Uncategorized – Linux Security Blog

Amazon introduces new open-source TLS implementation

27 Aug 20151 Sep 2015

Stephen Schmidt, Amazon's VP of security engineering, said that Amazon, the number one online retailer in the Americas, uses strong encryption not just on its eponymous sales site, but on…

The Onion Router is being cut up and making security pros cry

27 Aug 20151 Sep 2015

IBM is warning corporates to start blocking TOR services from their networks, citing rising use of the encrypted network to deliver payloads like ransomware. The advice comes in the company's…

Busting the Biggest Myth of CISA—That the Program Is Voluntary

21 Aug 20151 Sep 2015

WHEN THE U.S. Senate returns in September, one of its priorities will be to pass so-called “cybersecurity” legislation, namely theCybersecurity Information Sharing Act. The deficiencies in the bill, including its…

Linus Torvalds Talks Linux Security at LinuxCon

20 Aug 20151 Sep 2015

The founder of Linux explains why he's not thinking about the next 10 years of Linux and why security is all about finding bugs. SEATTLE—At the annual LinuxCon event here,…

Ashley Madison hackers follow through on threat, dump user data online

19 Aug 20153 Sep 2015

When one or more as-yet-unknown hackers breached marital infidelity site Ashley Madison last month they threatened to out all the "cheating dirtbags" they could find - unless parent company Avid Life Media…

BitTorrent exploits allow lone hackers to launch large DDoS attacks

19 Aug 20152 Sep 2015

A flaw in BitTorrent clients can be exploited to allow single attackers to harness extra juice in launching DDoS attacks on a vast scale. At the USENIX conference in Washington,…

Linux Core Infrastructure Initiative launches security badge scheme

19 Aug 20151 Sep 2015

The Linux Foundation's Core Infrastructure Initiative (CII) has launched a new security-focused badge program to improve the quality and stability of open-source software security. Open-source software provides the backbone for…

View From The Top: Government’s Role In Cybersecurity

On the two major political aspects that concern him related to attribution for cybercrime, Richard Bejtlich, chief security strategist for FireEye, said: In the incidents at both Sony and the…

8 Linux Security Improvements In 8 Years – InformationWeek

At a time when faith in open source code has been rocked by an outbreak of attacks based on the Shellshock and Heartbleed vulnerabilities, it's time to revisit what we…

Bypassing Antivirus with Shellter 4.0 on Kali Linux – Darkmatters

Having trouble getting a Meterpreter shell past that pesky AV? Check out the new Shellter 4.0 shell obfuscation program! The latest version of Shellter for pentesters was revealed at B-Sides…

Top 10 security tools in Kali Linux 1.0.6 | Network World

When it comes to forensics, penetration and security testing Kali Linux – which is designed for security professionals and packed with more than 300 security testing tools -- is arguably…

This Hacker’s Tiny Device Unlocks Cars And Opens Garages | WIRED

THE NEXT TIME you press your wireless key fob to unlock your car, if you find that it doesn’t beep until the second try, the issue may not be a…

Black Hat 2015: Salted Hash live blog (Day 1) | CSO Online

LAS VEGAS – Black Hat 2015 is underway, and the corporate side of hacking has taken center stage. There are plenty of hot topics this year, but the mess at…

Black Hat 2015: Attackers use commercial Terracotta VPN to launch attacks | Network World

RSA researchers have discovered a China-based VPN network dubbed Terracotta that is used extensively to launch advanced persistent threat (APT) attacks and that hijacks servers of unsuspecting organizations in order…

Operation Lotus Blossom APT – Elise Malware

Operation Lotus Blossom is one of the more recent APT attacks that has been discovered and analyzed. It is an advanced adversary campaign against the mostly government and state-sponsored entities…

Major flaw could let lone-wolf hacker bring down huge swaths of Internet | Ars Technica

A recently disclosed vulnerability in Bind, the most widely used software for translating human-friendly domain names into IP addresses used by servers, makes it possible for lone-wolf attackers to bring…

Hackers Could Heist Semis by Exploiting This Satellite Flaw | WIRED

REMEMBER THE OPENING scene of the first Fast and Furious film when bandits hijacked a truck to steal its cargo? Or consider the recent real-life theft of $4 million in…

New vulnerability can put Android phones into permanent vegetative state | Ars Technica

Researchers have developed an attack that puts more than 50 percent of Android phones into the digital equivalent of a persistent vegetative state in which they're almost completely unresponsive and are…

New Android Malware Sprouting Like Weeds | Mobile | LinuxInsider

Perhaps the one most effective strategy to minimize the risk of Android malware infection is to avoid discount app stores. "Do not download apps from unknown app stores, except if…

Google has fixed Stagefright problem that left Android users open to attack- The Inquirer

Google has fixed Stagefright problem that left Android users open to attack- The Inquirer.

Hacker Attack Reported on Ashley Madison, a Dating Service

20 Jul 20153 Sep 2015

The company behind Ashley Madison, a popular online dating service marketed to people trying to cheat on their spouses, said on Monday that the site had been breached by hackers…

RC4 NOMORE crypto exploit used to decrypt user cookies in mere hours

20 Jul 20153 Sep 2015

A fresh warning concerning the use of RC4 to support secure communication channels online has been issued after researchers were able to exploit the protocol to decrypt user data in…

DeepIn OS | Linux Security Blogs/Tutorials

14 May 20153 Sep 2015

Deepin (formerly Linux Deepin, Hiweed GNU/Linux) is an Ubuntu-based distribution that aims to provide an elegant, user-friendly and reliable operating system. It does not only include the best the open…