FACEBOOK POLL FEATURE CAN ALLOW ANYONE TO DELETE PHOTOS

Using the new Facebook Poll Feature, anyone can integrate another user’s photos to that poll post and delete the poll along with the integrated URL of the photos. Recently, Facebook have added a new feature called Polls which, instead of having plain content, enables users to post votable inquiries.  Users likewise have the capacity to Read more…

 

SCARAB RANSOMWARE WAS DISTRIBUTED USING NECURS BOTNET

The Scarab ransomware, which was first discovered last June 2017, was recently distributed to around 12.5 million emails using a botnet called Necurs. Necurs botnet is a prevalent malware distributor.  It militarizes up to 6 million zombie endpoints, delivers some of the worst banking Trojans and ransomware threats in batches of millions of emails at Read more…

 

OWASP TOP TEN VULNERABILITIES AS OF 2017

The Open Web Application Security Project (OWASP) has distributed another revision of its Top 10 vulnerabilities for 2017, as an update to their ranking last 2013. The OWASP Top 10 is a public security-awareness document that has been widely adopted as a guideline for classifying the severity of web-based security bugs, and is currently used Read more…

 

EXPOSED AMAZON S3 SERVERS RESULTED IN INTELLIGENCE LEAKS FROM PENTAGON

Due to a misconfiguration, huge amounts of information stored in Amazon S3 Servers were exposed to the public, including intelligence from Pentagon. Amazon S3, or Simple Storage Service, is storage for the Internet, similar to Google Drive.  It is designed to make web-scale computing easier for developers. Amazon S3 has web services interface that can Read more…

 

KASPERSKY FINALLY DISPUTED THE ALLEGATIONS AGAINST THEIR ANTIVIRUS

Kaspersky Lab is a Russian-based cyber-security provider.  Kaspersky Lab is the developer behind the popular Kaspersky anti-virus software. Last October 2017, Kaspersky was blamed by several security companies worldwide, especially US-based security agencies, for providing access on their anti-virus software to Russian intelligence.  It was reported that last 2015, a set of NSA hacking tools Read more…

 

A NORTH KOREAN MALWARE DUBBED FALLCHILL EMERGED IN CYBERSPACE

Details of a hacking tool known as FallChill was disclosed to the public by the Department of Homeland Security which originated from the North Korean hacking group known as Hidden Cobra. Activities from malicious cyber-actors identified as Hidden Cobra began in 2009.  These activities include exploits by threat actors on victims in the public and Read more…

 

MESSAGING APP TELEGRAM IS NOW OFFICIALLY BEING USED BY ISIS

Telegram is now the ISIS’s top means of circulating information to their members and supporters.  It has become a part of the terror group’s communication strategy, following the trend of online messaging encryption. Telegram is a non-profit cloud-based messenger. Telegram applications exist for Android, iOS, BlackBerry 10, Windows Phone, Windows NT, macOS and Linux. Users Read more…

 

A NORTH KOREAN MALWARE DUBBED FALLCHILL EMERGED IN CYBERSPACE

Details of a hacking tool known as FallChill was disclosed to the public by the Department of Homeland Security which originated from the North Korean hacking group known as Hidden Cobra. Activities from malicious cyber-actors identified as Hidden Cobra began in 2009.  These activities include exploits by threat actors on victims in the public and Read more…

 

WITH ANDROHACKBAR, ANDROID USERS NOW PERFORM SQL INJECTION ON THEIR DEVICES

Using ANDROHACKBAR, a mobile application, Android devices can now be used to perform SQL injections, test XXS holes and determine site security. ANDROHACKBAR is an Android application which performs similar to the Mozilla Firefox’ plug-in Hackbar. However, instead of the Hackbar, the ANDROHACKBAR is not a test tool. It can actually execute standard exploits against Read more…

 

MANTISTEK GK2 104 KEYBOARD HAS KEYLOGGING CAPABILITIES

The Mantistek GK2 104 Keyboard is discovered to have keylogging capabilities which secretly transmits users’ key logs using a Cloud Driver to an Alibaba Server based in China. The MantisTek GK2 is a modest mechanical keyboard console from China that costs half as much as the mechanical models from popular manufacturers.  Due to cheap costs, Read more…