Archive for category: Web Security

You are here: / Web Security

Hackers Search Engine “Shodan” revealed as Google for Hackers – HackersNewsBulletin.com

/0 Comments/in /by

Another interesting article from our partners at HackersNewsBulletin.com on “Shodan”, read below for details:

You only see the OS for Hackers, Software for Hackers but have you seen any search engine for Hackers, yes it is true there is a search engine for Hackers see the info below:

Do you know that a Hackers Search Engine on the Internet has been revealed for peering in the darkest corners of the web and finding servers, webcams and traffic lights.
Dubbed by “Shodan” which is search engine for Hackers and their Tagline is “EXPOSE ONLINE DEVICES”
 
According to a news website, the search engine was named after the villain in the cyberpunk role-playing games System Shock and System Shock 2. 
What Hackers can find here?
  • Traffic LIghts
  • Security Cameras
  • Webcams
  • VOIP Phones
  • Many more…

One cyber security expert even used it to find a hockey rink that could be defrosted, traffic lights for an entire city, and the controls for a hydroelectric plant in France.
Read the rest on their site.

Four Ways To Strengthen SMB Password Security

/0 Comments/in , /by

An posting from Dark reading: Passwords are the weak link for companies of all sizes, but many small and midsize businesses (SMBs) rely on their workers to make the right choice in selecting strong passwords.
Unfortunately, when left to their own devices, most employees do not get it right: Either due to a lack of security education or a desire for efficiency, people make the wrong choices when it comes to passwords. While almost 90 percent of people think they select good passwords, 61 percent reuse their passwords across sites and more than half have five or fewer passwords, according to a September 2012 survey of consumers by CSID, an identity management and fraud-protection firm.

To read more click here:

Spear Phishing Cause of South Korean Cyber Attack

/0 Comments/in /by

An article from Threat Post on Spear Phishing:

It appears that a spear phishing campaign was the genesis for the wiper malware infections that ultimately knocked several prominent South Korean banks and broadcasters offline last week, according to a malware analysis performed by researchers from the Finnish cybersecurity firm F-Secure.

The South Korean NSHC Red Alert Team mentioned a number of malicious hashes in its official report [pdf] analyzing the incident, suggesting that these attacks were part of a larger campaign consisting of multiple operations.

to read more click here:

South Korea hit by cyber attack.

/0 Comments/in /by

An article  from  Ehacking News  on South Korea being  hit by cyber attack:  Yesterday South Korea was hit by a massive cyber attack . The attack disturbed the functioning of three banks and two TV channels. The bank were hit such that no financial transactions can be made.

The TV channels were affected by locking their computers hence not allowing the TV channels to edit or function to full efficiency.The attack points towards North Korea which only days ago said it will attack South Korea.

To read more click here: 

Exposed Devices Used as Botnet to Scan Internet

/0 Comments/in , , /by

An article from threat post about botnet: A controversial Internet scanning project has come under fire for illegally accessing and running code on remote machines. The Internet Census 2012 project, revealed Sunday in a post to Seclists.org, discovered 420,000 embedded devices accessible using default credentials. The unnamed researcher behind the project then used the devices as a botnet to scan most of the IPv4 address space.

Although the researcher said in a paper that no changes were made to any of the devices and all were returned to their original state after a reboot, the project is drawing the ire of the security community.

To read more click here:

Cryptographers Demonstrate New Crack For Common Web Encryption

/0 Comments/in /by

An article from Forbes  in there Security section about  Web Encryption: It’s long been known that one of the oldest and most widely used standards for encrypting web sites has some serious weaknesses. But one group of researchers has found a method that downgrades that security scheme from vaguely flawed to demonstrably breakable.

To read more click here:

What 420,000 insecure devices reveal about Web security

/0 Comments/in /by

An article for Cnet new about  Web security: A researcher used a simple, binary technique to take control of more than 420,000 insecure devices including Webcams, routers, and printers running on the Internet — and says that’s just a hint of the potential for real trouble to get started.

In a Seclists posting yesterday, the researcher, Gordon Lyon, describes how he was able to take control of open, embedded devices on the Internet. He did so by using either empty or default credentials such as “root:root” or “admin:admin”, indicating how a surprisingly large number of devices connected to the Web have no security to safeguard against a possible takeover.

To read more click here:

Iran blocks use of tool to get around Internet filter

/0 Comments/in , /by

An article form NBC new  in there technology section : DUBAI (Reuters) – Iranian authorities have blocked the use of most “virtual private networks”, a tool that many Iranians use to get around an extensive government Internet filter, Iranian media quoted an official as saying on Sunday.

A widespread government Internet filter prevents Iranians from accessing many sites on the official grounds they are offensive or criminal.

To read more click here:

Cyber Crime gang arrested for hacking Dubai exchange companies accounts

/0 Comments/in /by

An interesting article from Ehacking news:  The Dubai Police have arrested a cyber crime gang who were able to transfer more than 2 Million dollars(Dh7 million) from Dubai Exchange companies’ accounts.

The police said that a gang of Asians and Africans work with hackers to hack into websites and systems of companies in Dubai to transfer the money.

To read more click here:

Google patches bug that allows attackers to slip past two-factor authentication

/0 Comments/in /by

An article on Naked Security about authentication:  Google’s two-step verification, according to the company’s ad campaign, isn’t merely a bear guarding your home. It’s a snake pit behind the bear guarding your home.

Unfortunately, it turns out, application-specific passwords allow attackers to bounce right past the bear and to hop over the vipers.

To read more click here: