Vulnerability in Siemens Switches allows hackers to gain admin access

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s1600/Scalance-X200-critical-security-vulnerability.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s320/Scalance-X200-critical-security-vulnerability.jpg" width="313" /></a></div><div style="text-align: justify;">A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administrative operations.<br /><br />The vulnerabilities were discovered by Eireann Leverett, Senior security consultant for IOActive and have been reported to Siemens.<br /><br />The first vulnerability(CVE-2013-5944) could allow hackers to perform administrative operation over the network without authentication.<br /><br />Sponsored Links<br />The Second vulnerability (CVE-2013-5709) could allow hackers to hijack web sessions over the network without authentication. This is due to insufficient entropy in its random number generator.<br /><br />Siemens produced a patch within 3 months.  Customers of Siemens are advised to apply the SCALANCE X-200 firmware update.<br /><br />Eireann is scheduled to demonstrate the vulnerabilities and release proof-of-concept code for organizations to check their own devices, at next week's S4 SCADA security conference in Miami.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Monday, January 13, 2014</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Vulnerability in Siemens Switches allows hackers to gain admin access

A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administ...

Read more »

The Official Microsoft Blog also hacked and defaced by Syrian Electronic Army

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1PnS3pRyclsdxhm9JHYSFJ0_K27zOzArw8EUGVJ3cjQ1PPJHrn75McVoPPA4e_bge7fzmU2UNEY2Mb6FGedHDJbDtdkCO3VRwsPQDOXG-SJGm4SlHHqJxbhXEgVG5MRuLN0et_WoilHo/s1600/microsoft-official-technet-blog-hacked.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1PnS3pRyclsdxhm9JHYSFJ0_K27zOzArw8EUGVJ3cjQ1PPJHrn75McVoPPA4e_bge7fzmU2UNEY2Mb6FGedHDJbDtdkCO3VRwsPQDOXG-SJGm4SlHHqJxbhXEgVG5MRuLN0et_WoilHo/s320/microsoft-official-technet-blog-hacked.jpg" width="320" /></a></div><div style="text-align: justify;">It appears new year starts with bad luck for the Microsoft.  Microsoft has found itself under the radar of Syrian Electronic Army, one of the popular syrian hacker group known for high profile website hacks.<br /><br />Few hours after we yesterday reported that Microsoft official twitter account hijacked,  their blog also got hacked by the Syrian Electronic Army(SEA).<br /><br />The group managed to create an articled entitled "Hacked by Syrian Electronic Army" in the Microsoft official Technet blog(" blogs.technet.com/b/microsoft_blog/‎").<br /><br />It appears the group still have access to the email accounts of Microsoft.  They also published emails sent from one employee to another employee regarding the security breach.<br /><br />Now, the Technet blog is back up and functioning normally. The attack just came after the hijack of Microsoft Xbox twitter account and official twitter account of Skype.  The group also defaced the Skype's blog.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Sunday, January 12, 2014</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

The Official Microsoft Blog also hacked and defaced by Syrian Electronic Army

It appears new year starts with bad luck for the Microsoft.  Microsoft has found itself under the radar of Syrian Electronic Army, one of th...

Read more »

Central Bank Of India Hacked by Pakistan Cyber Army and Team MaDLeeTs

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3PpjGS6dLARsQ2Si3C6GbluUxMnIH_5AXVY8f_ZogEN_iH1Z74X21IIYIGfGdP3wnO21-WpeloV5j65Zm_9blsq0ukmQcupH7O37hXxr_xrH5A4MOzIkorHswjqdxZXz8K9eA54swmcs/s640/Hacked+By+Pakistan+Cyber+Army.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3PpjGS6dLARsQ2Si3C6GbluUxMnIH_5AXVY8f_ZogEN_iH1Z74X21IIYIGfGdP3wnO21-WpeloV5j65Zm_9blsq0ukmQcupH7O37hXxr_xrH5A4MOzIkorHswjqdxZXz8K9eA54swmcs/s320/Hacked+By+Pakistan+Cyber+Army.png" width="320" /></a></div><div style="text-align: justify;">The official site of "Central Bank Of India" has been defaced by Pakistan Cyber Army and Team MaDLeeTs .<br /><br />The deface seems to be a retaliation to defaces this morning by "Indian Cyber Army" on many Pakistani Sites.<br /><br />The reasons for the Indian attack was that today is the 5th anniversary of the 26/11 terrorists attacks on Mumbai.<br /><br /><div style="text-align: left;">Mirror: <a href="http://www.zone-hack.com/134702.html" target="_blank">http://www.zone-hack.com/134702.html</a></div><div style="text-align: left;"><br /></div><div style="text-align: left;">Deface Link: <a href="https://www.centralbankofindia.co.in/site/" target="_blank">https://www.centralbankofindia.co.in/site/</a></div><br /><br />Dated: Tuesday, November 26, 2013<br /><br /><br /></div></div>

Central Bank Of India Hacked by Pakistan Cyber Army and Team MaDLeeTs

The official site of "Central Bank Of India" has been defaced by Pakistan Cyber Army and Team MaDLeeTs . The deface seems to be a ...

Read more »

Digital Sleeper Cell: NSA infected 50,000 computer network with data stealing malware

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">The NSA has infected more than 50,000 computer networks across globe with a malware which is capable of stealing sensitive data from the victim's machine.<br /><br />According to the NRC.nl <a href="http://www.nrc.nl/nieuws/2013/11/23/nsa-infected-50000-computer-networks-with-malicious-software/" target="_blank">report</a> which is based on documents provided by US whistleblower Edward Snowden, the practice called as Computer Network Exploitation (CNE)".<br /><br />The malware is being referred as "digital Sleeper cell" , it is being controlled by NSA and they can remotely turn it on or off.<br /><br />The number of infected networks in 2008 is reportedly over 20,000.  By mid of the 2012, the number of infected network is increased to 50k.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Sunday, November 24, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Digital Sleeper Cell: NSA infected 50,000 computer network with data stealing malware

The NSA has infected more than 50,000 computer networks across globe with a malware which is capable of stealing sensitive data from the vic...

Read more »

RedHack leaks document about Turkey's Minister for EU Affairs & Chief Negotiator

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSZpUx1-2-N-KNkcMDothEpXv_K3P1HibOK3p-NA8h2qBk7UiQxud4XuzHAB_5x9BBO1jUkaA5E_vmGtjvaQTurBjRZQblgXOLayqkT9CumerkwzVPPT55OlYDobiy27SMO5g7PeS0r6E/s200/redhack-hackers-onion.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="186" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSZpUx1-2-N-KNkcMDothEpXv_K3P1HibOK3p-NA8h2qBk7UiQxud4XuzHAB_5x9BBO1jUkaA5E_vmGtjvaQTurBjRZQblgXOLayqkT9CumerkwzVPPT55OlYDobiy27SMO5g7PeS0r6E/s320/redhack-hackers-onion.jpg" width="320" /></a></div><div style="text-align: justify;">The Turkish hacktivists RedHack has leaked documents which is said to have details of Egemen Bağış,  the Turkey's Minister for EU Affairs & Chief Negotiator.<br /><br />The group provided a ".onion" link in their official tumblr page which is said to have contain the documents.  One of the documents contains details about Egemen stay at London Hilton Park Lane.<br /><br />" When we have checked the bill we have realised that Egemen Bagis was confused between tweeting verses and mixing the wines and whiskeys. These people call themselves devoted believers in religion. Really? " Hackers said in their post.<br /><br />Another document is claimed to have revealing :the sophisticated details of the lifestyle of  Egemen and Beyhan Bagis, their daily routines and dairy"<br /><br />The group also is claimed to have leaked a document contains "the list of businessman and their contact details that would join PM Erdogan during his US visit" and more documents has been uploaded in their onion page.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">News adopted from <a href="http://www.ehackingnews.com/2013/10/redhack-leaks-document-about-turkeys.html" target="_blank">EHN</a></div><div style="text-align: justify;">Dated: October 22, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

RedHack leaks document about Turkey's Minister for EU Affairs & Chief Negotiator

The Turkish hacktivists RedHack has leaked documents which is said to have details of Egemen Bağış,  the Turkey's Minister for EU Affair...

Read more »

Jordan's PM's website hacked by Anonymous hacktivist

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMiKzMS6_nvXfOZOAOuGbOKOE1TBMzVhOhifbBwyLQcWn99mgYGLeV_fZDi0bM12mLOZzNMVMDJ6XmlAehzgtDGMpRBN0PLvSm_0vvv9FzhquwJlhJqQ_WKu6WDfiy80zh81Tw8ui59yQ/s200/anonymous-hackers.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMiKzMS6_nvXfOZOAOuGbOKOE1TBMzVhOhifbBwyLQcWn99mgYGLeV_fZDi0bM12mLOZzNMVMDJ6XmlAehzgtDGMpRBN0PLvSm_0vvv9FzhquwJlhJqQ_WKu6WDfiy80zh81Tw8ui59yQ/s200/anonymous-hackers.jpg" /></a>Anonymous hacktivists have hacked into official website of Jordan's Prime ministry in a protest against raising taxes and prices.  The website was defaced with a message in Arabic to Prime Minister Abdullah Nsur.<br /><br />"Hi uncle, how are you? We are sorry, we hacked your website. Are you upset? We feel much worse when you raise prices. The people know this feeling but you do not," the defacement message reads.<br /><br />According to Voice of Russia report, the website has been restored after it was hacked for several hours.  The official claimed to have identified the attackers.<br /><br />At the time of writing, the website(pmo.gov.jo) is offline.  You can still view the defacement in Google cache: http://webcache.googleusercontent.com/search?q=cache:http://pmo.gov.jo/PMO_Images/635159460595068250.htm</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">News Adapted from <a href="http://www.ehackingnews.com/2013/09/jordans-pms-website-hacked-by-anonymous.html" target="_blank">EHN</a></div><div style="text-align: justify;">Dated: September 30, 2013<br /><br /><br /></div></div>

Jordan's PM's website hacked by Anonymous hacktivist

Anonymous hacktivists have hacked into official website of Jordan's Prime ministry in a protest against raising taxes and prices.  The w...

Read more »