Silensec Newsletter

Top News

Hyatt says hackers took card data from 250 of its hotels

Hyatt Hotels says a total of 250 of its resorts were hit last year in a massive malware infection that stole customer payment card information. The luxury resort chain said that locations in 50 countries were impacted by malware that collected payment card information from sales terminals at Hyatt restaurants, spas, golf shops, parking lots and check-in desks.

Hyatt is advising people who stayed at any of the 250 breached locations to keep a close eye on their bank statements and report any unauthorized charges. Read more...

 

 

602 Gbps! This May Have Been the Largest DDoS Attack in History!

 A group calling itself New World Hacking claimed responsibility for taking down both the BBC's global website and Donald Trump's website last week. Out of two, the largest ‪DDoS‬ ‪attack‬ in the history was carried out against the BBC website: Over 600 Gbps.

The group targeted all ‪BBC‬ sites, including its iPlayer on-demand service, and took them down for at least three hours on New Year's Eve. Read more...

 

 

Read more...

Top News

More Google Play apps infected with Brain Test malware

 

Google has promptly removed 13 compromised apps from the Google Play Store after mobile cybersecurity firm Lookout found the developers behind the Brain Test strain of malware had returned.

According to Lookout, apps riddled with variants of the Brain Test malware attempt to gain root privilege, and persist factory resets and other efforts to remove it, which Lookout said is especially the case on rooted devices. Read more...

 

 

 

Hackers Install Free SSL Certs from Let's Encrypt On Malicious Web Sites!

 

The Let's Encrypt free HTTPS certificates would not just help legitimate website operators to encrypt its users' traffic, but also help criminals to bother innocent users with malware through secure sites.

Let's Encrypt free SSL certs are not only used by website owners to secure its users connection but also abused by cyber criminals to spread malware onto computers. Read more...

 

 

Read more...
Top News

Juniper Finds Backdoor that Decrypts VPN Traffic

 Juniper Networks today has released an emergency patch that removes what it's calling "unauthorized code" from ScreenOS that could allow attackers to decrypt VPN traffic from NetScreen devices. 

Juniper senior vice president and chief information security officer Bob Worrall said today that two vulnerabilities were discovered during a recent internal code review.

These vulnerabilities affect ScreenOS 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20. Read more...

 

 

You can Hack into a Linux Computer just by pressing 'Backspace' 28 times

 A pair of security researchers from the University of Valencia have uncovered a bizarre bug in several distributions of Linux that could allow anyone to bypass any kind of authentication during boot-up just by pressing backspace key 28 times.

This time, the issue is neither in a kernel nor in an operating system itself, but rather the vulnerability actually resides in Grub2, the popular Grand Unified Bootloader, which is used by most Linux systems to boot the operating system when the PC starts. Read more...

 

 

Read more...

Silensec Africa

Feel free to contact us if you have any problems.

Silensec UK

Feel free to contact us if you have any problems.

News Feed