Wireless mice and keyboards commonly communicate using proprietary protocols operating in the 2.4GHz ISM band. In contrast to Bluetooth, there is no industry standard to follow, leaving each vendor to implement their own security scheme.
Showing posts with label Hacking. Show all posts
Showing posts with label Hacking. Show all posts
2016-02-27
MouseJack: Injecting Keystrokes into Wireless Mice
Interesting hack to take over wireless mice (non-Bluetooth).
2016-02-14
Pwn2Own 2016
The annual event, which was originally hosted by HP's ZDI, will now be jointly hosted by HP and TrendMicro (post the acquisition). Details are here and here.
Highlights:
Highlights:
- Exploiting Google Chrome or Microsoft Edge will earn hackers $65,000
- Exploiting Apple Safari on Mac only $40,000.
- Achieving system-level access on Windows or root access on Mac OS X would add another $20,000 to the final payout.
- Adobe Reader, Mozilla Firefox and Internet Explorer are no longer on the contest's target list. Adobe Flash remains, but only the version that comes bundled with Microsoft Edge
- If anyone manages to escape the VMware Workstation virtual machine and achieves code execution on the host operating system, they’ll receive an additional $75,000
2015-11-11
Biggest cyber heist in history
How JP Morgan (and others) got hacked, and the story behind pump-n-dump scheme of hackers. And hackers caught.
2015-06-01
Stegosploit - Exploiting via an image
A brilliant hack.. how to run an exploit from an image? All the victim needs to do is load an image on his browser.
2013-09-14
Evolution of Hacking
How hacking techniques have (not) evolved in the last 30 years or so. An interesting article.
- Hackers have changed very little since the 1980s (there have always been moral and immoral hackers)
- Hacking technologies have changed very little
- Motivations have changed very little (it has always been for fun or profit)
- Opportunities have changed dramatically
2013-07-28
Hacking Cars!
The famous Charlie Miller (on Govt funding) shows how to hack a car. The brakes, the speed, fuel-gauge and everything else! You Tube video here.
Update 01-Aug-2013:
A similar hacker/researcher in UK, has been banned by the court to reveal his findings.
Update 01-Aug-2013:
A similar hacker/researcher in UK, has been banned by the court to reveal his findings.
2013-07-06
A world record attempt at CTF Hacking Contest
An inspirational attempt to get 3000+ security enthusiasts together and play the Capture The Flag hacking game. If successful, they will go down in the Guinness book of world records! Do watch their youtube video
2013-02-28
ABC News Hacked
ABC News hacked, for some controversial interview. The hacker publishes the full DB dump, including password hashes. Findings:
In short - nothing new.
- No salting
- Weak password used by users.
In short - nothing new.
2012-06-30
SSL Certificates Stolen From DigiNotar
Approximately 531 certificates were stolen, possibly by the Iranian Government.
Technet has a very good article around why such an attack is brutal and how to protect against it
Microsoft feels this could even lead to attackers pushing malware via Windows automatic update
Update 28-Jun-12:
Technet has a very good article around why such an attack is brutal and how to protect against it
Microsoft feels this could even lead to attackers pushing malware via Windows automatic update
Impact of this hack:
Update 07-Sep-11:
Not surprisingly, the same hacker which attacked Comodo, has taken the responsibility of this hack
To make matters worse, he claims to have compromised four other Certificate Authorities (CA)..!!
Update 09-Sep-11:
Fox-IT has published a very good report on the incident
ComodoHacker claims he can now exploit Windows Update as well
Update 12-Sep-11:
Update 27-Sep-11:
DigiNotar has filled for bankruptcy, plus the Dutch government has revoked their root cert
Dutch govt tells us how difficult & time consuming it is to replace all digital certs in an organization.
Update 01-Nov-12:
Fox IT now details the attack
Update 01-Nov-12:
Fox IT now details the attack
2012-05-28
2012-04-17
3 million bank accounts hacked in Iran
First, he warned of the security flaw in Iran’s banking system. Then he provided them with 1,000 bank account details. When they didn’t listen, he hacked 3 million accounts across at least 22 banks.Full Story
2012-04-13
2012-02-03
VeriSign Also Admits It Was Hacked
02-Feb: Verisign admitted that it was successfully hacked mutiple times in 2010, but did not disclose it. This just goes on to show, how Businesses still do not believe in responsible (and honest?) disclosures.
15-Feb: Verisign releases a public statement on their website, which sounds more of PR non-sense, than reality.
15-Feb: Verisign releases a public statement on their website, which sounds more of PR non-sense, than reality.
2012-01-21
Dremhost Hacked!
Last night we detected some unauthorized activity within one of our databases. While we don’t have evidence that customer passwords were taken at this time, we’re forcing a change out of caution. Please login to our web panel and change any passwords you may have with us. We’ll keep this post updated as we get more information.Their public announcement
23-Jan-12: DreamHost resets passwords after database breach
2012-01-07
Hack to Learn
One of the common questions I keep getting is, "How do I learn to hack". My usual answer is to grow up and get a life.
However, in case anyone is really interested in learning offensive security, or in other words would like to "hack to learn" from the experience, here is what I can recommend:
However, in case anyone is really interested in learning offensive security, or in other words would like to "hack to learn" from the experience, here is what I can recommend:
- Backtrack: The must have distro, with all the tools required. The new version is called Kali
- The team which created Backtrack also runs a few certification programs. All of these are paid, but extremely helpful
- This same group also has one free training program
- To practice, and to get some experience around exploitation, here a few helpful and hack-able targets
- McAfee's Hackme - A web based exploitable application. Here is a good tutorial with Hackme
- WebGoat is a J2EE web app from OWASP, designed to teach web application security lessons
2011-12-27
How hackers gave Subway a $3 million lesson in point-of-sale security
How Subway got hacked, and lost $3 million
2011-12-06
2011-10-12
Sony: Setting an example for all APTs
In case you have been living under a rock, and are not aware of the Sony hacks, this article is for you. Basically, after the first few hacks I lost count, but seems like Sony was hacked a whooping 21 times between Apr-2011 and July-2011 (wow!)
Update: 12-Oct-11
Only a few hours after my post, Sony has declared that they have been hacked one more time
Update: 12-Oct-11
Only a few hours after my post, Sony has declared that they have been hacked one more time
2011-10-07
Why Isn't Everyone Hacked Every Day?
Good article, around how return on investment is evaluated for hacking.
2011-09-21
Police net seven cyber-crooks who siphoned off RM250,000
Wow, seems like a story right out of a hollywood flick...!
Subscribe to:
Posts (Atom)