Independent – Page 401 – Computer Security Articles

Credit to Author: BrianKrebs| Date: Mon, 10 Apr 2017 04:17:09 +0000

Authorities in Spain have arrested a Russian computer programmer thought to be one of the world’s most notorious spam kingpins. Spanish police arrested Pyotr Levashov under an international warrant executed in the city of Barcelona, according to Reuters. Russian state-run television station RT (formerly Russia Today) reported that Levashov was arrested while vacationing in Spain with his family. According to numerous stories here at KrebsOnSecurity, Levashov was better known as “Severa,” the hacker moniker used by a pivotal figure in many popular Russian-language cybercrime forums. Severa was the moderator for the spam subsection of multiple online communities, and in this role served as the virtual linchpin connecting virus writers with huge spam networks that Severa allegedly created and sold himself.

Independent Securiteam

April 9, 2017 admin

SSD Advisory – Horde Groupware Webmail Multiple Remote Code Execution Vulnerabilities

Credit to Author: Maor Schwartz| Date: Sun, 09 Apr 2017 10:28:46 +0000

Vulnerabilities Summary The following advisory describes two (2) vulnerabilities found in Horde Groupware Webmail. Horde Groupware Webmail Edition is a free, enterprise ready, browser based communication suite. Users can read, send and organize email messages and manage and share calendars, contacts, tasks, notes, files, and bookmarks with the standards compliant components from the Horde Project. … Continue reading SSD Advisory – Horde Groupware Webmail Multiple Remote Code Execution Vulnerabilities

ComputerWorld Independent

April 7, 2017 admin

20% off Litom Solar Outdoor Motion Sensor Security Lights, 2 Pack – Deal Alert

Credit to Author: DealPost Team| Date: Fri, 07 Apr 2017 12:32:00 -0700

This Amazon #1 best selling solar security light is super bright and easy to install wherever you need it. It features 3 modes: (1) Always on, (2) Dim until motion is detected, and (3) Off until motion is detected. It’s designed with a large sensor that will detect motion over a larger distance, and 20 LED lights that the company claims are larger and more powerful than the competition offers. Being weatherproof, this is a light you can mount anywhere you need it outdoors. The Liton outdoor motion sensing light averages 4.5 out of 5 stars from over 1,800 people (see reviews), and a 2-pack is currently being offered at $31.99, a 20% discount over its typical list price of $39.99. See it now on Amazon.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

April 7, 2017 admin

WikiLeaks: CIA used bits of Carberp Trojan code for malware deployment

Credit to Author: Michael Kan| Date: Fri, 07 Apr 2017 12:29:00 -0700

When the source code to a suspected Russian-made malware leaked online in 2013, guess who used it? A new release from WikiLeaks claims the CIA borrowed some of the code to bolster its own hacking operations.

On Friday, WikiLeaks released 27 documents that allegedly detail how the CIA customized its malware for Windows systems.

The CIA borrowed a few elements from the Carberp financial malware when developing its own hacking tool known as Grasshopper, according to those documents.

Carberp gained infamy as a Trojan program that can steal online banking credentials and other financial information from its victims’ computers. The malware, which likely came from the criminal underground, was particularly problematic in Russia and other former Soviet states.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

April 7, 2017 admin

IoT malware begins to show destructive behavior

Credit to Author: Lucian Constantin| Date: Fri, 07 Apr 2017 11:37:00 -0700

Hackers have started adding data-wiping routines to malware that’s designed to infect internet-of-things and other embedded devices. Two attacks observed recently displayed this behavior but likely for different purposes.

Researchers from Palo Alto Networks found a new malware program dubbed Amnesia that infects digital video recorders through a year-old vulnerability. Amnesia is a variation of an older IoT botnet client called Tsunami, but what makes it interesting is that it attempts to detect whether it’s running inside a virtualized environment.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

April 7, 2017 admin

Samsung's squashing of Tizen smart-TV bugs is turning messy

Credit to Author: Agam Shah| Date: Fri, 07 Apr 2017 11:08:00 -0700

After 40 critical vulnerabilities on Samsung’s Tizen — used in smart TVs and smartwatches — were exposed this week by Israeli researcher Amihai Neiderman, the company is scrambling to patch them.

But Samsung still doesn’t know many of the bugs that need to be patched. It’s also unclear when Tizen devices will get security patches, or if older Tizen devices will even get OS updates to squash the bugs.

Beyond Samsung’s smart TVs, Tizen is also used in wearables like Gear S3 and handsets like Samsung’s Z-series phones, which have sold well in India. Samsung wants to put Tizen in a range of appliances and IoT devices. Tizen also has been forked to be used in Raspberry Pi.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

April 7, 2017 admin

U.S. lawmakers demand to know how many residents are under surveillance

Credit to Author: Grant Gross| Date: Fri, 07 Apr 2017 10:33:00 -0700

Two powerful U.S. lawmakers are pushing President Donald Trump’s administration to tell them how many of the country’s residents are under surveillance by the National Security Agency.

In a letter sent Friday, Representatives Bob Goodlatte and John Conyers Jr. asked the Office of the Director of National Intelligence (ODNI) to provide an estimate of the number of U.S. residents whose communications are swept up in NSA surveillance of foreign targets. Goodlatte, a Republican, is chairman of the House Judiciary Committee, and Conyers is the committee’s senior Democrat.

Committee members have been seeking an estimate of the surveillance numbers from the ODNI for a year now. Other lawmakers have been asking for the surveillance numbers since 2011, but ODNI has failed to provide them.

To read this article in full or to leave a comment, please click here