Collaborate Disseminate
The attack targets IKE’s handshake implementation used for IPsec-based VPN connections, opening the door for MiTM attacks or for bad actors to access data carried in VPN sessions. Continue reading Researchers Break IPsec VPN Connections with 20-Year-Old Protocol Flaw
Respondents in a survey from Venafi said they believe voting machines, encrypted communications from polling stations and databases that store voter registration data are all vulnerable. Continue reading ThreatList: Almost All Security Pros Believe Election Systems Are at Risk
Configuration data for GoDaddy servers could be used as a reconnaissance tool for malicious actors to uncover ripe targets. Continue reading GoDaddy Leaks ‘Map of the Internet’ via Amazon S3 Cloud Bucket Misconfig
Sloppy Android developers not following security guidelines for external storage opens the door to device takeover and more. Continue reading DEF CON 2018: ‘Man in the Disk’ Attack Surface Affects All Android Phones
The Vote Hacking Village invited attendees – including kids as young as six – to hack the voting infrastructure, including ballot machines, a voter database and more. Continue reading DEF CON 2018: Voting Hacks Prompt Push Back from Election Officials, Vendors
LAS VEGAS – In recent years there has been more attention paid to the security of medical devices; however, there has been little security research done on the unique protocols used by these devices. Many of the insulin pumps, heart monitors and other … Continue reading DEF CON 2018: Hacking Medical Protocols to Change Vital Signs
Analytics, advertising and other web scripts can capture information housed in user confirmations for flight bookings, food delivery, medical testing and more. Continue reading DEF CON 2018: Telltale URLs Leak PII to Dozens of Third Parties
More than a dozen flaws in smart-city gear could open the door to attackers bent on sowing public panic, according to IBM X-Force. Continue reading Black Hat 2018: Widespread Critical Flaws Found in Smart-City Gear
DarkHydrus uses the open-source Phishery tool to create two of the known Word documents used in the attacks. Continue reading New Actor DarkHydrus Targets Middle East with Open-Source Phishing
Rather than eliminating bugs, the idea is to add large numbers of non-exploitable bugs to software as decoys to waste cyber-criminals’ time. Continue reading ‘Chaff Bug’ Defense Rolls Out Shiny Objects for Attackers to Find