SSL and internet security news – Page 222 – Informations about SSL certificates and networks security

Attack vs. Defense in Nation-State Cyber Operations

April 13, 2017 infossl

academicpapers, cyberattack, cyberwar, defense, nationalsecuritypolicy, Security technology, vulnerabilities

I regularly say that, on the Internet, attack is easier than defense. There are a bunch of reasons for this, but primarily it’s 1) the complexity of modern networked computer systems and 2) the attacker’s ability to choose the time and method of the attack versus the defender’s necessity to secure against every type of … Read More “Attack vs. Defense in Nation-State Cyber Operations” »

Research on Tech-Support Scams

April 12, 2017 infossl

academicpapers, malware, scams, Security technology

Interesting paper: “Dial One for Scam: A Large-Scale Analysis of Technical Support Scams“: Abstract: In technical support scams, cybercriminals attempt to convince users that their machines are infected with malware and are in need of their technical support. In this process, the victims are asked to provide scammers with remote access to their machines, who … Read More “Research on Tech-Support Scams” »

New Destructive Malware Bricks IoT Devices

April 11, 2017 infossl

denialofservice, internetofthings, malware, Security technology

There’s a new malware called BrickerBot that permanently disables vulnerable IoT devices by corrupting their storage capability and reconfiguring kernel parameters. Right now, it targets devices with open Telnet ports, but we should assume that future versions will have other infection mechanisms. Slashdot thread. Powered by WPeMatico

Fourth WikiLeaks CIA Attack Tool Dump

April 10, 2017 infossl

cia, hacking, leaks, Security technology, vulnerabilities, wikileaks

WikiLeaks is obviously playing their Top Secret CIA data cache for as much press as they can, leaking the documents a little at a time. On Friday they published their fourth set of documents from what they call “Vault 7”: 27 documents from the CIA’s Grasshopper framework, a platform used to build customized malware payloads … Read More “Fourth WikiLeaks CIA Attack Tool Dump” »

Shadow Brokers Releases the Rest of Their NSA Hacking Tools

April 10, 2017 infossl

encryption, gametheory, hacking, keys, nsa, Security technology

Last August, an unknown group called the Shadow Brokers released a bunch of NSA tools to the public. The common guesses were that the tools were discovered on an external staging server, and that the hack and release was the work of the Russians (back then, that wasn’t controversial). This was me: Okay, so let’s … Read More “Shadow Brokers Releases the Rest of Their NSA Hacking Tools” »

Friday Squid Blogging: Squid Can Edit Their Own RNA

April 7, 2017 infossl

academicpapers, Security technology, squid

This is just plain weird: Rosenthal, a neurobiologist at the Marine Biological Laboratory, was a grad student studying a specific protein in squid when he got an an inkling that some cephalopods might be different. Every time he analyzed that protein’s RNA sequence, it came out slightly different. He realized the RNA was occasionally substituting … Read More “Friday Squid Blogging: Squid Can Edit Their Own RNA” »

Incident Response as “Hand-to-Hand Combat”

April 7, 2017 infossl

cyberattack, cyberwar, nationalsecuritypolicy, nsa, russia, Security technology

NSA Deputy Director Richard Ledgett described a 2014 Russian cyberattack against the US State Department as “hand-to-hand” combat: “It was hand-to-hand combat,” said NSA Deputy Director Richard Ledgett, who described the incident at a recent cyber forum, but did not name the nation behind it. The culprit was identified by other current and former officials. … Read More “Incident Response as “Hand-to-Hand Combat”” »

Hacking a Brazilian Bank

April 6, 2017 infossl

banking, dns, fraud, hacking, kaspersky, Security technology, theft

A detailed account. Powered by WPeMatico

Many Android Phones Vulnerable to Attacks Over Malicious Wi-Fi Networks

April 6, 2017 infossl

Security technology

There’s a blog post from Google’s Project Zero detailing an attack against Android phones over Wi-Fi. From Ars Technica: The vulnerability resides in a widely used Wi-Fi chipset manufactured by Broadcom and used in both iOS and Android devices. Apple patched the vulnerability with Monday’s release of iOS 10.3.1. “An attacker within range may be … Read More “Many Android Phones Vulnerable to Attacks Over Malicious Wi-Fi Networks” »

APT10 and Cloud Hopper

April 5, 2017 infossl

china, cyberespionage, espionage, malware, Security technology

There’s a new report of a nation-state attack, presumed to be from China, on a series of managed ISPs. From the executive summary: Since late 2016, PwC UK and BAE Systems have been assisting victims of a new cyber espionage campaign conducted by a China-based threat actor. We assess this threat actor to almost certainly … Read More “APT10 and Cloud Hopper” »