MITM – Computer Security Articles

Researchers called it KNOB, a clever attack against the firmware of a Bluetooth chip that can allow hackers to successfully hijack paired devices and steal their sensitive data. Are users at risk?

Categories:

Awareness

Tags: Apple blackberry bluetooth Cisco CVE-2019-9506 iOS Key Negotiation of Bluetooth KNOB attack macOS man-in-the-middle attack microsoft mitm ret hat watchos windows

MalwareBytes Security

Vulnerabilities in financial mobile apps put consumers and businesses at risk

May 8, 2019 admin 101, app vulnerabilities, client-side injection, development hygiene, exposure of database parameters and sql queries, financial, financial mobile app flaws, FYI, implicit trust of all certificates, insecure data storage, insecure random number generator, lack of binary protections, Man In The Middle, man-int-the-middle, MITM, private key exposure, secure app development, security hubris, SQL Injection, unintended data leakage, vulnerabilities, weak encryption

Credit to Author: Jovi Umawing| Date: Wed, 08 May 2019 16:30:00 +0000

It’s good to know that your bank’s website boasts that little green padlock, promotes secure communication, and follows a two-factor authentication (2FA) scheme. But are their mobile apps equally secure?

Categories:

Tags: app vulnerabilities client-side injection development hygiene exposure of database parameters and sql queries financial financial mobile app flaws implicit trust of all certificates insecure data storage insecure random number generator lack of binary protections man-in-the-middle man-int-the-middle mitm private key exposure secure app development security hubris SQL injection unintended data leakage vulnerabilities weak encryption

MalwareBytes Security

Of hoodies and headphones: a spotlight on risks surrounding audio output devices

April 22, 2019 admin 101, aha, american heart association, audio output device, audio output device security, ben gurion university, blueborne, bluetooth eavesdropping, FYI, headphone risks, headphones and hoodies, man-in-the-middle attack, MITM, multiplexed wired attack surface, Sennheiser, SPEAKE(a)R, SPEAKE(a)R malware

Credit to Author: Jovi Umawing| Date: Mon, 22 Apr 2019 18:15:34 +0000

For years, researchers have been poking holes in our audio output devices in the name of security and privacy. They’ve found many ways our headphones can be hacked or otherwise compromised. Learn what they discovered, and how you can secure your own.

Categories:

Tags: aha american heart association audio output device audio output device security ben gurion university blueborne bluetooth eavesdropping headphone risks headphones and hoodies man-in-the-middle attack mitm multiplexed wired attack surface Sennheiser SPEAKE(a)R SPEAKE(a)R malware

MalwareBytes Security

Mac malware intercepts encrypted web traffic for ad injection

October 24, 2018 admin Adware, Mac, Mac adware, MacOS, malware, MITM, Threat analysis

Credit to Author: Thomas Reed| Date: Wed, 24 Oct 2018 15:00:43 +0000

New Mac malware has been found that intercepts encrypted traffic for the purpose of injecting ads into web pages. But could this adware be used for more devious purposes in the future?

Categories:

Tags: adware mac Mac adware macOS malware mitm

Kaspersky Security

MitM and DoS attacks on domains through the use of residual certificates

August 29, 2018 admin black hat, blackhat, Browsers, Business, certificates, def con, DEF CON 26, dos, https, MITM, SSL, Threats, tls

Credit to Author: Alex Drozhzhin| Date: Wed, 29 Aug 2018 15:43:09 +0000

Due to certification centers specifics, it is not rare for other people to hold a valid HTTPS certificate for your domain. What can go wrong?

← Previous