Category: CyberWarfare / ExoWarfare

Cyber Weapons Lab, Episode 174 If you’re not an avid plane spotter, it can be quite difficult to look up in the sky and identify an aircraft. In this episode of Cyber Weapons Labs, we’re going to show you how to do it with your iPhone or Android and collect a ton of other OSINT…

In 2010, the discovery of Stuxnet, the sophisticated virus used by the U.S. and Israel to sabotage Iran’s nuclear program, ushered in a new era of warfare — in the digital realm. It also placed critical infrastructure around the world in the cross hairs by demonstrating how a remote digital attack could be done anonymously…

Exploitation of the bug can allow an attacker to lift sensitive information, delete files, execute code, carry out sabotage and more. A critical vulnerability, carrying a severity score of 10 out of 10 on the CvSS bug-severity scale, has been disclosed for SAP customers. SAP’s widely deployed collection of enterprise resource planning (ERP) software is…

A campaign discovered by Malwarebytes Labs in mid-April has lifted credentials from a number of e-commerce portals. Researchers have identified a credit-card skimming campaign that’s been active since mid-April that has a rather specific and unusual target: ASP.NET-based websites running on Microsoft Internet Information Services (IIS) servers. New research from Malwarebytes Labs recently uncovered the…

A multinational tech company gets schooled in the risks of doing business in China. A large, multinational technology company got a nasty surprise recently as it was expanding its operations to China. The software a local bank required the company to install so it could pay local taxes contained an advanced backdoor. The cautionary tale,…

A partial screenshot of the BlueLeaks data cache. Hundreds of thousands of potentially sensitive files from US police departments across the United States were leaked online last week. The collection, dubbed “BlueLeaks” and made searchable online, stems from a security breach at Texas web design and hosting company Netsential that maintains a number of state…

Senior Level Executives are invited to participate in the Virtual Cyber Summit Power Hour DC Metro Edition. During these unprecedented times, it is more important than ever for business leaders to have a clear and well thought-out cyber security battle plan. Join us and learn from Leading Industry Experts from the US DHS, Arctic Wolf,…

Encountered this today: “The installation of a package which violates the quality standards isn’t allowed. This could cause serious problems on your computer. Please contact the person or organisation who provided this package file and include the details beneath.” #cybersecurity #notlinuxfriendly

Recently, I was tipped off about certain sites performing localhost port scans against visitors, presumably as part of a user fingerprinting and tracking or bot detection. This didn’t sit well with me, so I went about investigating the practice, and it seems many sites are port scanning visitors for dubious reasons. A Brief Port Scanning…

Phishing-Mails sind eine der beliebtesten Methoden, Zugang zu Firmenaccounts oder Privatkonten zu bekommen. Die Firma Gitlab wollte nun die eigene Sicherheit testen und war dabei erfolgreicher als erhofft. Es geht schneller, als viele Menschen sich eingestehen: Einmal einer falschen Mail vertraut und schon hat man Hackern oder Kriminellen die Türen zum eigenen E-Mail-Account, dem Rechner…

Image by : Internet Archive Book Images. Modified by Opensource.com. CC BY-SA 4.0 Check the security of your Linux box with this comprehensive open source security auditing tool. Have you ever thought about how secure your Linux machine really is? There are numerous Linux distros, each with its own default settings, on which you run…

An investigative report by The Washington Post and ZDF – published 11 FEB 2020. For more than half a century, governments all over the world trusted a single company to keep the communications of their spies, soldiers and diplomats secret. The company, Crypto AG, got its first break with a contract to build code-making machines…

This post is also available in: עברית (Hebrew) More sensors mean more data. Today’s battlefield is networked with sensors at an unprecedented scale. It is the Internet of Battlefield Things (IoBT) that encompasses drone payloads, video cameras, signal and radio sensors, cyber sensors and scores of other devices. This  cohesive network increases situational awareness, risk…

Oracle VP highlights what happens when data leaves your devices. No SIM card, no browser or app open, only the WiFi connection enabled: Android constantly transmits: GPS location, time & date, movement, temperature, atmospheric pressure, other smartphones and WiFi hotspots nearby — all to Google, to the tune of 4 megabytes each hour. Device sensor…

Normally creating a traffic jam takes actual traffic, like the cars seen here. With a wagon full of smartphones, a traffic jam can be created without the need for a long line of cars. (EveryPicture, via Wikimedia Commons CC-BY-SA-3.0) A single red wagon, hand pulled down the middle of a lightly traveled street, is an…

New research from IOActive has found that “blindly” trusting the encryption of the widely adopted device protocol can lead to DDoS, sending of false data and other cyber attacks. The LoRaWAN protocol has become standard in the world of industrial IoT because of its support for low-power wireless devices over long distances and its end-to-end…