Forwarded from TechToday News
#Hack #Security #Report
773M Password ‘Megabreach’ is Years Old
As we can see above, Collection # 1 offered by this seller is indeed 87GB in size. He also advertises a Telegram username where he can be reached — “Sanixer.” So, naturally, KrebsOnSecurity contacted Sanixer via Telegram to find out more about the origins of Collection # 1, which he is presently selling for the bargain price of just $45.
https://krebsonsecurity.com/2019/01/773m-password-megabreach-is-years-old/
https://www.troyhunt.com/the-773-million-record-collection-1-data-reach/
773M Password ‘Megabreach’ is Years Old
As we can see above, Collection # 1 offered by this seller is indeed 87GB in size. He also advertises a Telegram username where he can be reached — “Sanixer.” So, naturally, KrebsOnSecurity contacted Sanixer via Telegram to find out more about the origins of Collection # 1, which he is presently selling for the bargain price of just $45.
https://krebsonsecurity.com/2019/01/773m-password-megabreach-is-years-old/
https://www.troyhunt.com/the-773-million-record-collection-1-data-reach/
Forwarded from TechToday News
#Vulnerability #Hack #Hardware #Network #Article
Remotely compromise devices by using bugs in Marvell Avastar Wi-Fi: from zero knowledge to zero-click RCE
With this research, I’m going to answer the question that has had to be answered for quite a time: to what extent is Marvell WiFi FullMAC SoC (not) secure. Since the wireless devices with the analyzed chip aren’t fully researched by the community yet, they may contain a tremendous volume of unaudited code, which may result in severe security issues swarming devices equipped with WLAN cards. At the outset, I should mention that this article is based on the info I presented during my ZeroNights 2018 talk. So, feel free to have a look at the original slides here There are also some notable researches on the subject of wireless SoC security. For example, Google Project Zero published a series of blog posts starting in April 2017 describing exploitation of Broadcom Wi-Fi stack on smartphones. This topic was also discussed at theBlackHat 2017 conference. Some smartphone baseband exploits write-ups might help understand the techniques used to reverse engineer firmware of wireless SoC.
https://embedi.org/blog/remotely-compromise-devices-by-using-bugs-in-marvell-avastar-wi-fi-from-zero-knowledge-to-zero-click-rce/
Remotely compromise devices by using bugs in Marvell Avastar Wi-Fi: from zero knowledge to zero-click RCE
With this research, I’m going to answer the question that has had to be answered for quite a time: to what extent is Marvell WiFi FullMAC SoC (not) secure. Since the wireless devices with the analyzed chip aren’t fully researched by the community yet, they may contain a tremendous volume of unaudited code, which may result in severe security issues swarming devices equipped with WLAN cards. At the outset, I should mention that this article is based on the info I presented during my ZeroNights 2018 talk. So, feel free to have a look at the original slides here There are also some notable researches on the subject of wireless SoC security. For example, Google Project Zero published a series of blog posts starting in April 2017 describing exploitation of Broadcom Wi-Fi stack on smartphones. This topic was also discussed at theBlackHat 2017 conference. Some smartphone baseband exploits write-ups might help understand the techniques used to reverse engineer firmware of wireless SoC.
https://embedi.org/blog/remotely-compromise-devices-by-using-bugs-in-marvell-avastar-wi-fi-from-zero-knowledge-to-zero-click-rce/
Forwarded from TechToday News
#Hack #Security #Router #Report
EternalSilence: Why your router may be at risk from this NSA tool
Do you trust your router to keep you safe from hackers and spies? You may want to take another look just to make sure.
Akamai recently discovered a malware campaign that has already compromised over 45,113 home and office routers. This was done using a tool based on the United States of America’s NSA hacking tools which were leaked online in 2017. To explain how hackers use this tool to turn your router into a proxy server, we first have to understand how UPnP works.
https://www.securityartwork.es/2019/01/14/eternalsilence-why-your-router-may-be-at-risk-from-this-nsa-tool/
EternalSilence: Why your router may be at risk from this NSA tool
Do you trust your router to keep you safe from hackers and spies? You may want to take another look just to make sure.
Akamai recently discovered a malware campaign that has already compromised over 45,113 home and office routers. This was done using a tool based on the United States of America’s NSA hacking tools which were leaked online in 2017. To explain how hackers use this tool to turn your router into a proxy server, we first have to understand how UPnP works.
https://www.securityartwork.es/2019/01/14/eternalsilence-why-your-router-may-be-at-risk-from-this-nsa-tool/
Security Art Work
EternalSilence: Why your router may be at risk from this NSA tool - Security Art Work
Today’s article is courtesy of John Mason, co-founder of TheBestVPN.com and writer at Tripwire, StaySafeOnline, DigitalGuardian y Educause. You can find him on twitter as @JohnCyberMason. Do you trust your router to keep you safe from hackers and spies?…
Forwarded from TechToday News
Media is too big
VIEW IN TELEGRAM
#Hack #Electronic #Network #Hardware
You like wifi in your malicious USB cables?
https://mg.lol/blog/omg-cable/
You like wifi in your malicious USB cables?
https://mg.lol/blog/omg-cable/