The Cyber Geeks - Hacking,Technology and Cyber Security News: security and hacking

Java : New Vulnerabilities affects 14 million Computers

<div dir="ltr" style="text-align: left;" trbidi="on">
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLl79olM46_3eMG7IgVx0LQ9XjWxGuMm_wuG05AkP7Tgt0jqPeLuzXS-R2w_8tbmO7iO_fCay5p5RKrKc-e8kYb2XftqYYW0rZ3_bdhuL75Rr5Z_9rXiLed-HYEFhe1mSo5ZuWNSRDH866/s1600/Java-+New+Vulnerabilities+affects+14+million+Computers.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Java : New Vulnerabilities affects 14 million Computers " border="0" height="512" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLl79olM46_3eMG7IgVx0LQ9XjWxGuMm_wuG05AkP7Tgt0jqPeLuzXS-R2w_8tbmO7iO_fCay5p5RKrKc-e8kYb2XftqYYW0rZ3_bdhuL75Rr5Z_9rXiLed-HYEFhe1mSo5ZuWNSRDH866/s1600/Java-+New+Vulnerabilities+affects+14+million+Computers.png" title="Java : New Vulnerabilities affects 14 million Computers " width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Java : New Vulnerabilities affects 14 million Computers </td></tr>
</tbody></table>
<b><br /></b>
<b>Java</b> is the one of the most well-known Computer Application or software which can be seen easily installed on anyone's Computer! By the time world is getting technologically advance and  new threats or vulnerabilities and exploits are emerging!<br />
<br />
Recently Java has raised security warnings on it products. Oracle warned that many new java security vulnerable are exploitable and an attacker can gain remote access to the targeted system!<br />
<br />
There were <b>14 vulnerabilities</b> listed by java and almost <b>14 million Computers use java</b>. So all ofhere are under high risk! Applications running on <b>JRE/JDK</b> versions 5, 6,
7, and 8 which are not patched, are vulnerable to Remote Attacks.<br />

Java : New Vulnerabilities affects 14 million Computers

Java : New Vulnerabilities affects 14 million Computers Java is the one of the most well-known Computer Application or software whic...

Cybrary.it Offers Free Online Ethical Hacking and Cyber Security Training

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4MNd720AZK-S2wJHtG86zJ0yuEBKgamex7xcDoFU6BlVc4unNsEsNYuJ3j0hJRxKn7M-_W1EzESILdblqs_KZW2G-aqhcKy7uwhkBRZXEuF69VAWKatmOLyodUwQZ-2pstACQ1DlZvXkh/s1600/kUdVJFK.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4MNd720AZK-S2wJHtG86zJ0yuEBKgamex7xcDoFU6BlVc4unNsEsNYuJ3j0hJRxKn7M-_W1EzESILdblqs_KZW2G-aqhcKy7uwhkBRZXEuF69VAWKatmOLyodUwQZ-2pstACQ1DlZvXkh/s1600/kUdVJFK.jpg" width="640" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
Many of you want to learn hacking. I get may Mails, people frequently ask <b>How to hack facebook Account</b>, <b>How to hack</b> or <b>Where to learn hacking</b>, <b>how to hack a website</b>, <b>how to hack routers</b> etc..blah! blah and blah</div>

<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
In this article I will try to give answers for these question. I will tell you from where you should start you hacking careerer.</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b>What is an Ethical Hacking?</b><o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<o:p>Ethical means Legal means hacking for good purposes but most of you want to learn it just for fun. You want to hack your friend's Account etc. Hacking is a skill and we should use it for good purposes! </o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
Ethical Hackers are the security experts who tries to find the loop holes in the system and report to admin! To become an Ethical Hacker all you need is to get <b><a href="http://www.cybrary.it/" target="_blank">Cyber Security Training</a>.</b></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
If you wanna be a Ethical hacker you have to spend lots of money! to get certified ..</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
But here we have one offer for you which is completely FREE!!!!! </div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal" style="text-align: center;">
<b><a href="http://www.cybrary.it/" target="_blank">CYBRARY.IT</a> — Free online IT (Information Technology)
and Cyber Security Training.</b></div>
<div class="MsoNormal">
<o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div style="text-align: left;">
<b>This course is Awesome!, Why?</b></div>
<div class="MsoNormal">
<o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
Most Important is its completely FREE!</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
This course teaches you almost everything about IT
and cyber security related for absolutely FREE!!. Here is a list of courses available at Cybrary:</div>
<div class="MsoNormal">
</div>
<ul style="text-align: left;">
<li><b>Cryptography</b></li>
<li><b>Security+</b></li>
<li><b>Computer Forensics,</b></li>
<li><b>MCSA, Linux+,</b></li>
<li><b>CCNA and Network+</b></li>
<li><b>CISSP</b></li>
<li><b>Social Engineering and Manipulation</b></li>
<li><b>Python for Security Professionals</b></li>
<li><b>Malware Analysis</b></li>
<li><b>Metasploit and Advanced Penetration Testing</b></li>
<li><b>Ethical Hacking and many more.</b></li>
</ul>
<br />
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
The courses by Cybrary also includes instructional
lectures, white papers, exam study guides, interactive lab demonstrations, case
studies and many more.</div>
<div class="MsoNormal">
<o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
So, choose your course at <o:p></o:p>Cybrary Now!! :-</div>
<div>
<br /></div>
                                                                       <a href="http://www.cybrary.it/" style="font-weight: bold; text-align: center;" target="_blank">CYBRARY.IT</a><span style="font-weight: bold; text-align: center;"> </span><br />
<br />
<div class="MsoNormal">
<br /></div>
</div>

Cybrary.it Offers Free Online Ethical Hacking and Cyber Security Training

Many of you want to learn hacking. I get may Mails, people frequently ask How to hack facebook Account , How to hack or Where to lear...

US State Department Hacked

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiM31YOtNml4lBXTcUUQ71gq2_ZjLU3Vcs20wYIRo7jCdgfTims7tXdzf1KGnzuWGF72XDdZ9PuRWHIl4oF70DBiGQtTLp2JSizwIz-8cuOdOZ3MBpu-BYuBtifPXW6MKQVOtk1zrINBXOT/s1600/US+State+Department+Hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="US State Department Hacked" border="0" height="203" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiM31YOtNml4lBXTcUUQ71gq2_ZjLU3Vcs20wYIRo7jCdgfTims7tXdzf1KGnzuWGF72XDdZ9PuRWHIl4oF70DBiGQtTLp2JSizwIz-8cuOdOZ3MBpu-BYuBtifPXW6MKQVOtk1zrINBXOT/s1600/US+State+Department+Hacked.jpg" title="" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<br />
According to a new report US State Department was hacked at the same time when hackers targeted <a href="http://www.trickbug.com/2014/10/white-house-computers-breached-by-hackers.html"><span style="color: red;">unclassified White House computers</span></a> but it was noticed last week. The state department has taken the unprecedented step of shutting down its entire unclassified email system as technicians repair possible damage from a hacker attack.</div>
<div style="float: left; padding-right: 10px;">
<br />
A senior department official said on Sunday that "activity of concern" was detected in the system around the same time as a previously reported incident that targeted the White House computer network.However,there was no breach in any of the classified areas.
<br />
<br />
<br />
The official said the state department shut down the email late on Friday as part of a scheduled outage of some of its internet-linked systems to make security improvements to its main unclassified computer network. The official was not authorized to speak about the matter by name and spoke on condition of anonymity.
<br />
<br />
<br />
The official said the department expects that all of its systems will be operating as normal in the near future, but would not discuss who might be responsible for the breach. Earlier attacks have been blamed on Russian or Chinese attackers, although their origin has never been publicly confirmed.
<br />
<br />
The State Department is expected to address the shutdown once the security improvements have been completed on Monday or Tuesday.
</div>
</div>

US State Department Hacked

According to a new report US State Department was hacked at the same time when hackers targeted unclassified White House computer...

RedHack Hacks into Turkey Electricity Transmission Company

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkhIA6h257UzRlWLHkxLomfRLOT8Y6Y_P8j6Aa6bIH65CuxErAkTXYH_xU6mbz9wKFB6rN3NbLUjK9PXt7Aynn4IZO7MhIr3Ykd89hgn_KdjsRhiKE3LiTilxtedU4oCjexhyB_x8x_1qI/s1600/RedHack+Hacks+into+Turkey+Electricity+Transmission+Company.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="RedHack Hacks into Turkey Electricity Transmission Company" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkhIA6h257UzRlWLHkxLomfRLOT8Y6Y_P8j6Aa6bIH65CuxErAkTXYH_xU6mbz9wKFB6rN3NbLUjK9PXt7Aynn4IZO7MhIr3Ykd89hgn_KdjsRhiKE3LiTilxtedU4oCjexhyB_x8x_1qI/s1600/RedHack+Hacks+into+Turkey+Electricity+Transmission+Company.jpg" title="" width="400" /></a></div>
<br />
Turkey Anonymous Hacking Team hacked and breached the official website of Turkish Electric Transmission Company.deleting 1.5 trillion Liras ($668.5 billion) worth debt of Soma region.this is a serious loss for the Turkey Electricity Transmission Company.Hackers also leaked usernames and password belonging to company's administration system users.</div>
<br />
RedHack hacked some high profile Turkish website like Council of Higher Education,Turkish Police Forces,Turkish Army,Türk Telekom and National Intelligence Organisation and many other website. RedHack is currently under world's 5 most wanted hacking group.<br />
<br />
RedHack also posted a video as a proof and showing how they deleted the debt.<br />
<br />
<center>
<iframe allowfullscreen="" frameborder="0" height="301" mozallowfullscreen="" src="//player.vimeo.com/video/111586164" webkitallowfullscreen="" width="500"></iframe>
</center>
<br />
<br />
Leaked data of Turkey Electricity Transmission Company can be found on this <a href="http://pasteht.ml/r4EPV"><span style="color: red;"><b>link</b></span></a>.<br />
<br />
<center>
<blockquote class="twitter-tweet" lang="en-gb">
Türkiye Elektrik İletim A.Ş. <a href="http://t.co/XfzvGAk0od">http://t.co/XfzvGAk0od</a> tarafımızca hacklenmiştir
Şifreler: <a href="http://t.co/j4vdW8wPQA">http://t.co/j4vdW8wPQA</a>
Kapanmadan girin BORÇ silin:)<br />
— RedHack_EN ★ (@RedHack_EN) <a href="https://twitter.com/RedHack_EN/status/533247883815178240">November 14, 2014</a></blockquote>
<script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script>
</center>
<br /></div>

RedHack Hacks into Turkey Electricity Transmission Company

Turkey Anonymous Hacking Team hacked and breached the official website of Turkish Electric Transmission Company.deleting 1.5 trillio...

Chinese Hackers Hacked US Weather Systems

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8dViHO409v4zx-Afj43uhwsIGqFklu2lAgtm1ZaSqJhGj4U8erDe0w8mGauJrvm8A_p0aOfkgfJsss-5UBF0Ofz-aYvSeUCGJ4fXOBg5Sm4Hnlez6Zpk0DCmFGLv9uAJwXEvCD2-0z_9U/s1600/Chinese+Hackers+Hacked+US+Weather+Systems.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Chinese Hackers Hacked US Weather Systems" border="0" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8dViHO409v4zx-Afj43uhwsIGqFklu2lAgtm1ZaSqJhGj4U8erDe0w8mGauJrvm8A_p0aOfkgfJsss-5UBF0Ofz-aYvSeUCGJ4fXOBg5Sm4Hnlez6Zpk0DCmFGLv9uAJwXEvCD2-0z_9U/s1600/Chinese+Hackers+Hacked+US+Weather+Systems.jpg" title="" width="640" /></a></div>
<br />
<br />
Chinese hacker recently hacked into US weather systems,forcing cyber security teams to steal off data vital to disaster planning,aviation,shipping and scores of other crucial uses,official said.The intrusion occurred in late September but officials gave no hint they had a problem until October 20.<br />
<div style="float: left; padding: 10px;">
<br />
The <b>National Oceanic and Atmospheric Administration (NOAA)</b>, which includes National Weather Service,did not say its system were compromised.Some reports also says that agency did not notify the proper authorities when it learned of the attack.
<br />
<br />
NOAA officials declined to discuss the suspected source of the attack, whether it affected classified data and the delay in notification.In a statement released Wednesday, NOAA spokesman Scott Smullen acknowledged the hacks and said “incident response began immediately.” He said all systems were working again and that forecasts were accurately delivered to the public. Smullen declined to answer questions beyond his statement, citing an investigation into the attack.
<br />
<br />
But NOAA confirmed to U.S. Rep. Frank Wolf,  that China was behind the attack, the Republican Congressman from Virginia said in a separate interview.Wolf has a long-standing interest in cybersecurity and asked NOAA about the incident.“NOAA told me it was a hack and it was China,” said Wolf, who also scolded the agency for not disclosing the attack “and deliberately misleading the American public in its replies.”
<br />
<br />
Wolf said "A hack could steal technical insights or cull isolated information that may not look significant until they’re put with something else and then they become valuable. The Chinese are stealing us blind.”
<br />
<br />
Commerce Department Inspector General Todd Zinser said his office was not notified of the breach until Nov. 4, well after he believes the hack occurred. He said that is a violation of agency policy requiring any security incident to be reported to his office within two days of discovering the problem.<br />
<blockquote class="tr_bq">
“We’re in the process of looking into the matter, including why NOAA did not comply with the requirements to notify law enforcement about the incident,” Zinser said.</blockquote>
NOAA officials also would not say whether the attack removed material or inserted malicious software in its system, which is used by civilian and military forecasters in the United States and also feeds weather models at the main centers for Europe and Canada.The attack on NOAA joins a spate of cyber-espionage on federal systems revealed recently, including an attack suspected from Russia that breached unclassified <a href="http://www.trickbug.com/2014/10/white-house-computers-breached-by-hackers.html"><span style="color: red;">White House Computer Networks</span></a>.
<br />
<br />
NOAA’s National Ice Center Web site also was down for a week in late October. The center is a partnership with the Navy and Coast Guard to monitor conditions for navigation.The two-day outage skewed the accuracy of National Weather Service long-range forecasts slightly, according to NOAA.Security experts compares the security used by NOAA to secure their system with an example of house protected by just a screen door.
<br />
<br />
Weather satellites orbit hundreds to thousands of miles above Earth and offer continuous views of weather systems, such as hurricanes, thunderstorms and cold fronts, while also measuring temperature and moisture at different altitudes — all crucial bits that feed prediction models. To get that information to the public, NOAA makes satellite data and imagery publicly available through the Web, as well as file-transfer networks for downloads.NOAA satellites “provide critical data for forecasts and warnings that are vital to every citizen and to our economy as a whole,” NOAA Administrator Kathryn D. Sullivan said a year ago.
<br />
<br />
“The bad guys are increasingly having a hard time getting in the front of these agencies,”said Jacob Olcott, a cybersecurity consultant. “So they figure if I can’t get in the front door, I’d ride along in with someone who has trusted access and maybe ride that connection to bigger agencies.”<br />
<br />
“All the operational data sent via NOAA, which is normally an excellent service, was lost,” said Stephen English, head of the satellite section at the European Centre for Medium-Range Weather Forecasts in Reading, England. The center is renowned for running a highly advanced global weather prediction model that during Hurricane Sandy, for example, aided evacuations and preparations in the United States when it signaled that the superstorm would hit land rather than hook out to sea.
<br />
<br />
This is the 8th incident in recent weeks which has China's involvement in the attacks.
<br />
<center>

</center>
</div>
</div>

Chinese Hackers Hacked US Weather Systems

Chinese hacker recently hacked into US weather systems,forcing cyber security teams to steal off data vital to disaster planning,avia...

Browser Stack Data Breach

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgsJD540xDtxoitWKoZE08O4_uspACQUOi1_idXp7gFghKzU-4xqgK2SUfkZuj74lQ5vP9T107NiNZF3eBS3R7iZhQ_CZNg1ImqH52fTe_LagviS2YmKZx0ofbkF-AEAFFZqMY76x_-5Mc/s1600/Browser+Stack+Data+Breach.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Browser Stack Data Breach" border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgsJD540xDtxoitWKoZE08O4_uspACQUOi1_idXp7gFghKzU-4xqgK2SUfkZuj74lQ5vP9T107NiNZF3eBS3R7iZhQ_CZNg1ImqH52fTe_LagviS2YmKZx0ofbkF-AEAFFZqMY76x_-5Mc/s1600/Browser+Stack+Data+Breach.png" title="" width="640" /></a></div>
<br />
<br />
BrowserStack is a cross-browser testing tool,to test public websites and protected servers,on a cloud infrastructure of desktop and mobile devices.BrowserStack on November 9,2014 at 23:30 GMT suffers a data breach.Currently comapany does not know how many user accounts have been compromised.<br />
<div style="float: left; padding: 10px;">
<br />
BrowserStack responded with the following statement this morning.<br />
<br />
BrowserStack is not shutting down. An attacker gained access to a list of user email addresses on BrowserStack on 9 November, 2014 at 23:30 GMT.<br />
<br />
We deeply apologise for the concerns that our users have been experiencing due to the attack on BrowserStack. We have determined that the hacker’s access was restricted solely to that list of email addresses. As a precaution, we recommend changing your BrowserStack password.<br />
<br />
We are still in the process of sanitisation, and making doubly sure this situation never reoccurs. We are on top of it, and will post updates as they happen.<br />
<br />
Thank you for your patience. BrowserStack will be back up in a few hours.<br />
Regards,<br />
Adithya Chadalawada<br />
<blockquote class="twitter-tweet" lang="en">
We did get hacked. Currently sanitising entire BrowserStack, so service will be down for a while. We're on top of it & will keep you posted.<br />
— BrowserStack (@browserstack) <a href="https://twitter.com/browserstack/status/531631012493524992">November 10, 2014</a></blockquote>
<script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script>

An Anonymous user said that he have received the following mail from BrowserStack customer care.He posted the following mail on pastebin.<br />
<blockquote class="tr_bq">
Dear BrowserStack User,<br />
We are unfortunately displeased to announce that BrowserStack will be shutting down. After much consideration on our part, we have realized we were negligent in the services we claimed to offer.  In our terms of service, we state the following:<br />
[...] after the restoration process is complete, the virtual machines are guaranteed to be tamper-proof.<br />
[...] The machines themselves are in a secure network, and behind strong firewalls to present the safest environment possible.<br />
[...] At any given time, you have sole access to a virtual machine. Your testing session cannot be seen or accessed by other users, including BrowserStack administrators. Once you release a virtual machine, it is taken off the grid, and restored to its initial settings. All your data is destroyed in this process.<br />
Unfortunately, we have blatantly lied. Not only do all of our administrators have access, but so does the general public. We have no firewalls in place, and our password policies are atrocious. All virtual machines launched are open to the public, accessible to anyone with the alpha password "nakula" on port 5901, a password which is stored in plaintext on every VM. As well, our infrastructure uses the same root passwords on all machines, which is also stored in plaintext on every VM launched ("c0stac0ff33").<br />
Given the propensity for cyber criminals to target infrastructure services such as ours, it is almost certain all of your data has been compromised. These passwords take no less than 15 minutes to find for anyone who is looking.<br />
We hope we have not caused you too much trouble, and to our enterprise customers who signed deals contracts based on a fabrication, we are equally sorry.<br />
Sincerely,<br />
The BrowserStack Team</blockquote>
Today morning BrowserStack website was gone offline and showing a site maintenance message.  </div>
</div>
</div>

Browser Stack Data Breach

BrowserStack is a cross-browser testing tool,to test public websites and protected servers,on a cloud infrastructure of desktop and ...

Google Announces Nogotofail - A Network Traffic Security Testing Tool

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhydaHzMHltmDS5ktgt0XQFAwis3WY0o-9_Q6SrzOJ7rB3qPXCq-pPcKbttrW2lgv6SwPEUjvbYdJg9FeFIXO-y3vOUXPF7JJrsPG0zLnfTo_ilEtw0qlGEaG8_nhHePq8R6lRjotnTP_c4/s1600/Google+Announces+Nogotofail+-+A+Network+Traffic+Security+Testing+Tool.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Google Announces Nogotofail - A Network Traffic Security Testing Tool" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhydaHzMHltmDS5ktgt0XQFAwis3WY0o-9_Q6SrzOJ7rB3qPXCq-pPcKbttrW2lgv6SwPEUjvbYdJg9FeFIXO-y3vOUXPF7JJrsPG0zLnfTo_ilEtw0qlGEaG8_nhHePq8R6lRjotnTP_c4/s1600/Google+Announces+Nogotofail+-+A+Network+Traffic+Security+Testing+Tool.jpg" title="" width="400" /></a></div>
<br />
<br />
Google announces a new security tool that help developers to detect security bugs in their applications.<br />
<br />
The Android Security Team has made a new tool,know as "<b>Nogotofail</b>",that provides an easy way to confirm that device that you are using are safe against TLS/SSL vulnerabilities.Recently Google security researchers discovered a new bug in SSL 3.0 which was dubbed as <a href="http://www.trickbug.com/2014/10/ssl-30-vulnerability-in-design.html"><span style="color: red;">"<b>POODLE</b>"</span></a>.</div>
<div div="" id="ad3" style="float: left; padding: 10px;">
<br />
The open source tool is available on <a href="https://github.com/google/nogotofail"><span style="color: red;">Github</span></a>so that anybody can use this tool to check their applications,contribute new features..This tool works on almost every device running on Android,iOS,Linux,Windows,Chrome OS,OS X,in fact any device you use to connect to the Internet.<br />
<br />
"Google is committed to increasing the use of TLS/SSL in all applications and services.But HTTPS everywhere is not enough: it also need to be used correctly.Most platforms and devices have secure defaults,but some applications and libraries override the defaults for the worse,and in some instances we've seen platforms make mistakes as well.As application get more complex,connect to more services,and use more third party libraries,it become easier to introduce these type of mistakes.",said Chad Brubaker (Android Security Engineer).<br />
<br />
Chad also says that it is using this tool internally for some time and have worked with many web developer to improve the security of their apps.<br />
<br />
Nogotofail tool require Python 2.7 and pyOpenSSL>=0.13.Nogotofail tool is composed of an on-path network Man in The Middle (MiTM) and optional clients for the devices being tested.</div>
</div>

Google Announces Nogotofail - A Network Traffic Security Testing Tool

Google announces a new security tool that help developers to detect security bugs in their applications. The Android Security Team...

Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijHFeimvJgQlzofUtPy1Ef8i72Sr_PV1Z5eZGczPKFhj-aA5pVxziyPJ3nD_P47IDdsfcQ30jrDy73KCdUfOJw3SlyvMsOI23jMJVVzoz03ZPYnMclHK6ApWz2srzJVnDirrwJgFxPDB_F/s1600/Pak+Cyber+Mafia+Hackers+defaces+2+Gujarat+Government+Websites.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijHFeimvJgQlzofUtPy1Ef8i72Sr_PV1Z5eZGczPKFhj-aA5pVxziyPJ3nD_P47IDdsfcQ30jrDy73KCdUfOJw3SlyvMsOI23jMJVVzoz03ZPYnMclHK6ApWz2srzJVnDirrwJgFxPDB_F/s1600/Pak+Cyber+Mafia+Hackers+defaces+2+Gujarat+Government+Websites.jpg" title="" width="400" /></a></div>
<br />
<b><br /></b>
<b>Pak Cyber Mafia Hackers (PCMH)</b>,Pakistan based hackers group defaced two Gujarat Government Websites as well as three other Indian websites yesterday and wrote about Prime Minister Narendra Modi on their home pages. <b> </b><br />
<div align="center">
<br />
<b><u>List of 5 website hacked by the Group</u></b><br />
<ul style="text-align: left;">
<li><a href="http://www.egyan.org.in/">www.egyan.org.in</a>   Mirror-<a href="http://zone-h.org/mirror/id/23203353" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank">http://zone-h.org/mirror/id/23203353</a></li>
<li><a href="http://www.apmcahmedabad.com/">www.apmcahmedabad.com</a>  Mirror-<a href="http://zone-h.org/mirror/id/23203388" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px; text-decoration: none;" target="_blank">http://zone-h.org/mirror/id/23203388</a></li>
<li><a href="http://www.listtopcolleges.in/">www.listtopcolleges.in</a>  Mirror-<a href="http://zone-h.org/mirror/id/23203372" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank">http://zone-h.org/mirror/id/23203372</a></li>
<li><a href="http://www.delhi-pharma.com/">www.delhi-pharma.com</a>  Mirror-<a href="http://zone-h.org/mirror/id/23202977" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px;" target="_blank">http://zone-h.org/mirror/id/23202977</a></li>
<li><a href="http://www.atnnetwork.in/">www.atnnetwork.in</a>  Mirror-<a href="http://zone-h.org/mirror/id/23202733" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 20px; text-decoration: none;" target="_blank">http://zone-h.org/mirror/id/23202733</a></li>
</ul>
The hacker named Pk_Robot from PCMH is responsible for this defacement.<br />
<div>
After Gujarat government and APMC authorities came to know about the defacement,authorities made their website offline and is currently under maintenance..<br />
<div>
<br /></div>
<div>
<blockquote class="tr_bq">
"As soon as we learned about the hacking of our website,we have shut it down for maintenance.We have removed the material posted by hackers.On Monday,we will call a meeting and lodge an FIR. "said Ketan Patel APMC official.</blockquote>
However,Gujarat government immediately removed the deface page after it was hacked by hackers.<br />
<blockquote class="tr_bq">
We removed the page uploaded by hackers to our website yesterday itself.We have also relaunched the website after thorough maintenance.We will do an internal inquiry and decide about filling a police complaint."said Bhupendrasinh Chudasama (State Education Minister).</blockquote>
<ul style="text-align: left;">
</ul>
<br /></div>
</div>
</div>
</div>

Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites

Pak Cyber Mafia Hackers (PCMH) ,Pakistan based hackers group defaced two Gujarat Government Websites as well as three other Indian we...

AirHopper Hacking Isolated Computers Using Radio Signals

AirHopper Hacking Isolated Computers Using Radio Signals

Security Researchers Mordechai Guri and Professor Yuval Elovici at the Ben Gurion University in Israel found a new way to breach da...

Tor users can access Facebook using .onion address

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyAHAiwiuEv12gx0C893vQ0a_TT1CfmoKFopix7uhxV1sif7FJ34qoPDxtEZkTh9ptpl4kbdMDuh2Jj-HFQzQm0JBnI1lv0V6soM1wafxRBuHe9nh9mVaQBNAUS6ohXBaKvh60QLupjgMq/s1600/Tor+users+can+access+Facebook+using+.onion+address.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Tor users can access Facebook using .onion address " border="0" height="253" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyAHAiwiuEv12gx0C893vQ0a_TT1CfmoKFopix7uhxV1sif7FJ34qoPDxtEZkTh9ptpl4kbdMDuh2Jj-HFQzQm0JBnI1lv0V6soM1wafxRBuHe9nh9mVaQBNAUS6ohXBaKvh60QLupjgMq/s1600/Tor+users+can+access+Facebook+using+.onion+address.jpg" title="" width="400" /></a></div>
<br />
<br />
The social networking site,Facebook has launched its new way to access Facebook using onion address specially designed for tor users that works with SSL,without disclosing their true location.<br />
Tor browser is an open source project launched in 2002,that is specially made to increase the anonymity on the Internet by sharing your IP address and your location. </div>
<div div="" id="ad3" style="float: left; padding: 10px;">
</div>
<br />
People who have Tor enabled browser can access Facebook via <a href="https://facebookcorewwwi.onion/%C2%A0">https://facebookcorewwwi.onion/</a>.Hidden services accessed through the Tor network and website to remain anonymous.<br />
Note that link mention above will work on tor enabled browser only.<br />
<br />
"Facebook onion address provides a way to access Facebook through Tor without losing the cryptographic protections provided by the Tor cloud."said Alec Muffett, Software engineer at Facebook.<br />
<br />
"The idea is that the Facebook onion address connects you to Facebook's core WWW infrastructure and it reflects one benefit of accessing Facebook this way:that it provides end-to-end communication,from your browser directly into a Facebook datacentre."said Alec.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
In 2013,Facebook assured Tor users that company would work with Tor services for possible solution. Now in 2014 Facebook launched onion address for its Tor users.This move is good for those who want to hide their identity.<br />
<br />
Runa Sandvik,who was consulted by Facebook on the project and who previously worked with Tor Project,tweeted "The launch of Facebook Tor hidden service also marks that first time a CA (Certificate Authority) has issued a legitimate SSL certificate for onion address."</div>

Tor users can access Facebook using .onion address

The social networking site,Facebook has launched its new way to access Facebook using onion address specially designed for tor users...

White House computers breached by Hackers

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2YPNKe4XDFI8WByO6pXEqa7tr9pR-tbrnx9Cv4E8-08ocpJa1N6lTDilvnykjdFYrq2IPK_MflbVAxULbujE6S6JUatwPePHEZ6T7pwcG46KbEd5uW7eg1CyV10LFvaFAuqLCEfhAYIkN/s1600/White+House+computers+breached+by+Hackers.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="White House computers breached by Hackers" border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2YPNKe4XDFI8WByO6pXEqa7tr9pR-tbrnx9Cv4E8-08ocpJa1N6lTDilvnykjdFYrq2IPK_MflbVAxULbujE6S6JUatwPePHEZ6T7pwcG46KbEd5uW7eg1CyV10LFvaFAuqLCEfhAYIkN/s1600/White+House+computers+breached+by+Hackers.jpg" title="" width="400" /></a></div>
<br />
Hackers breached an unclassified White House computer network recently.However,this act resulted in temporary disruptions to some services.the Washington Newspaper was reporting that Russian government was thought to be behind this act.<br />
<div style="float: left; padding: 10px;">
</div>
<br />
"In the course of assessing recent threats,we identified activity of concern on the unclassified Executive office of the President network."said White House official.<br />
<br />
"Our computers and systems have not been damaged,though some elements of the unclassified network have been affected.The temporary outages and loss of connectivity for our users is solely the result of measures we have taken to defend our network." official said.<br />
<br />
FBI,Secret Service and National Security Agency are involved in this investigation, report said.<br />
<br />
The breach was discovered two to three weeks ago, report said.However,White House officials did't commented yet on who was behind the intrusion or how much data has taken.<br />
<br />
Some staffers were asked to change their passwords.Intranet or VPN access was shut down off for a while,but the email system,apart from some minor delays,was never down,report said </div>

White House computers breached by Hackers

Hackers breached an unclassified White House computer network recently.However,this act resulted in temporary disruptions to some ser...

AnonGhost launches #OpSaveAlAqsa

AnonGhost launches #OpSaveAlAqsa

AnonGhost, pro hacker group who mainly deface Israel website, has launched a new operation named #OpSaveAlAqsa against Israel.The ope...

Google 2 step verification with security key

Google 2 step verification with security key

Google is taking its users privacy very seriously after 5 million Google account were stolen.Google's 2 step verification offers ...

Chinese Government Hackers launched MITM attack against iCloud

Chinese Government Hackers launched MITM attack against iCloud

Great Fire a non-profit organisation that monitors internet Censorship in China,said that Chinese Government hackers launched a Man i...

Mac OS X 10.10 privacy issue

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeOWEzF9hERxYobvDfNu-mKHQgftKdEhFgEqp-NdCqFHD6tsAX2EQji8frKmDmJ2xuRUwqsd7G_FXa83rcWvmtvLYQvu9FjGMBNLYSLxtX2khC2nMR94euHm9A5PVjQ-pPuwIpFN317gCw/s1600/Mac+OS+X+10.10+privacy+issue.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Mac OS X 10.10 privacy issue " border="0" height="386" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeOWEzF9hERxYobvDfNu-mKHQgftKdEhFgEqp-NdCqFHD6tsAX2EQji8frKmDmJ2xuRUwqsd7G_FXa83rcWvmtvLYQvu9FjGMBNLYSLxtX2khC2nMR94euHm9A5PVjQ-pPuwIpFN317gCw/s1600/Mac+OS+X+10.10+privacy+issue.jpg" title="" width="400" /></a></div>
Apple latest computer operating system which is known as Mac OS X 10.10 Yosemite,send user's location and search queries without their knowledge to Apple's remote server by default via Spotlight Search feature.<br />
<div style="float: left; padding: 10px;">
</div>
<br />
Apple has fixed a huge number of vulnerabilities  in OS X and iTunes and now its is being hit with privacy issues in its latest OS X version.<br />
<br />
Apple decided to enable hard drive encryption by default,despite the FBI request not to do so.Apple is putting itself its user's privacy on risk.Apple collects data using Spotlight and will be forwarded to Bing search engine,Apple admits in its terms of service.<br />
<br />
Apple collected this info to improve Spotlight searches only.If user don't want their data to be collected user can turn off Spotlight preferences and Bing web searches in System Preferences.To disable Spotlight Suggestions and Bing Web Preferences go to System Preferences > Spotlight > Search Results.<br />
<br />
Safari also has a Spotlight Suggestions settings.Safari will also send a copy of all search queries to Apple remote servers.To disable Spotlight Suggestions in Safari go to  Safari > Preferences > Search .</div>

Mac OS X 10.10 privacy issue

Apple latest computer operating system which is known as Mac OS X 10.10 Yosemite,send user's location and search queries without ...

The Cyber Geeks - Hacking,Technology and Cyber Security News

Adsense

Java : New Vulnerabilities affects 14 million Computers

Cybrary.it Offers Free Online Ethical Hacking and Cyber Security Training

US State Department Hacked

RedHack Hacks into Turkey Electricity Transmission Company

Chinese Hackers Hacked US Weather Systems

Browser Stack Data Breach

Google Announces Nogotofail - A Network Traffic Security Testing Tool

Pak Cyber Mafia Hackers defaces 2 Gujarat Government Websites

AirHopper Hacking Isolated Computers Using Radio Signals

Tor users can access Facebook using .onion address

White House computers breached by Hackers

AnonGhost launches #OpSaveAlAqsa

Google 2 step verification with security key

Chinese Government Hackers launched MITM attack against iCloud

Mac OS X 10.10 privacy issue

PHP fixed several vulnerabilites

Facebook Doubles Advertising Bug Bounty

Mozilla to disable SSL 3.0 in Firefox

Reflection DDoS attack using millions of UPnP devices

SSL 3.0 vulnerability in the design

Popular Posts

Blog Archive