Source: National Cyber Security – Produced By Gregory Evans Wave goodbye to security if crims can pop a MIMO router Modern Wi-Fi doesn’t just give you fast browsing, it also imprints some of your finger movements – swipes, passwords and PINs – onto the radio signal. A group of The…
15 Second Password Hack, Mr. Robot Style – Hak5 2101
Source: National Cyber Security – Produced By Gregory Evans Pilfering Passwords with the USB Rubber Ducky Can you social engineer your target into plugging in a USB drive? How about distracting ’em for the briefest of moments? 15 seconds of physical access and a USB Rubber Ducky is all The…
How To Reveal The Password Hidden Behind Asterisks
Source: National Cyber Security – Produced By Gregory Evans You can reveal passwords hidden behind asterisks on webpages in any browser. Google Chrome, Firefox and other browsers hide passwords behind asterisks but I will show you How to See your Passwords Hidden Under Asterisks … field from “password” to The…
Many businesses still failing badly when it comes to password security
Source: National Cyber Security – Produced By Gregory Evans Nearly half of organisations store admin passwords in a simple Word doc A new piece of security research has emerged, and while there are positive aspects here, there are the usual worrying statistics to chew over as well. And probably The…
Oops. Apple has seriously weakened iOS 10 backups against password hackers
Source: National Cyber Security – Produced By Gregory Evans A blunder that Apple made in iOS 10 has weakened the encryption of iPhone data when backed up to iTunes A flaw Apple introduced in iOS 10 has made it far easier for password crackers to brute-force data backed up The…
How LinkedIn’s password sloppiness hurts us all
Source: National Cyber Security – Produced By Gregory Evans Me: “The full dump from the 2012 LinkedIn breach just dropped, so you’re probably not going to see much of me over the next week.” Wife: “Again?” Yes, again. If you’re just waking up from a coma you would be forgiven…
Time to change your password.
The post Time to change your password. appeared first on AmIHackerProof.com. View full post on AmIHackerProof.com . . . . . View full post on Are You Hacker Proof
Yahoo Mail app gets a major update; password no longer required, third party accounts supported
Yahoo announced yesterday a major update to the Yahoo Mail app. Included is a new feature called “Yahoo Account Key,” which allows you to sign into the app without using a password. Instead, the app will send a notification to the smartphone that is associated with the account. The message…
Hacking an Android phone can be as simple as typing in a really long password
Source: National Cyber Security – Produced By Gregory Evans Android 5.0 “Lollipop,” the latest version of the Android phone operating system, is vulnerable to a simple hack that involves typing in a password so long that it causes the phone to crash before then booting to the unlocked home screen….
ISIS social media accounts are buzzing with a spreadsheet of personal data on employees of the American, British, and Australian governments, including military personnel. The Islamic State claims this list was compiled using data stolen from government systems by its “hacking division,” although some experts who have reviewed the list say most of it was more likely created using simple Google searches of publicly available data. There are about 1,400 individuals included on the list. The list was accompanied by a message from the “Islamic State Hacking Division,” transcribed by Sky News: O Crusaders, as you continue your aggression towards the Islamic State and your bombing campaign against the Muslims, know that we are in your emails and computer systems, watching and recording your every move. We have your names and addresses, we are in your emails and social media accounts, we are extracting confidential data and passing on your personal information to the soldiers of the khilafah, who soon with the permission of Allah will strike at your necks in your own lands. So wait, we too are waiting. The Sydney Morning Herald criticizes Australian officials for being “caught on their heels” by the hit list, which includes Defense Force employees and a Victorian MP. Even though “Australia’s most senior Islamic State militant, former Melbourne man and terror recruiter Neil Prakash” was posting links to the hit list early Wednesday morning, at least half of the Australians targeted by ISIS said they were unaware of the threat until they were informed by the media… which contacted them using the phone numbers published by the Islamic State. “I’m completely at a loss,” said the aforementioned MP, who at least has access to a security detail assigned to protect elected officials. “What do I do? The police probably know less than you and I.” Defense Force employees on the list said they were in shock no one from the government had warned them. Various agencies of the Australian government declined to discuss the matter. In addition to Prakash – who crowed “Cyber war got em shook!” and “Kill them where you find them and enslave their women” on Twitter – the Herald reports “other prominent militants, including British man Junaid Hussain, who is third on a CIA kill list of Islamic State operatives, also used social media to promote the leak and encourage attacks.” Sky News reports the hit list includes British Foreign Office employees, plus a “local council employee.” Most of the names on the list are American, including personnel from the Air Force, Marines, NASA, FBI, and the Port Authority of New York and New Jersey. Russian state outlet RT.com says the list also includes “a worker in an Israeli magistrate’s court” and “someone in a college in Mississippi.” The RT.com article mentions some reasons for skepticism about the Islamic State’s claim that this list includes confidential information obtained by hackers: some of the phone numbers appear to be disconnected, while the purportedly stolen U.S. military passwords appearing on the list are “too weak to pass the guidelines of an official computer system operated by the Pentagon.” The Sydney Morning Herald also found some of the information published on the list to be outdated. “This is the second or third time they’ve claimed that and the first two times I’ll tell you, whatever lists they got were not taken by any cyber attack,” said Army Chief of Staff General Ray Odierno, as quoted by the UK Guardian. The Guardian also cites the opinion of computer security expert Troy Hunt, who said the of the supposedly hacked data: “It’s pretty clear that it’s been aggregated from different sources. It’s been put together on the basis of a .gov or .mil address. Even the passwords, they’re not strong enough to have come from a corporate or government. They’re not even strong enough to have come from an online service – you can’t create a Gmail account, for example, with a password of less than eight characters, and here we’re seeing some passwords of three letters.” The UK Daily Mail notes that Twitter administrators appear to have shut down the Islamic State Hacking Division’s account three times on Wednesday while it attempted to spread its hit list around, leading to the creation of a fourth terrorist account with the message, “Kuffar seem to be raging.”
Source: National Cyber Security – Produced By Gregory Evans ISIS social media accounts are buzzing with a spreadsheet of personal data on employees of the American, British, and Australian governments, including military personnel. The Islamic State claims this list was compiled using data stolen from government systems by its “hacking…