POPULARITY
Attention aux réseaux Wi-Fi publics ! Derrière leur apparente commodité, ils peuvent représenter une porte d'entrée pour les hackers, notamment sur les iPhone. En effet, la fonction de connexion automatique d'iOS peut exposer les utilisateurs à des attaques en permettant aux pirates de s'interposer entre le téléphone et le serveur distant. Cela n'arrivera pas sur un réseau domestique sécurisé, mais les choses se compliquent dans les lieux publics : supermarchés, gares, cafés… Autant d'endroits offrant un accès gratuit à Internet sans mot de passe. C'est là que les cybercriminels peuvent exploiter la fonctionnalité « Auto-Join » de l'iPhone.Comment se protéger ?La clé réside dans les paramètres Wi-Fi d'iOS. Deux options sont à surveiller de près :« Proposer des réseaux » : à régler sur Non.« Connexion auto aux partages » : à choisir en Jamais.En désactivant ces fonctions, l'iPhone nécessitera toujours une action manuelle pour se connecter à un réseau inconnu, réduisant ainsi les risques d'attaques.Et pour aller plus loin, vous pouvez supprimez les réseaux inutilisés : dans le menu Wi-Fi, appuyez sur Modifier en haut à droite pour effacer les connexions enregistrées.Désactivez le Wi-Fi en déplacement : si vous n'en avez pas besoin, coupez-le pour éviter les connexions automatiques.Coupez aussi le Bluetooth : la NSA recommande de désactiver le Bluetooth quand il n'est pas utilisé pour éviter les attaques BlueBorne, qui peuvent aussi voler des données sensibles.En adoptant ces mesures de précaution, vous renforcez la sécurité de votre iPhone face aux cybermenaces. Hébergé par Acast. Visitez acast.com/privacy pour plus d'informations.
Bluetooth is the invisible glue that binds devices together. Which means that when it has bugs, it affects everything from iPhones and Android devices, to scooters, and even physical authentication keys used to secure other accounts. The order of magnitude can be stunning: The BlueBorne flaw, first disclosed in September 2017, impacted five billion PCs, phones, and IoT units.
In today's podcast we hear that an Iranian domestic spyware campaign has been reported: it's most interested in ethnic Kurds. A bogus cryptocurrency wallet site is taken down. F-Secure warns of a widespread firmware problem that could be exploited for cold boot attacks. The BlueBorne Bluetooth bugs are apparently still out there. Tech support scam ads are taken down. Policies for election security continue to evolve. And Facebook's founder offers some thoughts on how his platform can save democracy. Ben Yelin from UMD CHHS with analysis of a Florida court decision on the use of cell site simulators. Guest is Josh Mayfield from Absolute Software with tips on cyber hygiene. For links to all of today's stories check our our CyberWire daily news brief: https://thecyberwire.com/issues/issues2018/September/CyberWire_2018_09_13.html
The Internet of Things lack of security focus strikes again! This times it is a flaw in Bluetooth dubbed BlueBorne than impacts billions of mobiles devices and now your home devices too. This episode goes into the flaw, how it can be exploited and what you can do to protect yourself. Here are the the flaws that were found - Information Leak Vulnerability in Android (CVE-2017-0785) Remote Code Execution Vulnerability (CVE-2017-0781) in Android's Bluetooth Network Encapsulation Protocol (BNEP) service Remote Code Execution Vulnerability (CVE-2017-0782) in Android BNEP's Personal Area Networking (PAN) profile The Bluetooth Pineapple in Android—Logical flaw (CVE-2017-0783) Linux kernel Remote Code Execution vulnerability (CVE-2017-1000251) Linux Bluetooth stack (BlueZ) information leak vulnerability (CVE-2017-1000250) The Bluetooth Pineapple in Windows—Logical flaw (CVE-2017-8628) Apple Low Energy Audio Protocol Remote Code Execution vulnerability (CVE Pending) You can look up the CVE definitions here - http://www.cvedetails.com/ Be aware, be safe. ------------------------------------ Website - https://www.binaryblogger.com Podcast RSS - http://securityinfive.libsyn.com/rss Twitter @binaryblogger - https://www.twitter.com/binaryblogger iTunes - https://itunes.apple.com/us/podcast/security-in-five-podcast/id1247135894?mt=2 YouTube - https://www.youtube.com/binaryblogger TuneIn Radio -
In today's podcast, we get an update on the US Vulnerabilities Equities Process, which now promises more transparency, accountability, and stakeholder representation in handling zero-days. A look at China's equivalent…doesn't. Worries about North Korean hacking. Mole hunting at Fort Meade. BlueBorne bugs in home assistants. More malware in Google Play. David DuFour from Webroot on the importance of communication with the board of directors. Roy Katmor from Ensilo on attacks using social engineering. And how to get around that pesky voice recognition software.
The guys are one short this week as they take on BlueBorne, KRaCK and a 4G/5G network flaw. Show Notes: https://www.2droppedtables.ca/episode-010/
Spelades in söndagen den 5 november rätt sent på kvällen. Avsnitt 141, och eftersom att 141 är den nionde Blum Integern så talar vi under detta avsnitt om; komplettering kring BlueBorne och vilka OS-versioner som är säkra, hur fel det är med patentsystem, ”Hamburgergate”, Trumps Twitter, wearable tech mot fibromyalgi, Estlands ID kort stoppas, ”Tesla Truck”, Microsoft tjänar pengar, HoloLens, uppdateringar till Microsoft Insiders och uppdateringar till Skype, en bug i Outlook, en bugg i Microsoft Edge, Microsoft kör Linux, Iphone 10 och läppen längst upp, uppdatering kring kalkylatorn i IOS, IOS 11.1 har nya emojis, WatchOS är uppdaterad, hur vi blir lyssnade på av våra appar, Google Assistant, borde Johan köpa en Google Pixel och buggar i Googlesbugghanterare. Sedan så tar vi självklart och avslutar med lite pryllista Fördjupningslänkar BlueBorneArmis.com Armis whitepaper Armis BlueBone vulnerability Scanner Korkat patentsystem Hamburger-gateHär hittar man hur den ser ut Podcast avsnitt från 99% invicible som handlar om emojin ”person i lotus position” Appel serverar enligt hamburgare som ser ut som emojin FibromyalgiHur funkar bandet man skall ha på sig Vad är Fibromyalgi ID kort i Estland stoppas att användas till Mars 2018 Tesla truckenHär kan man hitta bilden Logistikpodden om man vill höra en pod om logistik (riktigt bra, tips: börja med avsnitt 32) Rapport på vilka jobb försvinner (PDF) Microsoft nyheterMicrosoft tjänar massa pengar HoloLens kommer till Sverige Microsoft ändrar hur man hanterar feedback i Insiders-programmet Uppdateringar till Skypeklienten på Mac Hur ser det ut om man blir hackad i Outlook (Office DDE) Microsoft anställd installerar Chrome mitt under presentationen 40% av alla VMs i Microsoft Azure kör Linux AppleHur skulle det se ut om man har läppen på alla Apple-produkter Iphone X klagomål om batteritid Kalkylatorbuggen rättas i iOS 11.2 Nyheterna i IOS 11.1 Watch OS 4.1 är släppt Apple kan sortera ut vilka bilder som innehåller bröst (NSF) Katmatsvideon som vi pratade om på Iphone GoogleGoogle Assistant har stöd för Apple Music Google Assistant kommer till fler länder... Kan vi hoppas på Sverige? Pixel XL finns i Sverige Jämförelse mellan Pixel XL och Pixel 2 XL Bugg i Googles bugghanterare läckte info om säkerhetsbuggar (del1) Bugg i Googles bugghanterare läckte info om säkerhetsbuggar (del2) Pryllistan Johan: Magic Mirror med Vklass Mats: Microsoft IntelliMouse (den nya) Wow Classic Björn:playstation PSN abb . Bra eller anus? Nintento Classic Mini SNES David:SOLOSOCKS 2.0 fler Philips Hue-lampor! Moar!!11oneone Saker vi tänkte prata om men som inte kom med Microsoft 365 Business har fått nya applikationer som passar småföretag 12 google-satsningar som gått i graven I USA har man haft ”Outlook.com premium”. Nu läggs det ned och istället kommer delar i Office 365… Tankar??Länk1 Länk2 Deltagare i avsnittet: Mats: @Mahu78 Johan: @JoPe72 David: @dlilja Björn: @DiverseTips Egna länkar En Liten Pod Om IT på webben En Liten Pod Om IT på Facebook Länkar till podden: Apple Podcaster (iTunes) Overcast Stitcher Acast
Vi fyller jämt. 140 är också jämt! Idag pratar vi om BadRabit, hur Google Alexa kommer ta över världen, vi gör ett återtag av tidigare "fake news", pratar om hur det går för Windows 10 Fall creators update, likheter mellan Microsoft Azure och Amazon AWS, Apples miniräknare, IKEA Trådfri+homekit=sant och en genomgång av BlueBorne. Fördjupningslänkar: Bad Rabbit: https://securelist.com/bad-rabbit-ransomware/82851/ https://www.bleepingcomputer.com/ Alexa som fisk: https://www.youtube.com/watch?v=vn4YlAlHn-Y Security Now om iOS Security: https://www.grc.com/sn/sn-446.htm Azure vs AWS: Download a PDF of the Cloud Service Map for AWS and Azure Microsoft future productivity vision: https://www.youtube.com/watch?v=w-tFdreZB94 Pryllistan: https://www.coolstuff.se/House-Clock https://www.kjell.com/se/sortiment/ljud-bild/tv-spel-gaming/nintendo-wii/kablar-adapter/hdmi-adapter-till-nintendo-wii-p61292 https://www.pcgamesn.com/destiny-2/destiny-2-leveling-guide-gearing-guide-power-cap-raid-ready / En Liten Podd om IT
Участники подкаста: Артем Гавриченков, Константин Игнатов, Андрей Лескин и Александр Козлов. Темы шестого «Прокуратора»: 1 м. - BlueBorne: все плохо, bluetooth уязвимость для всего - https://www.armis.com/blueborne/ 11 м. - Adobe и private PGP в блоге - https://arstechnica.com/information-technology/2017/09/in-spectacular-fail-adobe-security-team-posts-private-pgp-key-on-blog/ 12 м. - Equifax и все, что с ним связано - https://www.nytimes.com/2017/09/07/business/equifax-cyberattack.html 20 м. - FCC и публичная загрузка документов - https://medium.com/contratastic/the-fcc-gov-website-lets-you-upload-documents-and-host-them-there-bdcd5c1a5b8b 21 м. - AT&T и роутеры с зашитыми учетными записями - https://www.nomotion.net/blog/sharknatto/ 25 м. - Обновление с малварью в Ccleaner - https://www.theverge.com/2017/9/18/16325202/ccleaner-hack-malware-security 27 м. - Python Package Index: кто-то залил как минимум несколько пакетов с именами-опечатками - http://www.nbu.gov.sk/skcsirt-sa-20170909-pypi/ 31 м. - В Австралии полиция решила научиться определять какие из проезжающих мимо полицейских автомобилей краденные. Парень сделал дешевле. Использовал он для этого библиотеку Automatic License Plate Recognition. Ребята, которые ее написали, сами деньги зарабатывать пытаются - https://medium.freecodecamp.org/how-i-replicated-an-86-million-project-in-57-lines-of-code-277031330ee9, https://github.com/openalpr/openalpr 36 м. - Пиратская бухта стала встраивать майнинг крипты в свой JS. (да и не только они в последнее время, вот CBS Showtime например, и главное - им-то накой, а также вредные советы про Cloudflare) - https://www.theregister.co.uk/2017/09/25/showtime_hit_with_coinmining_script/ 40 м. - блок научных новостей: “Карманный ЭЭГ” и “будущее нейрогейминга” может быть использовано в совокупности с определённым мальварём для угадывания паролей пользователей. Скайхаб забанил и разбанил Россию. Феномен “Гейдара” довольно хорошо и много исследуют, но вот тем временем вдруг оказалось, что глубинные нейронные сети способны определить ориентацию человека по лицу лучше, чем это делают люди (https://osf.io/zn79k/). Наконец-то человечество переходит на использование единиц измерения, не связанных с человеком или человечеством. (https://www.wired.com/story/the-quest-to-perfect-the-universal-language-of-science/). Нобелевская и Игнобелевская премии 2017 69 м. - Apple же говорит теперь, что их FaceID не настолько идеален, как могло показаться сначала (https://www.theguardian.com/technology/2017/sep/27/apple-face-id-iphone-x-under-13-twin-facial-recognition-system-more-secure-touch-id). В Китае поймали 25 преступников на фестивале пива их опознали при помощи софта по распознаванию лиц (http://www.dailymail.co.uk/sciencetech/article-4851564/Facial-recognition-detects-criminals-beer-festival.html). Хрен теперь где затеряешься в толпе. В Москве хотят также https://rb.ru/news/person-of-interest/. 80 м. - РКН и Google Global Cache 82 м. - Министерство Внутренней Безопасности США решило забанить все продукты Касперского как шпионские. https://www.dhs.gov/news/2017/09/13/dhs-statement-issuance-binding-operational-directive-17-01 86 м. - блок open source новостей: “Запрет” Fedora” в Крыму. SSO для граждан США на правительственных ресурсах login.gov. Код выложен для рассмотрения и изучения всеми желающими. Впрочем, у них это закон. IBM открыла код своей Java (https://github.com/eclipse/openj9). Apple открыла код ядра ОС практически всех своих устройств (https://github.com/apple/darwin-xnu). XNU is not UNIX вообще ни разу ничего не напоминает. Прекращает развитие проект theano (https://groups.google.com/forum/#!topic/theano-users/7Poq8BZutbY). Firefox Quantum! 96 м. - Amazon UK предлагал пользователям купить составные части взрывчатки потому что их “часто покупают вместе с…” - https://www.nytimes.com/2017/09/20/technology/uk-amazon-bomb.html
Don't worry about PGP private key exposure, Signal taps up Intel's SGX for increased security, a two-year-old Linux Kernel issue resurfaces, Bill Gates's biggest mistake, Oracle patches away, and is society becoming desensitized to the loss of personal data? Full Show Notes: https://wiki.securityweekly.com/Episode531 Subscribe to YouTube Channel: https://www.youtube.com/channel/UCg--XBjJ50a9tUhTKXVPiqg Security Weekly Website: http://securityweekly.com Follow us on Twitter: @securityweekly
Don't worry about PGP private key exposure, Signal taps up Intel's SGX for increased security, a two-year-old Linux Kernel issue resurfaces, Bill Gates's biggest mistake, Oracle patches away, and is society becoming desensitized to the loss of personal data? Full Show Notes: https://wiki.securityweekly.com/Episode531 Subscribe to YouTube Channel: https://www.youtube.com/channel/UCg--XBjJ50a9tUhTKXVPiqg Security Weekly Website: http://securityweekly.com Follow us on Twitter: @securityweekly
Josh and Kurt talk about the Equifax breach (again) and what it will mean for all of us. Blueborne comes up, as well as #TrevorForget.
Toys Aren’t Us; kids these days; online abuse algorithm fails; e-commerce corrections; Uber falls in London; iOS 11; Canon Keepers; Iron Danny; Googling Avril; BlueBorne; Cleaner malware; Facebook big data; 90’s websites; book recommendations; raw water. Show notes at http://gog.show/228
Episode #265 - CCleaner Malware, Cryptocurrency Mining, Clickless Bluetooth Attack. Originally recorded September 19, 2017.
Szent Johanna Gimi, Jabra Move, BlueBorne, Apple árképzés, kábelképzés és nemműködőújtermék-képzés, a Gates-lányok, hurrikánszezon és az illatgyertya, rakétafail-ek, ugróbot, kényszergamer katonák, régi kütyük új élete, nyuggersereg, a kínai Rubik kocka és a ollósfúrós habverő.
In this episode we dive into the CCleaner hack, the Blueborne exploit, protecting public wifi networks for your customers and… pirates. Check out our social media here: Twitter: https://twitter.com/BrussecSecurity Facebook: https://www.facebook.com/Brussec/ Website: https://www.brussec.com/ Email: info@brussec.com
Whitehouse lawn mowing boy rocks, "Health Attacks" on diplomats in Cuba, the Apple Event, Dennys' new mascot, Apple Pie Oreos reviewed, JJ Abrams takes over Star Wars IX, & BlueBorne hits phones. Links from this episode: - NY Times reporter slammed after saying boy mowing White House lawn sends bad signal on child labor - Ex-NYT reporter mocked for critical tweet on 11-year-old moving WH lawn - Crime of fashion prompts campus evacuation - Porsche's Patrick Long Wins Pirelli World Challenge Championship - Porsche considering return to F1 as engine supplier from 2021 - F1 drivers divided over halo, mandatory for cars next season - Toro Rosso confirms switch to Honda engines from 2018 - FIA Formula 2 - The New Porsche 911 GT3 Touring Package Is The Ultimate Sleeper 911 - ‘Health Attacks’ on U.S. Diplomats in Cuba Baffle Both Countries - The Bugged Embassy Case: What Went Wrong - Ukraine's President Says It Again: Country Will Absolutely Join NATO, Fight Russia - Ukraine to start NATO talks: Russia angry, the West uncertain - Trump at UN: 'Rocket Man' Kim Jong Un 'is on a suicide mission' - Boys are better at physics because they learn about 'projection' while going to the toilet, researchers say - Apple Event: All You Need To Know About iPhone X, iPhone 8, Apple TV 4K, And Watch Series 3 - Remember Palm’s WebOS? Maybe not, but Apple and Google definitely do - Apple's adoption of Qi signals the end of the wireless charging wars - Denny's new mascot mocked on social media - Oreo Cookies Apple Pie Graham Flavored Cookie Rare Oreos 10.7 Oz (1)* - J.J. Abrams to Write and Direct Star Wars: Episode IX - The Tick (2017) : Season 1 - The Orville - Tesla Upped Range (for a Week) for Hurricane Irma Exodus - Wireless ‘BlueBorne’ Attacks Target Billions of Bluetooth Devices - Why you should turn off your Bluetooth NOW: New 'BlueBorne' vulnerability can use the connection to hack a phone in just 10 seconds
That Equifax hack? So last week! This weeks vulnerability is BlueBorne, a new attack on just about every bluetooth capable device. We've got the details, and what you need to know to get patched. Plus some of our favorite overlooked shell commands & a breakdown of the ACLUs recent lawsuit to protect your rights at the border.
That Equifax hack? So last week! This weeks vulnerability is BlueBorne, a new attack on just about every bluetooth capable device. We've got the details, and what you need to know to get patched. Plus some of our favorite overlooked shell commands & a breakdown of the ACLUs recent lawsuit to protect your rights at the border.
That Equifax hack? So last week! This weeks vulnerability is BlueBorne, a new attack on just about every bluetooth capable device. We've got the details, and what you need to know to get patched. Plus some of our favorite overlooked shell commands & a breakdown of the ACLUs recent lawsuit to protect your rights at the border.
Recorded 17th September 2017 This week Cassini made its final manoeuvre and crashed into Saturn ending its 13 year scientific mission, some muppets set off a bomb in the Parson's Green Tube Station injuring 29 people (some of them children) but thankfully there were no fatalities and Apple held a small gathering at their new Steve Jobs Theatre to announce some new shiny toys. Mark is off in Budapest enjoying a relaxing break from it all. So in his absence I am joined by Sherman Gossett (Commander Shroom) from Utah, Ruth (@CutieMelon321) and, at incredibly short notice, Guy Searle (@MacParrot) from the My Mac Show. We, of course, give our reactions to the Apple Event, and some other stuff – because, well, what else would we be doing on a podcast? I am especially pleased to welcome Sherman to this episode because he is most definitely NOT an Apple fanboy – but he has a wealth of experience in the world of IT and we look forward to getting an “outsider's” view on the Apple announcements. And I am really sorry that in all the confusion, with Wire dropping people out all over the place, that I forgot to thank our Patreon subscribers... so “THANK YOU Patreon people, you really are lovely people!”** On this week's show: APPLE Apple TV 4K Apple Watch – to LTE or not? The iPhones 8 and X Face ID and that “fail”, Hairforce One himself talks about it to John Gruber – The Talk Show Qi charging and Apple adopting an existing standard 7 iOS settings to change right away – CNET TECHNOLOGY Bluetooth problem could let hackers take control of Apple, Samsung and Google devices – The Telegraph AND BlueBorne Highlights the Risk of Airborne Security Attacks – DZone Security This explains some more about BlueBorne - and I now realise there is more to it than just the obvious Andriod/iOS/Windows/Mac/Linux angle... Google.com was created 20 years ago — here's what it looked like when it first launched – My San Antonio Although Google didn't launch it's actual website/search engine until September 27, 1998 Electric Cars May Rule the World's Roads by 2040 – National Geographic Nemo's Hardware Store (47:17) Bezalel Latitude Qi Charging Case for iPhones 6, 6 Plus, 6S, 6S Plus, 7 and 7 Plus – from $49.90 USD on Amazon I could only find the 6/6S version on Amazon.co.uk (http://amazon.co.uk/) for £29.99 GBP Bezalel Omnia 12 Qi Car Charger – $59.90 USD on Amazon Doesn't seem to be available in the UK Amazon store. Worth a Chirp Grumpy Old Geeks – a look at “what went wrong on the internet this week and who is to blame” (and a lot more stuff too) The Cyberwire – a daily podcast on the threats out there in cyberspace – interesting if a little scary sometimes. Social Media and Slack You can follow us on: EssentialApple.com / Pinecast / Twitter / Facebook / Google Plus / Slack – ask us for an invite any way you can get hold of us. You can always help us out with a few pennies by using our Amazon Affiliate Link so we get a tiny kickback on anything you buy after using it. If you really like the show that much and would like to make a regular donation then please consider joining our Patreon And a HUGE thank you to the patrons who already do. This podcast is powered by Pinecast.
Equifax fallout, BlueBorne, Microsoft RCE, iPhone X, Dumping AWS, Cassini, tech news, human news, ideas, discovery, recommendations, aphorism, and more… Support the show: https://danielmiessler.com/support/ See omnystudio.com/listener for privacy information.
The BlueBorne vulnerability could affect 8 billion devices around the world leaving users open to, among other things, man-in-the-middle attacks.
Enregistré le 2017/09/13
This week I cover the Equifax hack, BlueBorne, Your Windows has been Banned, and more! CYS Report Weekly Threat Brief is in the Apple iTunes Store also so please subscribe. Search for CYSReport. http://feeds.feedburner.com/cysreport/podcast
In today's podcast, we hear that DHS tells the US Executive Branch to stop using Kaspersky security software. Kromtech finds ElastiSearch servers hosting point-of-sale malware. BlueBorne bugs buzz billions of boxes. Equifax says that its breach was accomplished via the Apache Struts flaw patched in April. Industry notes include both venture funding and acquisition news. We take a quick look back at the Billington CyberSecurity Summit. Johannes Ulrich with an update on the Mirai botnet. Renato Marinho, Chief Research Officer at Morphus Labs, on a bad Chrome browser extension that can steal banking credentials. And robo-lawyers come to small claims court. Thanks for listening to the CyberWire. One of the ways you can support what we do is by visiting our sponsors. We read Recorded Future’s free intel daily, you might find it valuable, too. If you’d like to protect your endpoints against advanced threats, check out Cylance. JHUISI & partner COMPASS Cyber present Cyber Security Conference for Executives on September 19th in Baltimore. Register for the event.
Equifax's shambolic response to its huge data breach, a scary-sounding Bluetooth exploit, and Apple's iPhone X comes with Face ID. All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Javvad Malik of AlienVault. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Special Guest: Javvad Malik.
In today's podcast, we hear about how Equifax has attracted more attention from plaintiffs, AGs, and Congress. Everyone else is on heightened alert for fraud and identity theft. MongoDB says users of its database process were not assigning passwords to administrative accounts. A Bluetooth-based attack vector, "BlueBorne," is described. Syringe pumps are found to be hackable. Bots serve more effective social media clickbait than human operators can. Robert M. Lee from Dragos on deterrence. Myke Cole, cyber security analyst and fantasy writer discussing the importance of empathy when considering your adversaries. And Roman Seleznev gets 27 years after he cops a plea to hacking. Thanks for listening to the CyberWire. One of the ways you can support what we do is by visiting our sponsors. We read Recorded Future’s free intel daily, you might find it valuable, too. If you’d like to protect your endpoints against advanced threats, check out Cylance. JHUISI & partner COMPASS Cyber present Cyber Security Conference for Executives on September 19th in Baltimore. Register for the event.