Author Archives: Swati Khandelwal

No, WannaCry Is Not Dead! Hits Honda & Traffic Light Camera System

Posted on by

It’s been over a month since the WannaCry ransomware caused chaos worldwide and people have started counting its name as ‘the things of past,’ but…

…WannaCry is not DEAD!

The self-spreading ransomware is still alive and is working absolutely fine.

The latest victims of WannaCry are Honda Motor Company and 55 speed and traffic light cameras in Australia.

The WannaCry ransomware shuts

Continue reading No, WannaCry Is Not Dead! Hits Honda & Traffic Light Camera System→

Brutal Kangaroo: CIA-developed Malware for Hacking Air-Gapped Networks Covertly

Posted on by

WikiLeaks has published a new batch of the ongoing Vault 7 leak, this time detailing a tool suite – which is being used by the CIA for Microsoft Windows that targets “closed networks by air gap jumping using thumb drives,” mainly implemented in enterprises and critical infrastructures.

Air-gapped computers that are isolated from the Internet or other external networks are believed to be the

Continue reading Brutal Kangaroo: CIA-developed Malware for Hacking Air-Gapped Networks Covertly→

Critical RCE Flaw Found in OpenVPN that Escaped Two Recent Security Audits

Posted on by

A security researcher has found four vulnerabilities, including a critical remote code execution bug, in OpenVPN, those were not even caught in the two big security audits of the open source VPN software this year.

OpenVPN is one of the most popular a… Continue reading Critical RCE Flaw Found in OpenVPN that Escaped Two Recent Security Audits→

WebSites Found Collecting Data from Online Forms Even Before You Click Submit

Posted on by

‘Do I really need to give this website so much about me?’

That’s exactly what I usually think after filling but before submitting a web form online asking for my personal details to continue.

I am sure most of you would either close the whole tab or would edit already typed details (or filled up by browser’s auto-fill feature) before clicking ‘Submit’ — Isn’t it?

But closing the tab or

Continue reading WebSites Found Collecting Data from Online Forms Even Before You Click Submit→

NSA Opens Github Account — Lists 32 Projects Developed by the Agency

Posted on by

The National Security Agency (NSA) — the United States intelligence agency which is known for its secrecy and working in the dark — has finally joined GitHub and launched an official GitHub page.

The NSA employs genius-level coders and brightest mathematicians, who continually work to break codes, gather intelligence on everyone, and develop hacking tools like EternalBlue that was leaked by

Continue reading NSA Opens Github Account — Lists 32 Projects Developed by the Agency→

A Decade Old Unix/Linux/BSD Root Privilege-Escalation Bug Discovered

Posted on by

Update: Find working Exploits and Proof-of-Concepts at the bottom of this article.

Security researchers have discovered more than a decade-old vulnerability in several Unix-based operating systems — including Linux, OpenBSD, NetBSD, FreeBSD and Solaris — which can be exploited by attackers to escalate their privileges to root, potentially leading to a full system takeover.

Dubbed Stack Clash

Continue reading A Decade Old Unix/Linux/BSD Root Privilege-Escalation Bug Discovered→

Database of Over 198 Million U.S. Voters Left Exposed On Unsecured Server

Posted on by

Information on more than 198 Million United States citizens, that’s over 60% of the US population, was exposed in what’s believed to be the largest ever known exposure of voter-related to date.

This blunder was caused by Deep Root Analytics (DRA), a d… Continue reading Database of Over 198 Million U.S. Voters Left Exposed On Unsecured Server→

Mexican Govt. Allegedly Used Spyware Against Journalists, Activists & A Child

Posted on by

After the disclosure of sophisticated global espionage and disinformation campaign aimed to discredit enemies of the state, Citizen Lab researchers exposed the dirty game of the Mexican government and its politics.

The report — “Government Spy: Systematic monitoring of journalists and human rights defenders in Mexico” — published by Citizen Lab today revealed how the Mexican government used

Continue reading Mexican Govt. Allegedly Used Spyware Against Journalists, Activists & A Child→

New Fileless Ransomware with Code Injection Ability Detected in the Wild

Posted on by

It is no secret that hackers and cybercriminals are becoming dramatically more adept, innovative, and stealthy with each passing day.

While new forms of cybercrime are on the rise, traditional activities seem to be shifting towards more clandestine te… Continue reading New Fileless Ransomware with Code Injection Ability Detected in the Wild→

Wikileaks Unveils ‘Cherry Blossom’ — Wireless Hacking System Used by CIA

Posted on by

WikiLeaks has published a new batch of the ongoing Vault 7 leak, this time detailing a framework – which is being used by the CIA for monitoring the Internet activity of the targeted systems by exploiting vulnerabilities in Wi-Fi devices.

Dubbed “Cherry Blossom,” the framework was allegedly designed by the Central Intelligence Agency (CIA) with the help of Stanford Research Institute (SRI

Continue reading Wikileaks Unveils ‘Cherry Blossom’ — Wireless Hacking System Used by CIA→