US Voting Machines Hacked At DEF CON – Every One

US Voting Machines Hacked, some in minutes at this year’s DEF CON “Voting Village” – not something you want to hear really. Especially with the results of recent elections that the World is currently dealing with the consequences from. Of course with physical access, most machines can be dominated in some way or another – […]

The post US…

Read the full post at darknet.org.uk

Continue reading US Voting Machines Hacked At DEF CON – Every One

Alexa, Are You Spying On Me? Not Really, Maybe, It’s Complex!

Do you own an Amazon Echo?

So are you also worried about hackers turning out your device into a covert listening device?

Just relax, if there’s no NSA, no CIA or none of your above-skilled friends after you.

Since yesterday there have been several reports on Amazon Echo hack that could allow a hacker to turn your smart speaker into a covert listening device, but users don’t need to worry

Continue reading Alexa, Are You Spying On Me? Not Really, Maybe, It’s Complex!

Vulnerable Radiation Monitoring Devices Won’t Be Patched

Three radiation monitoring device vendors will not patch a handful of vulnerabilities that could be abused by hackers, including a backdoor that affords high privileges on one device. Continue reading Vulnerable Radiation Monitoring Devices Won’t Be Patched

DJI Firmware Hacking Removes Drone Flight Restrictions

Drones have been taking over the world, everyone with a passing interest in making videos has one and DJI firmware hacking gives you the ability to remove all restrictions (no-fly zones, height and distance) which under most jurisdictions is illegal (mostly EU and FAA for the US). It’s an interesting subject, and also a controversial…

Read the full post at darknet.org.uk

Continue reading DJI Firmware Hacking Removes Drone Flight Restrictions

Intel Finally Patches Critical AMT Bug (Kinda)

Intel finally patches the critical AMT bug discovered in March by security researcher Maksim Malyutin at Embedi, I say ‘kinda’ because it’s not really up to Intel to deploy the fix to the problem. They can’t really push out updates to CPUs, but at least they have fixed it in the firmware and now the […]

The post Intel Finally Patches…

Read the full post at darknet.org.uk

Continue reading Intel Finally Patches Critical AMT Bug (Kinda)

Hajime Botnet Reaches 300,000 Hosts With No Malicious Functions

This is not the first IoT heavy botnet, Mirai takes that title, the interesting part is the Hajime botnet appears to be benign. So far no malicious functions have been detected in the codebase, other than the ability to replicate itself and block other malware, Hajime seems to have no DDoS or offensive mechanisms. Hajime […]

The post Hajime…

Read the full post at darknet.org.uk

Continue reading Hajime Botnet Reaches 300,000 Hosts With No Malicious Functions

PogoPlug Hacking: A Step by Step Guide to Owning The Device

[Films By Kris Hardware] has started quite an interesting YouTube series on hacking and owning a PogoPlug Mobile v4. While this has been done many times in the past, he gives a great step by step tutorial. The series so far is quite impressive, going into great detail on how to gain root access to the device through serial a serial connection.

PogoPlugs are remote-access devices sporting ARM processor running at 800 MHz, which is supported by the Linux Kernel.  The version in question (PogoPlug Mobile v4) have been re-purposed in the past for things like an inexpensive PBX, an …read more

Continue reading PogoPlug Hacking: A Step by Step Guide to Owning The Device

Ubiquiti Wi-Fi Gear Hackable Via 1997 PHP Version

We actually use Ubiquiti Wi-Fi Gear and have found it pretty good, I didn’t realise their security was so whack and they were using PHP 2.0.1 from 1997! In this case a malicious URL can inject commands into a Ubiquiti device which surprise, surprise, runs the web service as root. Apparently, they also got scammed […]

The post Ubiquiti Wi-Fi…

Read the full post at darknet.org.uk

Continue reading Ubiquiti Wi-Fi Gear Hackable Via 1997 PHP Version

Termineter – Smart Meter Security Testing Framework

Termineter is a Python Smart Meter Security Testing framework which allows authorised individuals to test Smart Meters for vulnerabilities such as energy consumption fraud, network hijacking, and more. Many of these vulnerabilities have been highlighte… Continue reading Termineter – Smart Meter Security Testing Framework

160,000 Network Printers Hacked

It’s a pretty simple hack (in a rather grey-hat fashion), but it’s getting a LOT of media coverage and 160,000 network printers hacked just goes to show once again the whole Internet of Things chapter we are entering is pretty scary. Definitely a neat hack tho, utilising the mass scanning power of Zmap and scanning […]

The post 160,000…

Read the full post at darknet.org.uk

Continue reading 160,000 Network Printers Hacked