In the 1969 classic The Italian Job, Michael Caine and crewcommit a major gold heist by hacking into the traffic light system of Turin, Italy, to cause a massive traffic jam, giving the robbers a perfectly synced path to escape through the gridlock. As it turns out, this piece of high-action Hollywood theatrics is not merely screenwriter […]
Hacking Traffic Lights Is Apparently Really Easy Read More »
Appropriately named HTTP Shaming IDs apps and Web services operating without encryption. by Robert Lemos HTTP Shaming’s ethos is even on a fridge. Tony Webster, HTTP Shaming The amount of personal data traveling to and from the Internet has exploded, yet many applications and services continue to put user information at risk by not encrypting data
New website aims to publicly shame apps with lax security Read More »
Medical records data can be a valuable asset, especially in a country where many have no health insurance By Martyn Williams IDG News Service – The theft of personal data on 4.5 million patients of Community Health Systems by hackers in China highlights the increasing degree to which hospitals are becoming lucrative targets for information theft. Already this
Why would Chinese hackers want US hospital patient data? Read More »
Credit: © Ocean/Corbis When a cybercrook targets a person, he or she usually relies on tricking the victim into clicking on link bait – such as exploiting the death of Robin Williams – or opening an email attachment, spear phishing so the victim enters sensitive info on a spoofed site, or watering hole attacks that
Attacks exploited YouTube & Microsoft Live to install surveillance Read More »
Written by Ian Murphy The arrival of the European General Data Protection Regulation (GDPR) next year will start a 2-year scramble to be compliant or risk fines of 5% of turnover or 100m Euros for data breaches Data protection across Europe is about to change and the reason is simple, the European Commission (EC) has
Data protection in the cloud Read More »
GPU Cracking – On the Cheap from NetSPI
GPU Cracking – On the Cheap Read More »
NetsPWN During many of our penetration tests, we gather domain password hashes (with permission of the client) for offline cracking and analysis. This blog is a quick summary of the hashes that we attempted to crack in the second quarter of 2014 (and so far for this year). The plan is to continue doing this
Cracking Stats for Q2 2014 Read More »
I have shared my Cisco based hosted VoIP networks security research at Blackhat USA 2014 and DEF CON 22 last week. This research contains several different attack vectors, published vulnerabilities, unpatched vulnerabilities, Skinny protocol attacks, new SIP protocol attacks, VOSS IP phone XML services attacks and new version of Viproy VoIP penetration testing kit. I’ll
VoIP Wars: Attack of the Cisco Phones Read More »
By Ryan Whitwam The traditional auto industry has been slow to adopt new technology, butTesla is far from traditional. The electric car start up helmed by Elon Musk (also the founder of SpaceX) relies on advanced computer control of the car’s systems, and of course it has that gigantic 17-inch touchscreen center console in the Model S.
Tesla swings by DEF CON in search of car hackers to secure the Model S Read More »
Primal Security unleashes a 12-part Python tutorial series. From “Hello World” to Python malware/exploits, take my hand and walk into the darkness – Happy Hacking!http://www.primalsecurity.net/python-tutorials/ This tutorial series is designed for those who don’t come from a programming background. Each tutorial will cover common use cases for Python scripting geared for InfoSec professionals. From “Hello
PrimalSec’s Python Tutorial Series Read More »
