Vulnerability in Siemens Switches allows hackers to gain admin access

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s1600/Scalance-X200-critical-security-vulnerability.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s320/Scalance-X200-critical-security-vulnerability.jpg" width="313" /></a></div><div style="text-align: justify;">A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administrative operations.<br /><br />The vulnerabilities were discovered by Eireann Leverett, Senior security consultant for IOActive and have been reported to Siemens.<br /><br />The first vulnerability(CVE-2013-5944) could allow hackers to perform administrative operation over the network without authentication.<br /><br />Sponsored Links<br />The Second vulnerability (CVE-2013-5709) could allow hackers to hijack web sessions over the network without authentication. This is due to insufficient entropy in its random number generator.<br /><br />Siemens produced a patch within 3 months.  Customers of Siemens are advised to apply the SCALANCE X-200 firmware update.<br /><br />Eireann is scheduled to demonstrate the vulnerabilities and release proof-of-concept code for organizations to check their own devices, at next week's S4 SCADA security conference in Miami.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Monday, January 13, 2014</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Vulnerability in Siemens Switches allows hackers to gain admin access

A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administ...

Read more »

Gmail now automatically displays images, helps attacker to know when you open the mail

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6YN105EmRQmBCN5I5DjpCBb-ipwW7xsoH8Cf2FrXLu2XyINs1iWNl1E5-QISvsFQba76om6H3VPPIiP__jAfDP8Ci_ObKmaQqb-623VTGoIhtDf_CCgxVDe5m-daQ2vwChc8NLCOHfVs/s400/google-default-image.security-risk.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6YN105EmRQmBCN5I5DjpCBb-ipwW7xsoH8Cf2FrXLu2XyINs1iWNl1E5-QISvsFQba76om6H3VPPIiP__jAfDP8Ci_ObKmaQqb-623VTGoIhtDf_CCgxVDe5m-daQ2vwChc8NLCOHfVs/s320/google-default-image.security-risk.jpg" width="320" /></a></div><div style="text-align: justify;">Google yesterday announced that it will automatically display the embedded images in emails by default, which was previously disabled by Google. <br /><br />By enabling this feature, Google made a mistake, now sender is able to track whether the user have opened the mail or not.<br /><br />An attacker with a unique image link (eg:www.breakthesecurity.com/123456.jpg) can easily determine when the recipient opened the mail.<br /><br />"Turning those images on means we’ll be more accurate when tracking unique opens."MailChimp, a bulk Mail service, said in their blog post.<br /><br />Sponsored Links<br />"GMail's new image caching doesn't occur until the user views the message, still provides read tracking." HD Moore, security researcher commented about this new feature in his tweet.<br /><br />You can disable this feature by choosing the option "Ask before showing" in the "image" section under the General tab in settings. However, it is still in question how many of users going to disable it, most of them don't bother.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Friday, December 13, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Gmail now automatically displays images, helps attacker to know when you open the mail

Google yesterday announced that it will automatically display the embedded images in emails by default, which was previously disabled by Goo...

Read more »

64 bit version of notorious Zeus Trojan spotted by Kaspersky

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyF8i3aOx0DvGtfkHmJfMg9XJ0AjeWX-UNRBGP9oa_kWTLwdWIAEi9v1Spj_NW1jC6_qfNO6ZxN0k3gPoUMacf5BY3PqyXRDuVu4jZtqDJWaRl4AJ71f9UR6CiLYl2D4TfsGZaiVmJRzI/s200/zeus-banking-trojan.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyF8i3aOx0DvGtfkHmJfMg9XJ0AjeWX-UNRBGP9oa_kWTLwdWIAEi9v1Spj_NW1jC6_qfNO6ZxN0k3gPoUMacf5BY3PqyXRDuVu4jZtqDJWaRl4AJ71f9UR6CiLYl2D4TfsGZaiVmJRzI/s200/zeus-banking-trojan.jpg" /></a></div><div style="text-align: justify;">As more number of people switch to 64bit version of OS,  Cyber criminals also started to write malware code that compatible with 64 bit.<br /><br />It is not surprising to see the world's most notorious Banking Trojan Zeus also come up with new variants supporting 64bit.<br /><br />Security researchers at Kaspersky <a href="http://www.securelist.com/en/blog/208214171/The_inevitable_move_64_bit_ZeuS_has_come_enhanced_with_Tor" target="_blank">spotted</a> a 32-bit variant of Zeus malware containing 64bit version.  Researchers say 64-bit variant has already been in the wild around June with compilation date on April 2013.<br /><br />This new variant has ability to communicate with its command and control(C&C) server via Tor Network.<br /><br />A number of 64-bit users comparing to 32-bit users is very low.  Then, what is the need of developing 64bit supported variants?!<br /><br />Researchers believe that it might be marketing technique to attack buyers or the ground work for some future needs.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Thursday, December 12, 2013</div><br /><br /></div>

64 bit version of notorious Zeus Trojan spotted by Kaspersky

As more number of people switch to 64bit version of OS,  Cyber criminals also started to write malware code that compatible with 64 bit. It ...

Read more »

Vulnerability in NVIDIA mental ray allows hackers to take control of render farms

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlwtO6LUijLs7l8HXrTh0_NcJU3bvV9_m5_dOhY0NTlRdVmlNRFwhfRuqviDKF0Qyk4yso-1sp-Dp9Zym2YT9QPeL5dl0_GIekIWwvP5dQQeg8psSNMf45WOp_Eg3GYjovFA-2YtpJ4Zo/s1600/hacking-render-farm-using-nvidia-vulnerability.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="285" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlwtO6LUijLs7l8HXrTh0_NcJU3bvV9_m5_dOhY0NTlRdVmlNRFwhfRuqviDKF0Qyk4yso-1sp-Dp9Zym2YT9QPeL5dl0_GIekIWwvP5dQQeg8psSNMf45WOp_Eg3GYjovFA-2YtpJ4Zo/s320/hacking-render-farm-using-nvidia-vulnerability.jpg" width="320" /></a></div><div style="text-align: justify;">A security vulnerability in Nvidia mental ray, a high performance 3D rendering software allows hackers to take control of an entire "render farm", says security researchers at ReVuln.<br /><br />A Render farm is a cluster of specialized computers designed for rendering images, typically used for creating visual effects in films.  Render farms have high computational capability.<br /><br />The mental ray is available as stand alone software and also embedded into popular software like AutoCAD, Autodesk 3ds Max, Autodesk Maya, Cinema 4D, Domus3D.<br /><br />By just sending a malicious packet to the target machine, a hacker can load arbitrary DLLs on a victim's machine; Injecting malicious remote library allows attacker to take control of the entire render farm.<br /><br />The mental ray version 3.11.1.10 is only affected by this vulnerability.<br /><br />What will you do when you get access to a system that has huge computation capability? A hacker definitely attempt to use it for password cracking or Bitcoin Mining.<br /><br />You can find the white paper here: <a href="http://revuln.com/files/ReVuln_Nvidia_mental_ray.pdf" target="_blank">http://revuln.com/files/ReVuln_Nvidia_mental_ray.pdf</a></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Thursday, December 12, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Vulnerability in NVIDIA mental ray allows hackers to take control of render farms

A security vulnerability in Nvidia mental ray, a high performance 3D rendering software allows hackers to take control of an entire "re...

Read more »

WordPress Plugins containing Backdoor distributed via phishing emails

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">What would you do when you receive an email offering Pro version of Wordpress plugin for free, if you are a WordPress user? Don't get tempted by such kind of emails, they also give malicious code for free!<br /><br />Sucuri <a href="http://blog.sucuri.net/2013/12/phishing-emails-to-install-malicious-wordpress-plugins.html" target="_blank">reported</a> about a phishing emails asking their clients to download Pro-version of "All in one SEO Pack" WordPress plugin.  The email claims that the plugin is $79.00 worth and giving it for free.<br /><br />"You have been chosen by WordPress to take part in our Customer Rewarding Program.  You are the 23rd from 100 <i style="color: red;">uniques</i> winners." The phishing email reads.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil0FFW-n-B9G1FIafXYqT-Ox7kSFVYDAeXhLzyU6bFGAGORucbz5c011VMjvu6d5C086PMvRfviy2ChAPbRXuqxtt31x_eNG3V9mcrhSr-6E6_cmU-V6vEldBWMImgCGwpGY5yvzRiFns/s400/phishing-email-malicious-wordpress-plugin.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="273" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil0FFW-n-B9G1FIafXYqT-Ox7kSFVYDAeXhLzyU6bFGAGORucbz5c011VMjvu6d5C086PMvRfviy2ChAPbRXuqxtt31x_eNG3V9mcrhSr-6E6_cmU-V6vEldBWMImgCGwpGY5yvzRiFns/s400/phishing-email-malicious-wordpress-plugin.jpg" width="320" /></a>The download link provided in the email is not linked to WordPress plugin store, it is linked to a zip file hosted in a compromised website.<br /><br />Security researchers at Sucuri analyzed the plugin and found out that it is modified with a Backdoor which gives attackers full access to the server.<br /><br />The malicious code in the plugin replaces the index.php file with the malicious code retrieved from the attacker's server.  So, when user visit the site, they either redirected to SPAM sites or to Exploit kits where it will infect the visitor's system.</div><br /><br />Dated: Thursday, December 5, 2013<br /><br /><br /></div>

WordPress Plugins containing Backdoor distributed via phishing emails

What would you do when you receive an email offering Pro version of Wordpress plugin for free, if you are a WordPress user? Don't get te...

Read more »

Scientists developed Malware capable of sending data using Mic and Speakers

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">How a malware can steal the data from an infected system that doesn't have internet connection? You might think it is impossible.  Computer scientists say it is possible.<br /><br />German Researchers at Fraunhofer Institute for Communication, Information Processing, and Ergonomics, say that a malware can transmit data using inaudible sounds.<br /><br />It can steal confidential data or keystrokes using nothing more than a normal speakers and Microphones without any internet connection.</div><div style="text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHm8wMsAek-j1joh6Hlpn9Y3iBBJDCm0muL9TSO3SyYaDaB1DJATKv11TPbv3NmxC8bOTEHUsv0iJrf1iekgLxvOpAfewKhYuJaSeBz4WlgEQvtei5EPl5hxTcSA_SveBh61RrF7GmCPE/s1600/transmitting-data-using-inaudible-sounds-speakers.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="171" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHm8wMsAek-j1joh6Hlpn9Y3iBBJDCm0muL9TSO3SyYaDaB1DJATKv11TPbv3NmxC8bOTEHUsv0iJrf1iekgLxvOpAfewKhYuJaSeBz4WlgEQvtei5EPl5hxTcSA_SveBh61RrF7GmCPE/s1600/transmitting-data-using-inaudible-sounds-speakers.jpg" width="320" /></a> </div><div style="text-align: justify;">Security researchers often suggest not to connect the system that has sensitive data to Internet so that cyber criminals can't reach them.  But now, It can steal from audio sounds without network connection.  So what now?! Then, Let us remove the audio devices. <br /><br />The researchers says it can be prevented by switching off audio I/O devices.  Sometimes, we might need audio devices.  In that case, the inaudible communication can be prevented "by application of a software-defined lowpass filter".<br /><br />The researchers has described their idea in their paper entitled "On Covert Acoustical Mesh Networks in Air".  You can find the research paper <a href="http://www.jocm.us/index.php?m=content&c=index&a=show&catid=124&id=600" target="_blank">here</a>.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><br /><br /></div>

Scientists developed Malware capable of sending data using Mic and Speakers

How a malware can steal the data from an infected system that doesn't have internet connection? You might think it is impossible.  Compu...

Read more »

WordPress 3.7 released for lazy admins, automatic security update

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTNQqeL9CQlAqs5-qz756Ttx_to4iYAMi9J0y4fSMORc3zIpMCRUMde6e47cbK5YExvrDaHh-zU4wJ4zX3Ip8UPbjtLMjxpepVBw3Z2bs2B06PQIp5PXLnVYPvm0emXwHsChU9QEnQncY/s200/lazyadmins-security-wordpress.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTNQqeL9CQlAqs5-qz756Ttx_to4iYAMi9J0y4fSMORc3zIpMCRUMde6e47cbK5YExvrDaHh-zU4wJ4zX3Ip8UPbjtLMjxpepVBw3Z2bs2B06PQIp5PXLnVYPvm0emXwHsChU9QEnQncY/s200/lazyadmins-security-wordpress.jpeg" /></a></div><div style="text-align: justify;">Wordpress finally come with an idea to put an end to security risks of failing to update the CMS.  Yes, you heard it correctly, they have added a new feature "Automatic update".<br /><br />The new version 3.7 has no special security bug fixes but they have enabled a good feature that will prevent your CMS being hacked because of outdated versions.<br /><br />Besides the "Updates while you sleep" feature, they have also added a feature to estimate the strength of your password and "support for automatically installing the right language files and keeping them up to date".<br /><br />This is quite impressive move from Wordpress.  At least, from now onwards, the lazy admins no need to care about updating the wordpress whenever there is security release, it will be automatically done.<br /><br />It's just come to mind how many of the lazy admins are going to update to the latest version 3.7!</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

WordPress 3.7 released for lazy admins, automatic security update

Wordpress finally come with an idea to put an end to security risks of failing to update the CMS.  Yes, you heard it correctly, they have ad...

Read more »