Hacking News

Last year’s tool was designed to provide access to data collected through Facebook’s own service monitoring the issuance of TLS certificates. It leverages Google’s Certificate Transparency (CT) framework, which can detect mis-issued TLS certificates and stop attempts to leverage them to intercept HTTPS traffic. Read more

Governments and intelligence agencies strive to control and bypass or circumvent cryptographic protection of data and communications. Backdooring encryption algorithms is considered as the best way to enforce cryptographic control. Read more

Ken Munro is a partner at Pen Test Partners and he believes that a huge number of companies were found to be using building management systems on public internet, in the absence of security and entirely unprotected, waiting to be compromised. According to Munro, some management systems are so poor in terms of authentication that

Voter registration data for over 19.2 million California residents that was residing on an unsecured MongoDB database has been deleted and held for ransom by attackers, according to researchers at Kromtech, who discovered the incident. Read more

Researchers at Secureworks Counter Threat Unit discovered the campaign, which aims to lure employees to click on a link for a chief financial officer job opening. The link then downloads malware onto users’ devices and gives attackers remote control of the device. Read more

The ride-sharing operator posted a statement on its website Friday with the update, noting that the figure was “an approximation rather than an accurate and definitive count”. The number was determined from data extracted from its app or online site and based on codes assigned to specific countries, which might not always correspond with where

The attacker was able to access the DNS records for the Fox-IT.com domain at their third-party domain registrar, change them to point to a server in their ownership, and intercept and then forwarded the traffic to the primary server that belongs to Fox-IT. He used a popular type of attack which is called a Man-in-the-Middle

Security researchers from FireEye and Dragos have discovered a nasty piece of malware targeting industrial control systems (ICS). The malware (called “TRITON” and “TRISIS”) was discovered after it was used against a victim in the Middle East, and unintentionally led to an automatical shutdown of the industrial process. Read more

Grant West confessed that he hacked into websites to collect personal information related to customers such as their credit card details, to steal money from them and convert it into Bitcoins so that he couldn’t be traced. He was also succeeded at hacking into the Finish Bitcoin Exchange website. He hacked into Just Eat and