Category Archives: Security Blog

Would You Buy Your Kids A “Hello Barbie” Doll?

Posted on March 12, 2015 by Carmelo

Most kids like to talk to their toys, it’s not uncommon. As far back as I can remember, like many children, I’d play with toys and do voices for them, or ask them questions on behalf of other toys, playing out … Continue reading →

Posted in Security Blog | Tagged , , , , , , , , , , | Comments Off on Would You Buy Your Kids A “Hello Barbie” Doll?

A USB to Destroy a Computer

Posted on March 12, 2015 by Carmelo

A blog writer named Dark Purple wrote an article on a proof of concept called USB Killer, a USB that when plugged into a computer, would charge, then discharge back into the computer, to fry circuits and burn half the computer … Continue reading →

Posted in Security Blog | Tagged , , , , , , | Comments Off on A USB to Destroy a Computer

Rowhammer

Posted on March 11, 2015 by Carmelo

Intel-compatible PCs running Linux are exploitable through the physical weaknesses in certain varieties of DDR DRAM (double data rate dynamic random-access memory) chips and gaining higher kernel privileges on the system. Google’s Project Zero has released an in-depth article on … Continue reading →

Posted in Security Blog | Tagged , , , , , , , | Comments Off on Rowhammer

The Disgruntled and Passed Over

Posted on March 11, 2015 by Carmelo

The FBI reports that; Michael Meneses, a system manager and software programmer who was often passed over for promotions, created a program to pharm employee passwords, left his job at an unnamed Long Island High-Voltage Power Manufacturer, in January 2012. After … Continue reading →

Posted in Security Blog | Tagged , , , , , , | Comments Off on The Disgruntled and Passed Over

Men who Performed the Largest Data Breaches in History: Arrested

Posted on March 7, 2015 by Carmelo

The Department of Justice reports, three men operating from Vietnam, the Netherlands, and Canada are accused of carrying out the largest data breach of names and email addresses in the history of the Internet. Two of the hackers, Viet Quoc … Continue reading →

Posted in Security Blog | Tagged , , , , , , , , | Comments Off on Men who Performed the Largest Data Breaches in History: Arrested

Windows Vulnerable to FREAK

Posted on March 6, 2015 by Carmelo

Microsoft confirms that most production versions of Windows are susceptible to the FREAK vulnerability in schannel (secure channel), where an attacker can force a downgrade in the SSL and then perform a man-in-the-middle attack. I last reported that FREAK only … Continue reading →

Posted in Security Blog | Tagged , , , , , , , , , , , | Comments Off on Windows Vulnerable to FREAK

Hilary Clinton. Email Admin.

Posted on March 4, 2015 by Carmelo

Perhaps its because Government servers are strong hacker and espionage targets. The New York Times reports that Hillary Clinton used only her personal email (hdr22@clintonemail.com) address while serving as Secretary of State. As others have reported, a hacker calling him … Continue reading →

Posted in Security Blog | Tagged , , , , , | Comments Off on Hilary Clinton. Email Admin.

Factoring attack on RSA-EXPORT Keys (FREAK)

Posted on March 4, 2015 by Carmelo

Researchers disclosed a new SSL/TLS vulnerability — the FREAK attack. The vulnerability allows attackers to intercept HTTPS connections between vulnerable clients and servers and force them to use ‘export-grade’ cryptography, which can then be decrypted or altered. The ssl3_get_key_exchange function … Continue reading →

Posted in Security Blog | Tagged , , , , , , , , , , | Comments Off on Factoring attack on RSA-EXPORT Keys (FREAK)

I Just Want to Be Safe, I’m A ToysЯUs Kid!

Posted on March 4, 2015 by Carmelo

Without getting breached, that they know of, Toys’Я’Us has seen numerous attempts to break into user accounts so they initiated a hard reset of all user accounts with a friendly email for users to create strong passwords. It almost sounds … Continue reading →

Posted in Security Blog | Tagged , , , , | Comments Off on I Just Want to Be Safe, I’m A ToysЯUs Kid!

Netflix Phishing

Posted on March 4, 2015 by Carmelo

Badguys are hitting up customers in Great Britain with phishing campaigns for the popular Netflix service. They are using a similar domain name called Netfixx, hoping people don’t catch the URL. The form asks for name and card numbers. The … Continue reading →

Posted in Security Blog | Tagged , , , , | Comments Off on Netflix Phishing