The latest threat to computers is the Zombieload vulnerability.
So many of the known threats to computer devices are because of how the software or hardware was created. The exploits and vulnerabilities we discover are flaws in how the system or code was constructed. Is it possible that we just didn’t have the tools we needed to test for security flaws?
The following is a list of IPs that ignore robot.txt that I have collected over the past year or so. This list of bad IPs are registered after ignoring directives in robot.txt
National Registry Of WI-FI Connections to combat cyber threats that we face in today's ever evolving internet. One of those threats, that has not received a lot of attention, is the growing number of Wi-Fi hotspots that millions of cell phones connect to daily.
The Smart Lock feature allows setting screen lock to be linked to GEO location (several zones can be set), a trusted Bluetooth device, or it can determine if the device is no longer on your person.
Online banking continues to be an increasing method of choice for conducting business and paying bills. According to a recent Pew report, fifty-one percent of U.S. adults, or 61% of internet users, bank online. Is online banking safe?
A critical vulnerability in glibc, a core Linux library, can be exploited remotely through PHP applications.
As the Sony hack investigation unfolds, revelations regarding its possible origin, type of hack used, and the damage it is purported to have caused, are starting to be revealed.
Google is pioneering another innovation which may someday replace the need for passwords. The device they are introducing is a pluggable USB device that acts as the authentication mechanism to login. By inserting the device into a USB port and touching it a process is started that authenticates the user through that physical device.
Headlines like "Devastating Heartbleed Flaw Was Used in Hospital Hack" and others tend to make one wonder if anybody is paying attention. The hackers are letting the security firms do the grunt work of finding flaws and then all they have to do is troll for sites don't update.
The vulnerability is codenamed TowelRoot after a rooting tool that was released for rooting mobile devices that uses this vulnerability to root most mobile devices on the market.
Detecting spoofed Ips and geo-targeting. A national infrastructure like this would also expose ISPs and routes that allow non-network IPs to originate from their network.
The black market of hacking programs and routines are born out of a programming community of sharing and cooperation. Additionally, the struggle for internet security is set against mass marketing, mass distribution, and mass code refinement, which grows and spreads through open source creation and manipulation of various programs and scripts.
The Heartbleed code flaw, that was discovered using newly developed encryption testing tools, is a major code bug with far reaching implications. According to recent 'Honey Pot' reports the SSL code flaw was already being exploited by hackers.
Advancement in technology should be viewed with the same preciseness that is used with troop movement. Before we advance we need confident information on what lies ahead, what is on our flank, what is behind us, and what the impact will be.
The news buzz about the latest, large scale, cyber-attack generates more questions than answers. According to the latest reports on the attack at Target, and other retailers, the attack originated from a teenage hacker in Russia.
According to the latest news reports an attack on one of Yahoo's Ad servers perpetuated a large scale malware infestation across user's computers of the popular search engine and the breech seems to point to flaws in the java code used on the servers.
Cisco report says the number of smartphones, tablets, laptops and internet-capable phones will exceed the number of humans in 2013. One can only imagine the power if an individual or group had control over a portion of those devices.
By observing Newton's law we can conclude that the efforts of the quantum dawn tests and the other security risk assessments undertaken across internet connected sites have been significant but have not yet matched the effort of the attackers.
It may be time for the Government to take more of a role in protecting its citizens, businesses, and institutions, from attacks by cyber-criminals and terrorists.
Sign the petition for the creation of a Department of Defense agency to combat malicious websites, website hacking, and to increase general computer security across the internet. http://wh.gov/lqvr8
The success of DDoS attacks depends on the filtering done on the client zombies. It is this filtering that we can take advantage of and exploit. If the BOT net cannot connect to the target then it can't flood it with requests.
I admit I have considered this same thing. I had even prepared my IP tables and firewalls to cut off all but regional IP traffic. I never implemented it but I was close. In hindsight I realize it was just a knee-jerk response to constant kicks at my server door.