Scientists developed Malware capable of sending data using Mic and Speakers

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">How a malware can steal the data from an infected system that doesn't have internet connection? You might think it is impossible.  Computer scientists say it is possible.<br /><br />German Researchers at Fraunhofer Institute for Communication, Information Processing, and Ergonomics, say that a malware can transmit data using inaudible sounds.<br /><br />It can steal confidential data or keystrokes using nothing more than a normal speakers and Microphones without any internet connection.</div><div style="text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHm8wMsAek-j1joh6Hlpn9Y3iBBJDCm0muL9TSO3SyYaDaB1DJATKv11TPbv3NmxC8bOTEHUsv0iJrf1iekgLxvOpAfewKhYuJaSeBz4WlgEQvtei5EPl5hxTcSA_SveBh61RrF7GmCPE/s1600/transmitting-data-using-inaudible-sounds-speakers.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="171" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHm8wMsAek-j1joh6Hlpn9Y3iBBJDCm0muL9TSO3SyYaDaB1DJATKv11TPbv3NmxC8bOTEHUsv0iJrf1iekgLxvOpAfewKhYuJaSeBz4WlgEQvtei5EPl5hxTcSA_SveBh61RrF7GmCPE/s1600/transmitting-data-using-inaudible-sounds-speakers.jpg" width="320" /></a> </div><div style="text-align: justify;">Security researchers often suggest not to connect the system that has sensitive data to Internet so that cyber criminals can't reach them.  But now, It can steal from audio sounds without network connection.  So what now?! Then, Let us remove the audio devices. <br /><br />The researchers says it can be prevented by switching off audio I/O devices.  Sometimes, we might need audio devices.  In that case, the inaudible communication can be prevented "by application of a software-defined lowpass filter".<br /><br />The researchers has described their idea in their paper entitled "On Covert Acoustical Mesh Networks in Air".  You can find the research paper <a href="http://www.jocm.us/index.php?m=content&c=index&a=show&catid=124&id=600" target="_blank">here</a>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><br /><br /></div>

Scientists developed Malware capable of sending data using Mic and Speakers

How a malware can steal the data from an infected system that doesn't have internet connection? You might think it is impossible.  Compu...

Read more »

Buffer social Media app admits security breach, facebook and twitter access tokens stolen

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXlizJ25REa0LhKgmdXziE0SEL26rKhdvWX7LkLYwT9o04AN-V6euD0u5y0Uddp0YeKnGkAwDoWeNxZtsDUlGr7qD7fg5TX0lCLidBwBsQ66-flbS599tnapEId2oF1XVAxJcyapdkQgU/s200/bufferapp-hacked.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXlizJ25REa0LhKgmdXziE0SEL26rKhdvWX7LkLYwT9o04AN-V6euD0u5y0Uddp0YeKnGkAwDoWeNxZtsDUlGr7qD7fg5TX0lCLidBwBsQ66-flbS599tnapEId2oF1XVAxJcyapdkQgU/s200/bufferapp-hacked.jpg" /></a></div><div style="text-align: justify;">Buffer, an app that allows users to schedule their social media posts, has recently acknowledged that hackers breached their website.<br /><br />The hackers managed to steal the facebook, twitter access tokens of users stored in their server that allowed the hackers to post Spam on behalf of Buffer's users.<br /><br />However, CTO Sunil noted in their blog that hackers were not able to get access to any passwords, billing information or any other sensitive information.<br /><br />The company immediately took a step and invalidate all twitter access tokens and added encryption for all of them. He also noted they are using an extra security parameter for facebook API calls to make it more secure.<br /><br />The company managed to identify the source of the security breach and closed the vulnerability.</div><div style="text-align: justify;"><br /></div><br /><br /></div>

Buffer social Media app admits security breach, facebook and twitter access tokens stolen

Buffer, an app that allows users to schedule their social media posts, has recently acknowledged that hackers breached their website. The ha...

Read more »

WordPress 3.7 released for lazy admins, automatic security update

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTNQqeL9CQlAqs5-qz756Ttx_to4iYAMi9J0y4fSMORc3zIpMCRUMde6e47cbK5YExvrDaHh-zU4wJ4zX3Ip8UPbjtLMjxpepVBw3Z2bs2B06PQIp5PXLnVYPvm0emXwHsChU9QEnQncY/s200/lazyadmins-security-wordpress.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTNQqeL9CQlAqs5-qz756Ttx_to4iYAMi9J0y4fSMORc3zIpMCRUMde6e47cbK5YExvrDaHh-zU4wJ4zX3Ip8UPbjtLMjxpepVBw3Z2bs2B06PQIp5PXLnVYPvm0emXwHsChU9QEnQncY/s200/lazyadmins-security-wordpress.jpeg" /></a></div><div style="text-align: justify;">Wordpress finally come with an idea to put an end to security risks of failing to update the CMS.  Yes, you heard it correctly, they have added a new feature "Automatic update".<br /><br />The new version 3.7 has no special security bug fixes but they have enabled a good feature that will prevent your CMS being hacked because of outdated versions.<br /><br />Besides the "Updates while you sleep" feature, they have also added a feature to estimate the strength of your password and "support for automatically installing the right language files and keeping them up to date".<br /><br />This is quite impressive move from Wordpress.  At least, from now onwards, the lazy admins no need to care about updating the wordpress whenever there is security release, it will be automatically done.<br /><br />It's just come to mind how many of the lazy admins are going to update to the latest version 3.7!</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

WordPress 3.7 released for lazy admins, automatic security update

Wordpress finally come with an idea to put an end to security risks of failing to update the CMS.  Yes, you heard it correctly, they have ad...

Read more »