[img]http://ihydra.net/hfnt/headers/HackingNews.png[/img]
BrainWallet Hacked and Destroyed at Defcon 23
This past weekend, the 23rd annual Hacking and Security conference, Defxon, was held at the Paris and Bally's hotel in Las Vegas, Nevada. During one of the talks, Ryan Castellucci, better known by his handle, 1o57 (lost), who designs advanced cryptography challenges on the Defcon badges, released a tool to very quickly crack passwords to thousands of
BrainWallet accounts. The result of which can be evidently seen by clicking the link and being greeted with "closed permanently." Apparently, the owner of the site attended, or had a friend attend, the Defcon conference and was able to bring down his site before potentially malicious users wous have used 1o57's tool, which he released public ally, for evil. The tool, dubbed "Brain Flayer," was released to raise awareness of the availability and ease of methods used in cracking brainwallets' accounts, and is available at 1o57's Github,
Here. It also contains a disclaimer stating that, even though you are able to steal someone's money, you should be more dedicated to the love and interest of security than greed.
FireFox Local File Access Exploit
The popular web browser, Mozilla Firefox, has fallen victim to a new attack vector developed by a security researcher by the name of Cody Crews. The same origin policy built into FireFox is intended to prevent documents or scripts from being loaded from one origin, and then getting or setting properties of a document from a different origin. The attack vector is in the form of a JavaScript payload and allows an attacker to violate this same-origin policy and inject a script into an unprivileged part of the FireFox browser's built-in PDF viewer running in a local file context. The attack was tailored to be able to locate and upload various files throughout the system. In Windows, the payload typically searches for the configuration files of various FTP clients/servers, browsers, and other sensitive data. On Linux, the payload searches for /etc/passwd, ssh key configurations, and other highly pertinent data on the device. FireFox has since released a patch, and updating to the newest release of FireFox should be enough to thwart this attack.
RIG Exploit Kit ver 3.0
The RIG Exploit Kit v 2.0 source code was leaked back in February of 2015 by what was said to be a disgruntled reseller. An analysis of the kit revealed several security vulnerabilities in programs such as Adobe Flash Player, PDF readers, browsers, and other common applications used by home and business users alike. As it happens, the kit is back with v 3.0, and is stronger than ever. Despite the new security mitigations implemented by flash and others in the aforementioned applications, the kit managed to maintain the same exploit rate using polished, new, updated exploits. With an astounding average of 27,000 installations per day, the kit is one of the largest scale attacks in the modern day. Having attempted to exploit over 3.5 million machines, the kit has successfully infected roughly 1.25 million of them. Though it may seem to be an unimpressive percentage at just 28% infection rate, when applied to millions of devices ensures, it guarantees a large number of infections. Analysts have purchased and are now working on the RIG EK 3.0 to determine its exploit vectors and alert the affected vendors.
[img]http://ihydra.net/hfnt/headers/SecurityNews.png[/img]
New Device Exploits Physical Access Control Systems
Thursday at Black Hat, a well-known security and hacking conference, a new device by the name of BLEKey was revealed. The device can be used to break physical access controls in proximity card reader and is effective on around 80% of devices. The new device is worrisome to many due to the potentially malicious abilities of the device. The device exploits the Wiegand protocol, a protocol from the era of Apollo 11. The protocol was not designed with encryption making it easy to steal data from cards so that one can clone cards and gain access. The device records all RFID signals received. However, some have pointed out that facilities with a 2FA keypad, or other 2FA by other means, prevent this kind of attack. The researchers released the source code and schematics on GitHub sometime on Friday.
>>Source
New Device Allows Unlocking of Most Cars and Garages
A new device tat was devised by Samy Kamkar allows one to intercept and record the codes that are used to unlock a garage door or unlock a car. The device, known as Rolljam, exploits the cars uses rolling codes. The device is about the size of a wallet and can easily be placed on the bottom of someone's car. The device can be built with about $30 and has announced he will be revealing more information about the device at DEF CON.
>>Source
Monthly Security Updates for Nexus Phones
Tech giant Google has announced that it will now provide monthly over-thee-air updates to users. This an atypical situation for most Android users, who are normally at the mercy of carriers for security patches and software updates. The change is believed to have been somewhat instigated by a serious vulnerability that was recently discovered in Stagefright, a part of Android's native media player. The updates will be available for users of the Nexus 4, Nexus 5, Nexus 6, Nexus 7, Nexus 9, Nexus 10, and Nexus Player. This change in security updates will greatly benefit Nexus users and will hopefully prevent them from susceptibility to newer vulnerabilities targeting Android devices.
>>Source
[img]http://ihydra.net/hfnt/headers/GamingNews.png[/img]
Crackdown 3 Destruction Restricted to Multiplayer
Looks like you wont be able to cause mass destruction in Crackdown 3's single-player campaign. Microsoft made everyone clear on that earlier this afternoon when Dave Jones dove into more detail on the matter. "Yes, [destruction is] exclusive to the multiplayer mode," Jones said when asked in an IGN interview. "You have to be online for multiplayer, and at that point we can connect to the cloud and really expand the experience."
>>Source
Fallout 4 Lets You Keep Playing After Its Story Ends
Fallout 4 is a gift that just keeps on giving. Upon completing the main story mode, the story doesn't end there. Bethesda confirmed this earlier today, "To our fans who've asked: Fallout 4 doesn't end when the main story is over and there is no level cap," reads a tweet from Bethesda. "You can keep playing and leveling." The main story should keep you busy for quite some time as it's rumored to have over 400 hours worth of things to do.
>>Source
The Witcher 3 Patch 1.08 Now Available
CD Project broke the news last week of the patch and also released the contents of what was inside patch 1.08. Performance issues have been addressed in the 1.07 update and continued to be updated with the 1.08 patch. Additionally, this new patch brings with it the Wolven Hour potion, an item that reduces your gear's level requirement for an entire hour. The Witcher 3 is getting a New Game Plus mode soon, which the update also lays the groundwork for as well.
>>Source
[img]http://ihydra.net/hfnt/headers/TechNews.png[/img]
Whistleblower Leaks Documents to 4chan, Called “Fake and Gay”
An Austrailian whistle-blower made headlines this week for daringly leaking an extremely sensitive report from an Australian spy agency. The twist? He released it to 4chan. Users of the imageboard tried the legitimacy of the documents, claiming they were “fake and gay”. The leaker, Michael Scerba, was found by Australian authorities in his home, with a broken CD in a bin, which allegedly contained the disclosed files. Scerba claims he will plead guilty to the charges faced. The Australian Department of Defence claims the documents were a threat to national security.
>>Source
Toshiba and Sandisk Annouce World’s Most Dense 3D NAND Flash Chips
Hardware and tech producers Toshiba and Sandisk have revealed 3D NAND flash chips that are twice the storage of the current highest memory size. The chips will be 256 Gigabit and 48 layers. The chips will mean solid state drives, smartphones, memory cards, and tablets will have a larger amount of storage capability than the previous model. These flash chips can be used with SSDs with sizes from 128 GB and higher.
>>Source
[img]http://ihydra.net/hfnt/headers/WorldNews.png[/img]
Debris From MH370 Flight Found
It has been over a year since Malaysian flight MH370 suddenly went missing, supposably crashing into the Indian Ocean but no evidence of this was found even after a massive search operation was conducted. The flight was long thought to be lost until last week when a small piece of debris was found in Maldives. This comes days after another piece washed up on the Indian Ocean island of Reunion. With this new information on where the debris is washing up it allows experts to slowly paint a picture on an area where the crash may have happened but this is still some time away. Australia has been leading the search for the plane in the area it is believed to have gone down, some 4,000km (2,500 miles) east of Reunion. MH370 was carrying 239 people when it veered off its course from Kuala Lumpur to Beijing in March 2014.
>>Source
Turkey Attacks
Deadly attacks have been carried out in Turkey between Kurdish militants and Turkish security forces as six members of the former were killed. The attacks happened in Istanbul and and in the south-eastern Sirnak province where 4 police officers were killed by a roadside bomb and a soldier died when gunmen fired on a military helicopter. Further on in Istanbul, a police officer was killed by a car bomb explosion. There was also an attack a gun attack on the city's US consulate which has been linked to a leftist group. In another attack in Istanbul, a police station in the district of Sultanbeyli, a car bomb was detonated, injuring 10 people, including three police officers. Kurdistan Workers' Party (PKK) leader Cemil Bayik has accused Turkey of trying to protect Islamic State (IS) by attacking Kurdish fighters although many consider the PKK a similar terrorist group to Islamic State.
>>Source
Death In Ferguson
Another black male has been shot and is in critical and an unstable condition after being shot during the Ferguson protests for Michael Brown. It has been a year since the shooting of Michael Brown and Ferguson was in peaceful protests over what had happened, however the protests soon turned violent. Although unofficially identified the St Louis Post-Dispatch identified him as 18-year-old Tyrone Harris, who had been carrying a 'stolen gun' during the protests. A group of police had been surveying him for some time when a gunfight broke out during the protests between the two parties. Police shot and wounded the man before then arresting him and seeking medical attention for him. Four police officers have been given administrative leave due to the incident and could possibly mark another black death caused by police in such a short period of time.
>>Source
![[Image: support1.png]](https://hackforums.news/assets/v5/support1.png)
![[Image: pugQCoc.gif]](https://i.imgur.com/pugQCoc.gif)
![[Image: POVfq7u.png]](https://i.imgur.com/POVfq7u.png)
![[Image: bTTz7WE.png]](https://i.imgur.com/bTTz7WE.png)
![[Image: pdoOihY.png]](https://i.imgur.com/pdoOihY.png)
![[Image: axiom.png]](https://hackforums.net/images/modern_bl/groupimages/english/axiom.png)
![[Image: QuPUEpy.png]](https://i.imgur.com/QuPUEpy.png)
![[Image: uIN30Tu.png]](https://i.imgur.com/uIN30Tu.png)
![[Image: skrG1Ro.png]](https://i.imgur.com/skrG1Ro.png)
![[Image: mw8uDDr.png]](https://i.imgur.com/mw8uDDr.png)
![[Image: fR8plpr.png]](https://i.imgur.com/fR8plpr.png)
![[Image: H640yOu.png]](https://i.imgur.com/H640yOu.png)
![[Image: VE4Mrs9.png]](https://i.imgur.com/VE4Mrs9.png)
![[Image: giphy.gif?cid=790b7611b007c1bdd2cd47171b...y.gif&ct=g]](https://media2.giphy.com/media/q7tD3eB8gRXumzbfvS/giphy.gif?cid=790b7611b007c1bdd2cd47171b9e37dc1125057dcbd235e0&rid=giphy.gif&ct=g)
![[Image: lYc5kac.png]](https://i.imgur.com/lYc5kac.png)
![[Image: FJeJYXM.gif]](https://i.imgur.com/FJeJYXM.gif)
![[Image: DRr9YOP.gif]](https://i.imgur.com/DRr9YOP.gif)