Skip to main content

SECURENET NEWS

Search This Blog

Home Secretary announces new national economic crime centre to tackle fraud

December 13, 2017

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Home Secretary announces new national economic crime centre to tackle high level fraud and money laundering - GOV.UK http://bit.ly/2jTB2TY

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Popular Posts

macOS zero-day that allows local privilege escalation

A security researcher has publicly disclosed the details of macOS zero-day flaw that can be exploited to take complete control of a system. A security researcher that goes online with the Twitter account Siguza ( @s1guza ) has publicly disclosed the details of macOS zero-day vulnerability that can be exploited to take complete control of a system. The expert speculates the flaw has been around since at least 2002 Siguza @s1guza Fuck it, dropping a macOS 0day. Happy New Year, everyone. https:// siguza.github.io/IOHIDeous/ 10:59 PM - Dec 31, 2017 109 109 Replies 2,493 2,493 Retweets 4,198 4,198 likes The flaw is a local privilege escalation (LPE) vulnerability that affects IOHIDFamily, a kernel extension designed for human interface devices (HID) (e.g. the touchscreen, buttons, accelerometer, etc.). The flaws discovered by the expert affect all versions of macOS and they can lead to an arbitrary read/write vulnerability in the kernel. An attacker

Forever 21 hackers breach payment card system

The company didn't specify how many customers had information stolen, but said various point of sales terminals were affected between April 3 and November 18, 2017. Hackers collected credit card numbers, expiration dates, verification codes and sometimes cardholder names. In its notification to customers , Forever 21 said hackers installed malicious software on some point of sales terminals in stores throughout the country. It's an update to a November 14 announcement saying the company may have been targeted by hackers . The breach is another example of how cybercriminals are targeting major retailers by hacking the systems that process your credit and debit cards, despite companies' efforts to make that harder to do. Fast food chain Chipotle was hit by a similar hack in 2017, as was video game retailer GameStop . Companies have technologies in place to foil hackers, but they don't always work. Forever 21 said its point of sales terminals, which cashiers use to swip

Mirai malware variant called Satori now public

Exploit code used in the Mirai malware variant called Satori, which was used to attack hundreds of thousands of Huawei routers over the past several weeks , is now public. Researchers warn the code will quickly become a commodity and be leveraged in DDoS attacks via botnets such as Reaper or IOTrooper. The code is the zero-day vulnerability CVE- 2017-17215 used by a hacker identified as “Nexus Zeta” to spread a variant of the Mirai malware called Satori, also known as Mirai Okiru. “The fact that the code is now in the open means that more threat actors would now be using it. We can assume that the exploit would become commodity, and IoT botnets that attempt at exploiting a large kit of vulnerabilities will be adding CVE- 2017-17215 to their arsenal,” said Maya Horowitz, threat intelligence group manager, Check Point. Since then Huawei issued an updated security notice to customers warning the flaw allows a remote adversary to send malicious packets to port 37215 to execute remote

Powered by Blogger