We think of a virtual machine as a way to isolate one system from another and, in general, it works well. But not always. Pwn2Own is a hacking contest that is part of the CanSecWest security conference in Vancouver, BC, Canada. This year researchers who were members of Qihoo 360’s security team figured out a […]
Continue reading → [DISPLAY_ACURAX_ICONS]A U.S. citizen of Ethiopian heritage was hacked a few years ago by the Ethiopian government here in the U.S. The victim, who goes by the pseudonym of Mr. Kidane to protect his family here and in Ethiopia, is being represented by the EFF, the Jones Day law firm and the law firm Robins Kaplan. […]
Continue reading → [DISPLAY_ACURAX_ICONS]Earlier this month I wrote about Stewart International Airport in New York leaving a backup drive exposed to the Internet without a password or encryption, exposing extremely sensitive information (see post here). Now it has been revealed that an unnamed DoD officer, possibly a Lt. Colonel, had a backup drive with thousands of sensitive documents exposed […]
Continue reading → [DISPLAY_ACURAX_ICONS]Today the Department of Justice announced the indictment of 4 in the 2013 Yahoo breach – three years after it happened. Two of the people indicted are members of the Russian FSB. Under Russian law, the FSB is part of the Russian military and responsible for, among other things, counterespionage. The other two indicted are Russian […]
Continue reading → [DISPLAY_ACURAX_ICONS]The headline reads Hidden Backdoor Found in Chinese-Made Equipment. Nothing New! Move Along! That headline by itself should scare you. Researchers found a hidden backdoor in a Double Technology GSM gateway used by telephone companies and VoIP providers. DblTek is based in Hong Kong. According to the security firm Trustwave, there is an account called […]
Continue reading → [DISPLAY_ACURAX_ICONS]Recently Cisco published a critical vulnerability alert regarding their Webex browser plugin. While the plugin vulnerability, which affected Firefox, Chrome and Internet Explorer, was very serious it points to a much bigger issue. First the plugin issue. The bug affects Webex Meeting Server, Meeting Center, Event Center, Training Center and Support Center. Due to a […]
Continue reading → [DISPLAY_ACURAX_ICONS]