arbitrary File Upload

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="l-submain for_pagehead size_large" style="background: rgb(255, 255, 255); border: 0px rgb(232, 232, 232); box-shadow: rgba(0, 0, 0, 0.0784314) 0px -2px 0px -1px inset; box-sizing: border-box; color: #666666; font-family: 'Open Sans'; font-size: 14px; line-height: 24px; margin: 0px auto; outline: 0px; padding: 90px 40px 0px; position: relative; vertical-align: baseline;">
<div class="l-submain-h g-html i-cf" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px auto; max-width: 1140px; outline: 0px; padding: 50px 0px; position: relative; vertical-align: baseline; z-index: 1;">
<div class="w-pagehead" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<h1 style="background: transparent; border: 0px; box-sizing: border-box; color: #555555; font-family: 'Noto Sans'; font-size: 38px; font-stretch: normal; font-weight: 300; line-height: 1.4; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
SysAid Help Desk 'rdslogs' Arbitrary File Upload</h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i.ytimg.com/vi/k3YVjoqW82Q/maxresdefault.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="180" src="http://i.ytimg.com/vi/k3YVjoqW82Q/maxresdefault.jpg" width="320" /></a></div>
<div>
<br /></div>
</div>
</div>
</div>
<div class="l-submain wpb_row" style="background: rgb(255, 255, 255); border: 0px rgb(232, 232, 232); box-sizing: border-box; color: #666666; font-family: 'Open Sans'; font-size: 14px; line-height: 24px; margin: 0px auto; outline: 0px; padding: 0px 40px; position: relative; vertical-align: baseline;">
<div class="l-submain-h g-html i-cf" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px auto; max-width: 1140px; outline: 0px; padding: 50px 0px; position: relative; vertical-align: baseline; z-index: 1;">
<table class="exploit_list" style="background-attachment: initial; background-clip: initial; background-color: rgb(239, 239, 239) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; color: #666666; font-size: 14px; line-height: 24px; margin: 10px 0px; outline: 0px; padding: 1px !important; vertical-align: baseline; width: 583px;"><tbody style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">EDB-ID:</strong> 37667</td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">CVE:</strong> <a class="external" href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2995" rel="nofollow" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;" target="_blank">2015-2995</a></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">OSVDB-ID:</strong> N/A</td></tr>
<tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Verified:</strong> <span class="fa fa-check-circle-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Author:</strong> <a href="https://www.exploit-db.com/author/?a=3211" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;">metasploit</a></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Published:</strong> 2015-07-21</td></tr>
<tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Download Exploit:</strong> <a href="https://www.exploit-db.com/download/37667" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;"><span class="fa fa-file-code-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span> Source</a> <a href="https://www.blogger.com/null" style="background-color: transparent; box-sizing: border-box; color: #337ab7; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;"><span class="fa fa-file-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span> Raw</a></td><td colspan="2" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Download Vulnerable App:</strong> N/A</td></tr>
</tbody></table>
<div class="bootstrap-wrapper" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<div class="exploit-meta clearfix" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<div class="info" style="background: transparent; border: 0px; box-sizing: border-box; float: left; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
</div>
</div>
</div>
</div>
</div>

SysAid Help Desk 'rdslogs' Arbitrary File Upload

SysAid Help Desk 'rdslogs' Arbitrary File Upload EDB-ID: 37667 CVE: 2015-2995 OSVDB-ID: N/A Verified: Author:...

Hacker Finds How Easy Is to Steal Money Using Square Credit-Card Reader

<div dir="ltr" style="text-align: left;" trbidi="on">
<a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/hacker-finds-how-easy-is-to-steal-money.html" itemprop="url" rel="bookmark" style="background-color: white; border: 0px; color: #3d5a99; display: block; font-family: 'Open Sans', arial, sans-serif; font-size: 28px; font-stretch: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-decoration: none; vertical-align: baseline;">Hacker Finds How Easy Is to Steal Money Using Square Credit-Card Reader</a><br />
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Next time just be careful while swiping your credit card at small retailers or trendy stores that use Square Reader to accept credit card payments.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The increasingly popular and widely used <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Square Reader can be easily turned into a skimming device</i></b> that can be used to steal your credit card data, a group of researchers warned.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhL-P1md7KDrktfEUDBzsa_17zU-72Jn4gRS4nqi0cYgwez3RnOeltE5E1036bdVKYCPUly-OzNWj-DCYSZvQFBdA7jK3opujz_5JAr4_wAq1Pqs6T0HO53H2cW6dyLp4mR7KqqdYvSKyFV/s1600/Skimming-square-credit-card-reader.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="175" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhL-P1md7KDrktfEUDBzsa_17zU-72Jn4gRS4nqi0cYgwez3RnOeltE5E1036bdVKYCPUly-OzNWj-DCYSZvQFBdA7jK3opujz_5JAr4_wAq1Pqs6T0HO53H2cW6dyLp4mR7KqqdYvSKyFV/s1600/Skimming-square-credit-card-reader.png" width="320" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<a class="url entry-title" href="http://thehackernews.com/2015/08/square-reader-credit-card-skimming-hack.html" itemprop="url" rel="bookmark" style="background-color: white; border: 0px; color: #3d5a99; display: block; font-family: 'Open Sans', arial, sans-serif; font-size: 28px; font-stretch: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-decoration: none; vertical-align: baseline;"></a><br />
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Square Reader is a tiny device that allows small retailers to easily accept credit and debit card payments without having to spend the money on the traditional point of sale systems.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, despite its convenience, this cheap and easy-to-use alternative has a critical flaw that could allow anyone to easily steal your payment card information.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
All an attacker need is a screwdriver, superglue, and<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> roughly 10 minutes to turn the latest generation Square Reader into a tiny, portable card skimmer</i></b>.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Converting a New Generation Square Reader into a Card Skimmer?</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
A team of three security researchers from Boston University has discovered a way to physically modify the device and <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: italic; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">disable the encryption </b>that generally protects your credit card data being transmitted to the smartphones.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The tampered device will look exactly like the Square Reader, but Square counters that the tampered device won't work with the official Square app.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, researchers claim that even so, the modified device can still be used as a regular credit card skimmer to store and record card information.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
An attacker could even develop an unofficial app that looks legit, but hides skimming code underneath. While chances of encountering such a device are unlikely, it's worth keeping an eye on your bank statements.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Method to Steal Credit Card Data without tampering with Square Reader</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Besides this method, the researchers also discovered another flaw that allowed them to <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">record credit card data directly into a smartphone</i></b>, even by using a regular, non-altered, encrypted reader.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Malicious merchants can used the method to scam their customers by first swiping the credit cards on their smartphone and later play them back through the Square app to make fraudulent transactions.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"I can take that signal and convert it using a decoder freely available online, and then I have your credit card information," </i><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Alexandrea Mellen</i></b>, one of the three security researchers, <a href="http://motherboard.vice.com/read/researchers-turn-square-reader-into-credit-card-skimmer-in-under-10-minutes" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">told</a> Motherboard.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Square admitted that there is a possibility to playback recorded swipes using the methods described by the researchers, but the company dismissed this as an actual flaw.</div>
<blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"We do not see it as a security risk," </i>a Square employee wrote in the report <a href="https://hackerone.com/reports/38682" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">published</a> on the Square's bug bounty service HackerOne. <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"In particular, it is not possible to process a stored swipe more than once."</i></blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The three security researchers, <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">John Moore</i></b>, <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Alexandrea Mellen</i></b> and <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Artem Losev</i></b>, are going to present their findings <a href="https://www.blackhat.com/us-15/briefings.html#mobile-point-of-scam-attacking-the-square-reader" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">during a talk</a>, "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">MOBILE POINT OF SCAM: ATTACKING THE SQUARE READER</i></b>," on Wednesday at the Black Hat security conference in Las Vegas.</div>
</div>
</div>

Hacker Finds How Easy Is to Steal Money Using Square Credit-Card Reader

Hacker Finds How Easy Is to Steal Money Using Square Credit-Card Reader Next time just be careful while swiping your credit card at small...

Android Vulnerability Traps Devices in 'Endless Reboot Loop'

<div dir="ltr" style="text-align: left;" trbidi="on">
<a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/android-vulnerability-traps-devices-in.html" itemprop="url" rel="bookmark" style="background-color: white; border: 0px; color: #3d5a99; display: block; font-family: 'Open Sans', arial, sans-serif; font-size: 28px; font-stretch: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-decoration: none; vertical-align: baseline;">Android Vulnerability Traps Devices in 'Endless Reboot Loop'</a><br />
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Poor Android users are facing a terrible, horrible, and awful week.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Few days ago, Trend Micro security researchers uncovered a Android crashing vulnerability in the widely used mobile operating system, impacting the majority of Android devices in use.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVSShR-Nk2KOlUmViL2WFnob6NEAMf0uSLnUw0VFXitYolhC2GBW0uwGA_Z3hc6xKSn7ogR8UvKP4yCylKTWDJevX_ZqtBtWgfUTxUBmNr4m-9U6muo3_BFjeZ-HbsiVITHJ2IbYNC4mgd/s1600/android-reboot-vulnerability.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVSShR-Nk2KOlUmViL2WFnob6NEAMf0uSLnUw0VFXitYolhC2GBW0uwGA_Z3hc6xKSn7ogR8UvKP4yCylKTWDJevX_ZqtBtWgfUTxUBmNr4m-9U6muo3_BFjeZ-HbsiVITHJ2IbYNC4mgd/s1600/android-reboot-vulnerability.png" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<a class="url entry-title" href="http://thehackernews.com/2015/08/android-endless-reboot-bug.html" itemprop="url" rel="bookmark" style="background-color: white; border: 0px; color: #3d5a99; display: block; font-family: 'Open Sans', arial, sans-serif; font-size: 28px; font-stretch: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-decoration: none; vertical-align: baseline;"></a><br />
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The report follows another significant Stagefright vulnerability that was revealed by separate researchers, who warned that nearly 950 Million Android phones can be hijacked by sending a simple text message or via malicious Android app or specially crafted web pages.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
EXPLOIT TO TRAP ANDROID DEVICES IN ENDLESS REBOOTS</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Now, the security researchers have discovered a dangerous security bug in the Android operating system that they claim can "brick" your phone, making it unresponsive and completely useless.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The new vulnerability,<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> CVE-2015-3823</i>, can be exploited by potential hackers to cause your Android device to endless Reboot, and is similar to the Stagefright bug in that the flaw exists in the ‘mediaserver’ built-in program.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The vulnerability affects even more Android users. Nearly <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">90 percent of Android devices</i> running<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">versions 4.0.1 Jelly Bean to 5.1.1 Lollipop are vulnerable</i></b> to the latest security flaw, affecting every 9 out of 10 Active Android devices.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
HOW ANDROID EXPLOIT WORKS?</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
A Hacker can trigger endless reboots in two ways:</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<ul style="border: 0px; font-stretch: inherit; margin: 20px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Through a Malicious Android App</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Through a Specially-Crafted Web Site</li>
</ul>
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
In either case, the attacker lure victims to play malformed media file (.MKV file) using the buggy ‘mediaserver’ plugin. This will cause the mediaserver function to fall into an endless loop beyond the user’s control, forcing the Android device to get slow down until it reboots… again and again.</div>
<blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
"<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">The vulnerability is caused by an integer overflow in parsing MKV files</i>," mobile threat response engineer Wish Wu of Trend Micro wrote in a Monday <a href="http://blog.trendmicro.com/trendlabs-security-intelligence/android-mediaserver-bug-traps-phones-in-endless-reboots/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">blog post</a>. This "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">causes the device to fall into an endless loop when reading video frames.</i>"</blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
SMALL QUIRK TO GET RID OF THIS FLAW</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The firm reported the issue to Google, but the company is not taking it seriously, classifying it as a low-level vulnerability.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Until the official patch is delivered by Google, you can do a simple quirk if this bug hit your devices. All you need to do is reboot your devices in Safe Mode by holding the power button down and pressing Power Off option until you see the pop-up box asking you to restart in Safe Mode.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Safe Mode will disable all third-party apps and information, allowing you to continue using your Android devices until a patch is released.</div>
</div>
</div>

Android Vulnerability Traps Devices in 'Endless Reboot Loop'

Android Vulnerability Traps Devices in 'Endless Reboot Loop' Poor Android users are facing a terrible, horrible, and awful week. ...

Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection Tuesday

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/thunderstrike-2-worlds-first-firmware.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; vertical-align: baseline;">Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection</a></h1>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
If you think Apple’s Mac computers are much more secure than Windows-powered systems, you need to think again. This isn’t true, and security researchers have finally proved it.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Two security researchers have developed a proof-of-concept computer worm for the first time that can spread automatically between MacBooks, without any need for them to be networked.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOrL5YIvo-O_u_GcOnXvPsi2jfqQFSAXVR_1WUWU3-4evxHLw3045RLte9KFHdkbDdcE1WEmfW2WUPirNZ0oKRA2X0KuKEFiij8D36KEMh5ypEv5u0TI8wYntfOtTj6y4mXN3_1oqVjLM-/s1600/Thunderbolt-Thunderbolt-malware-bug.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOrL5YIvo-O_u_GcOnXvPsi2jfqQFSAXVR_1WUWU3-4evxHLw3045RLte9KFHdkbDdcE1WEmfW2WUPirNZ0oKRA2X0KuKEFiij8D36KEMh5ypEv5u0TI8wYntfOtTj6y4mXN3_1oqVjLM-/s1600/Thunderbolt-Thunderbolt-malware-bug.jpg" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Dubbed <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Thunderstrike 2</u></b>, the new proof-of-concept firmware attack is inspired by previously developed proof-of-concept firmware called Thunderstrike.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Thunderstrike Attack, developed by security engineer Trammell Hudson, actually took advantage of a<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">vulnerability in Thunderbolt Option ROM</i></b> that could be used to infect <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Apple Extensible Firmware Interface (EFI)</i> by allocating a malicious code into the boot ROM of an Apple computer through infected Thunderbolt devices.<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<h3 style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Thunderstrike 2 Spreads Remotely</h3>
</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" />Although the original Thunderstrike required an attacker to have physical access to your Mac computer to work, the new attack can be spread remotely.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Thunderstrike 2 can be delivered via phishing emails, malicious Web site, as well as through a peripheral connected to the Ethernet port or USB.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
After downloaded on a computer, Thunderstrike 2 can infect Thunderbolt-connected accessories that use Option ROM. After that, the malware can automatically spread to any Mac that you plug the accessory into.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Thunderstrike 2 is developed by two security researcher Trammell Hudson and Xeno Kovah of firmware security consultancy Legbacore. The researchers also demonstrated their attack, which you can watch in the video given below.<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<h3 style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
 Infects Mac Computers Without Detection</h3>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Given the vicious worm, Thunderstrike 2, targets and lives in the firmware and can even evade a whole system reboot, it’s a real pain for the Mac users.</div>
<blockquote style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
"<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Thunderstrike 2 is really hard to detect, it’s really hard to get rid of, and it’s really hard to protect against something that’s running inside the firmware,</i>" Kovah <a href="http://www.wired.com/2015/08/researchers-create-first-firmware-worm-attacks-macs/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">told</a> Wired.</blockquote>
<blockquote style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
"<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">For most users that’s really a throw-your-machine-away kind of situation. Most people and organizations don’t have the wherewithal to physically open up their machine and electrically reprogram the chip.</i>"</blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Many of the firmware vulnerabilities discovered by the researchers to develop Thunderstrike 2 are common to most EFI firmware. A total of six vulnerabilities affected PCs from Dell, HP, Lenovo, Samsung, and others.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Five firmware vulnerabilities also affected the Mac's firmware, and of those, Apple has fully patched one flaw, partially patched another, and failed to patch the rests.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The researchers plan to present their findings at the <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Black Hat</i> and <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Def Con security conferences</i> in Las Vegas this week.</div>
</div>
</div>

Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection Tuesday

Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection If you think Apple’s Mac computers are muc...

Unpatched Mac OS X Zero-day Bug Allows Root Access Without Password Tuesday

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<a class="url entry-title" href="http://www.hackthesec.co.in/" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">Unpatched Mac OS X Zero-day Bug Allows Root Access Without Password</a></h1>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Hackers have their hands on something of your concern. A severe zero-day vulnerability in the latest, fully patched version of Apple's Mac OS X is reportedly being exploited in the wild by the hackers.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The vulnerability could allow attackers to install malware and adware onto a target Mac, running OS X 10.10 (Yosemite) operating system, <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">without requiring victims to enter system passwords</i></b>, a new report says.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsBVlOYLMKaxy8UpuzuV4DkVXvT27G9-k-c1fvQu5tGRw7iHDO9CIoCxCnAVEKrEkGzTrEKKdC2oiJnbplaXPAvYfi8oAq-LsqVx18xk-DAWE98fm5tfCN6XCg-0bgc9vyaU1MU2IRvdOV/s1600/hacking-mac-os-x-root-password.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsBVlOYLMKaxy8UpuzuV4DkVXvT27G9-k-c1fvQu5tGRw7iHDO9CIoCxCnAVEKrEkGzTrEKKdC2oiJnbplaXPAvYfi8oAq-LsqVx18xk-DAWE98fm5tfCN6XCg-0bgc9vyaU1MU2IRvdOV/s1600/hacking-mac-os-x-root-password.jpg" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The zero-day bug came over a week after security researcher Stefan Esser discovered a privilege escalation zero-day vulnerability in the latest version of Apple's OS X Yosemite that caused due to environment variable <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">DYLD_PRINT_TO_FILE</i></b> and <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">dynamic linker dyld</i></b>, new error-logging features added to the operating system.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The developers failed to implement standard safeguards that are needed while adding support for new environment variables to the OS X dynamic linker dyld, allowing hackers to create or modify files with root privileges that can fit anywhere in the Mac OS X file system.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
OS X Zero-Day Exploit in the Wild</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Now, security researchers from anti-malware firm Malwarebytes spotted a malicious installer in the wild that was exploiting the zero-day vulnerability to infect Macs with different types of adware including<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: italic; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">VSearch, MacKeeper</b> and<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: italic; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Genieo</b>.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The issue actually resides in a hidden Unix file – <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Sudoers </b>– which is actually a list of files as to which software are allowed to get root permissions on a computer. However, a modification to the Sudoers allowed the installer to gain root level permissions without the need of password from an administrator.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The issue was discovered by <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Adam Thomas</i> while testing a new adware installer.</div>
<blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"The script that exploits the DYLD_PRINT_TO_FILE vulnerability is written to a file and then executed,"</i> Malwarebytes researchers explains in a <a href="https://blog.malwarebytes.org/mac/2015/08/dyld_print_to_file-exploit-found-in-the-wild/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">blog post</a>. <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"Part of the script involves deleting itself when it's finished."<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" />"The real meat of the script, though, involves modifying the Sudoers file. The change made by the script allows shell commands to be executed as root using sudo, without the usual requirement for entering a password."</i></blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
No Way Out for Mac Users</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The zero-day flaw <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">affects both the current stable Mac version OS X 10.10</i></b> (build 10.10.4) and the<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">recent Beta build OS X 10.10.5</i></b> (Yosemite).</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Good news for Mac users who are running Mac OS X 10.11 El Capitan Beta builds, as it appears that they are not affected by the zero-day flaw.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Until Apple patches this critical issue, you don't have any good options to prevent a skilled hacker from installing malware on your Mac systems, beyond using a patch created by Esser himself, which can be downloaded from <a href="https://github.com/sektioneins/SUIDGuard" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">here</a>.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
No doubt, Esser is a respected security researcher, but installing a patch from a third party developer can be a risky. Therefore, we advise you to fully investigate the patch before installing.</div>
</div>
</div>