[img]http://ihydra.net/hfnt/headers/HackingNews.png[/img]
Mozilla Firefox Bug Bounty - $10k!
As any determined hacker is aware, many sites and services give away cash rewards if you highlight any security vulnerabilities within their products. Just five years ago, the cash prize awarded to those who could create a masterfully crafted remote code execution exploit based on a standalone Mozilla bug were given $3,000 as a reward. This prize has now more than tripled to $10,000, as Mozilla has continually shown interest in securing their products. The recent browser exploitation conference highlighted several medium and critical vulnerabilities in Firefox and Mozilla responded with an even stronger enticement for finding bugs. They have also set up a
Security Bug Hall of Fame which shows every security researcher, listed by quarter, that has aided Mozilla in their continuous trek towards security.
US Army Website Hacked
Late last week, the Syrian Electric Army (SEA), a group of computer hackers which first surfaced online in 2011 to support the government of Syrian President Bashar al-Assad, successfully compromised the control panel of the United States Army website,
http://army.mil. The radical hacktivist group is widely known for their attacks via phishing, malware, denial of service, spamming, and hijacking Twitter accounts that belong to major western media outlets, but have rarely found success in compromising a major government website. The SEA's twitter account,
@Official_SEA16, released several screenshots including popups proclaiming anti-American/anti-Military quotes as well as picture proof that they entered the Limelight Control Panel belonging to the US Army Office of Public Affairs. Although they did deface the website, no evidence was later found that customer data had been stolen.
US Federal Employees Data Stolen
Any server or domain administrator knows the importance of encryption and strong authentication. Using Bitlocker to encrypt drives and providing limited access only to those who need it is very basic security practice. However, in a recent attack by a group of yet to be identified hackers, the Central Personnel Data File, an expansive database which holds information on millions of government employees (except those in the military or intelligence fields), was targeted. The scary part of this attack is that the data is not encrypted, and the hackers likely have the database, or at least parts of it, completely unencrypted. This database contains detailed information about the employees, including their addresses, phone numbers, and credit card information. For this reason, the Office of Personnel Management (OPM) has offered 18 months of credit monitoring to those employees affected. This seems a small price to pay for such inadequate storage practices.
[img]http://ihydra.net/hfnt/headers/SecurityNews.png[/img]
Snapchat Offers 2FA
Snapchat is often held in high regard when it comes to security. However, with its latest release of the photo and video sharing app, Snapchat has provided its users with optional two-factor authentication, which could prove to be a step forward in improving their security practices. Named "Login Verification" in the new release, the 2FA code is a one-time SMS code sent to the user's mobile device. Given that it's optional, it is unclear if users will embrace the new 2FA offered by Snapchat. The addition comes soon after Apple announced six-digit passcodes and 2FA for iOS 9. Unlike Snapchat, the usage of 2FA on Apple devices is mandatory. Apple has been implementing 2FA across a variety of its services, some of which include iTunes and iCloud. The iCloud implementation came after several risqué celebrity photo leaks. Apple's addition of 2FA does not require a hardware token or biometric, but makes stealing accounts more difficult. Snapchat users who enable the feature will deter hackers coming after their account. Users running the newest version can find the 2FA option in the settings.
>>Source
OpenSSL Patches Five Flaws, Implements Protection Against Logjam
In their most recent release, the OpenSSl project has patched a series of moderate and low severity vulnerabilities and has also added protection against the Logjam attack. A majority of the patched bugs were denial-of-service bugs, but one of the patched issues could have potentially caused memory corruption. However, the vulnerability only affected older versions of the OpenSSL software. In addition to the patchers, the newer versions of OpenSSL include protection against the Logjam attack, which was disclosed in May. The attack involves exploiting the way Diffie-Hellman key exchanges are handled by the server. "Millions of HTTPS, SSH, and VPN servers all use the same prime numbers for Diffie-Hellman key exchange. Practitioners believed this was safe as long as new key exchange messages were generated for every connection. However, the first step in the number field sieve—the most efficient algorithm for breaking a Diffie-Hellman connection—is dependent only on this prime. After this first step, an attacker can quickly break individual connections,” said a group of academics from Johns Hopkins University, Microsoft, the University of Michigan and elsewhere who were explaining the vulnerability. the protection is included in versions 1.0.2b and 1.0.1n. The new release also patches an exploit that could allow attacks to create malformed certificates and CRLs.
>>Source
Cisco Patches IPv6 Vulnerability in Carrier-Grade Router System
On Thursday, Cisco said said it has patched a denial of service vulnerability in its IOS XR software used in carrier-grade routers. Cisco said the vulnerability originates from the IPv6 processing code used by IOS XR in the Cisco CRS-3 system. The bug can be exploited remotely and is caused by incorrect processing of legitimate IPv6 packets carrying valid extension headers. Cisco said while the headers are valid, they're unlikely to be seen in normal operation. “An attacker could exploit this vulnerability by sending such an IPv6 packet to an affected device that is configured to process IPv6 traffic,” Cisco said in its advisory. “An exploit could allow the attacker to cause a reload of the line card, resulting in a DoS condition.” Cisco said that a software update is available and noted there are no workarounds. Cisco said the exploit was discovered internally and no public exploits are known.
>>Source
[img]http://ihydra.net/hfnt/headers/GamingNews.png[/img]
YouTube Launching Gaming Website
On June 12th, YouTube announced a website and app dedicated to gaming. "YouTube Gaming is built to be all about your favorite games and gamers, with more videos than anywhere else," YouTube Gaming product manager Alan Joyce said in an announcement. "From 'Asteroids' to 'Zelda,' more than 25,000 games will each have their own page, a single place for all the best videos and live streams about that title. You'll also find channels from a wide array of game publishers and YouTube creators."
>>Source
New Xbox One 1TB Console Unveiled
Running out of storage on your Xbox One's internal HDD? A new model has been unveiled and it's got a whopping 1TB internal HDD. This has been an issue with consumers since the launch of the Xbox One, but it seems like Microsoft has finally listened and is providing customers with a larger HDD from the start. In addition to a new console being unveiled, Xbox has also announced that the original Xbox One with 500GB of storage will be marked down to $349 permanently. Xbox One 1TB consoles will start shipping to retailers June 16 in the United States and select markets later this month and will be available starting at $399 USD.
>>Source
Elder Scrolls Fan Spends $50,000 on Basement Remodel
Elder Scrolls released earlier this week for PS4 and Xbox One and instead of playing the game like millions of other people are, a fan of the game was busy spending $50,000 on getting his basement remodeled to resemble the medieval game. It's a 1,500 square foot tribute to his favorite video game.
>>Source
Per a report from Barcroft.tv, the basement contains the following:
- Secret door, activated by pulling on a book from a bookcase
- Medieval-style sparring area
- Crossbows
- Distressed stone walls
- Various helmets and horns
- A bathroom with its own waterfall and rock face covered in ivy
- $20,000 "home cinema"
[img]http://ihydra.net/hfnt/headers/TechNews.png[/img]
Samsung Galaxy S6 Announced
A variation of Samsung's flagship device, the Galaxy S6 Active has surfaced this week, boasting some interesting specs. The smartphone will have a battery nearly a third bigger with a giant 3,500 mAh, and a quad-HD display.
While some parts of the phone remain similar to the S6, some of its unique features are the fact that the S6 active can completely absorb water from four feet or less, and can also be held underwater. For those worried about power, no need to fret: the phone will feature a powerful Exynos 7420 64-bit octa-core processor.
>>Source
Samsung Reveals Transparent and Mirror Displays
Although only being used as ad panels at the moment, the Korean based company has shown off two new OLED screens; one being see-through, with the other being a mirror. Samsung claims that they plan on using the panels to make interactive ads targeted towards consumers. While the screens have plenty of potential uses, Samsung's ideas with the displays remain for advertising, as well as combining them with both voice and movement integration. As of June, the displays have only been announced for Hong Kong.
>>Source
Adult Web Giant PornHub Crowdfunding Space Pornography
Making a rather unique move, adult film site PornHub has released a crowdfunded campaign to create an adult film - in space. The Indiegogo campaign is required to reach a humongous $3.4 million to become a reality, and has 60 days to do so. The company claims the millions will go towards funding a space shuttle and video equipment, while they will cover the actor's pay and promotion. If successful, the team will launch into space in 2016. The Indiegogo campaign can be found
here.
>>Source
[img]http://ihydra.net/hfnt/headers/WorldNews.png[/img]
South Korea Mers Outbreak
Middle East respiratory syndrome (Mers) is a viral respiratory illness that is new to humans and was first reported in Saudi Arabia in 2012 and has since spread to other countries. The illness often leads to fever, coughing and shortness of breath, with many victims actually dying because of it. The latest outbreak happened in South Korea, which as of now has been the largest Mers outbreak outside of the Arabian Peninsula. Unfortunately for one hospital, over half the reported cases of Mers has been reported to it alone, causing it to be suspended with no more incoming visitors until the virus has been cleared. The president of Samsung Medical Center in the capital Seoul has issued an apology. Over 145 cases have been reported with over 15 victims known to have died. It is reported an orderly at the hospital caught the virus while a victim waited for days to be seen. An estimated 900 people may have come into contact with the virus.
>>Source
Sweden Royal Wedding
Prince Carl Phillips of Sweden has married ex-reality star Sofia Hellqvist. Hellqvist has also worked as a topless model and a yoga instructor before setting up her own charity. Thousands of well-wishers lined the streets for the event as they cheered the marriage on showing their support for the couple. Around 550 guests turned up to the lavish event including Princess Takamado of Japan and Britain's Prince Edward. Although her past has been brought up many times Hellqvist has no regrets and wishes to just move on, saying, "All these experiences have made me the person I am." There were rumours that her past may upset the royal family but the palace has emphasised her charity work. Congratulations to the newlywed couple!
>>Source
Venezuela and US Meet
A high-profile meeting has taken place between the US and Venezuela as they try to work out the crisis they are currently facing in their relations. Venezuela accused the US of plotting a coup and the US then declared Caracas a security threat causing arguments between both camps. Venezuela then ordered the US to reduce its embassy staff and imposed a visa requirement of US visitors. In response the US then ordered sanctions against seven Venezuela officials it accused of corruption and rights abuses. The meeting is set to try and solve the issues they are currently facing with this not being the first. Correspondents say both sides have lowered the tone in recent weeks. The latest meeting comes after reports in US media that Washington is investigating Diosdado Cabello over alleged involvement in drug trafficking and money laundering.
Mr Cabello has denied the allegations.
>>Source
![[Image: support1.png]](https://hackforums.news/assets/v5/support1.png)
![[Image: pugQCoc.gif]](https://i.imgur.com/pugQCoc.gif)
![[Image: POVfq7u.png]](https://i.imgur.com/POVfq7u.png)
![[Image: bTTz7WE.png]](https://i.imgur.com/bTTz7WE.png)
![[Image: pdoOihY.png]](https://i.imgur.com/pdoOihY.png)
![[Image: 3d9b209b016277c1f7bf80a446edf1eb.png]](https://i.gyazo.com/3d9b209b016277c1f7bf80a446edf1eb.png)
![[Image: TWQNByg.png]](https://i.imgur.com/TWQNByg.png)
![[Image: wrYoU.png]](https://i.imgur.com/wrYoU.png)
![[Image: Go9NL9v.png]](https://i.imgur.com/Go9NL9v.png)