OpenSSL Hackers Used Weak Password at Web Host to Deface Site
OpenSSL says hackers took advantage of a weak password used at its hosting provider to gain access to a hypervisor and deface the organization’s website.
Probes Against Linksys Backdoor Port Surging
Probes are surging against a port used by a backdoor discovered in Linksys networking gear, according to the SANS Internet Storm Center.
Academics Call for End to Mass Surveillance
A group of hundreds of academics from countries around the world have started a petition that demands Western governments, such as those in the United States and UK, stop the mass surveillance programs they have in place and “effectively protect everyone’s fundamental rights and freedoms”.
Dennis Fisher and Mike Mimoso talk about the year that was in the security industry, including the last six months of NSA drama, the Microsoft bug bounty program, exploit sales and attacks against major banks.
Hackers exploited a previously disclosed vulnerability in the popular photo sharing application Snapchat and leaked 4.6 million of the service’s usernames and partial phone numbers online yesterday.
Target’s admission that encrypted PIN data was stolen and secured with 3DES encryption has experts concerned because of the age of the algorithm and the availability of stronger options.
The Syrian Electronic Army took advantage of the relative calm of New Year’s Day to make a loud statement about the NSA’s surveillance program and Microsoft’s alleged participation in it.
The Federal Election Commission (FEC) is highly vulnerable to intrusions and data breaches after an audit discovered “significant deficiencies” in the FEC’s IT security program.
Researchers Sean Cross and Dr. Andrew Huang demonstrated yesterday at the Chaos Communication Congress that they could write arbitrary code onto various flash-based SD memory cards.
Windows Error Reporting crash reports are sent unencrypted to Microsoft and contain a wealth of system and application information that can be exploited not only by hackers but government agencies to fingerprint machines for compromise.
