Posts

Showing posts with the label Security news

WikiLeaks Exposed CIA's Hacking Tools And Capabilities Details

Image
WikiLeaks has published a massive trove of confidential documents in what appear to be the biggest ever leak involving the US Central Intelligence Agency (CIA). WikiLeaks announced series  Year Zero , under which the whistleblower organization will reveal details of the CIA's global covert hacking program. As part of Year Zero, Wikileaks published its first archive, dubbed  Vault 7 , which includes a total of 8,761 documents of 513 MB ( torrent  |  password ) on Tuesday, exposing information about numerous zero-day exploits developed for iOS, Android, and Microsoft's Windows operating system. WikiLeaks claims that these leaks came from a secure network within the CIA's Center for Cyber Intelligence headquarters at Langley, Virginia. The authenticity of such dumps can not be verified immediately, but since WikiLeaks has long track record of releasing such top secret government documents, the community and governments should take it very seriously. CIA's Zero-Day Explo...

WikiLeaks publishes 'biggest ever leak of secret CIA documents

Image
The US intelligence agencies are facing fresh embarrassment after  WikiLeaks published what it described as the biggest ever leak of confidential documents from the CIA detailing the tools it uses to break into phones, communication apps and other electronic devices. The thousands of leaked documents focus mainly on techniques for hacking and reveal how the  CIA  cooperated with British intelligence to engineer a way to compromise smart televisions and turn them into improvised surveillance devices. The  leak , named “Vault 7” by WikiLeaks, will once again raise questions about the inability of US spy agencies to protect secret documents in the digital age. It follows disclosures about Afghanistan and Iraq by army intelligence analyst Chelsea Manning in 2010 and about the National Security Agency and Britain’s GCHQ by Edward Snowden in 2013. The new documents appear to be from the CIA’s 200-strong Center for Cyber Intelligence and show in detail how the agency’s digi...

9 Popular Password Manager Apps Found Leaking Your Secrets

Image
Is anything safe? It's 2017, and the likely answer is NO. Making sure your passwords are secure is one of the first line of defense – for your computer, email, and information – against hacking attempts, and  Password Managers  are the one recommended by many security experts to keep all your passwords secure in one place. Password Managers are software that creates complex passwords, stores them and organizes all your passwords for your computers, websites, applications and networks, as well as remember them on your behalf. But what if your Password Managers itself are vulnerable? Well, it's not just an imagination, as a new report has revealed that some of the most popular password managers are affected by critical vulnerabilities that can expose user credentials. The report,  published  on Tuesday by a group of security experts from TeamSIK of the Fraunhofer Institute for Secure Information Technology in Germany, revealed that nine of the most popular Android pass...

Google Does It Again: Discloses Unpatched Microsoft Edge and IE Vulnerability

Image
his month has yet been kind of interesting for cyber security researchers, with  Google successfully cracked SHA1  and the discovery of  Cloudbleed bug in Cloudflare  that caused the leakage of sensitive information across sites hosted behind Cloudflare. Besides this, Google last week disclosed an  unpatched vulnerability in Windows  Graphics Device Interface (GDI) library, which affects Microsoft's Windows operating systems ranging from Windows Vista Service Pack 2 to the latest Windows 10. While the Windows vulnerability has yet to be patched by the company, Google today released the details of another unpatched Windows security flaw in its browser, as Microsoft did not act within its 90-day disclosure deadline. The vulnerability (CVE-2017-0037), discovered and disclosed by Google Project Zero team's researcher Ivan Fratric, is a so-called " type confusion flaw " in a module in Microsoft Edge and Internet Explorer that potentially leads to arbitrary code ...