Satellite phone encryption cracked by German researchers

German researchers claim they have found weaknesses in two commonly-used satellite encryption protocols that could render them vulnerable to eavesdropping in real time. In the paper titled Don’t Trust Satellite Phones (currently available only as an abstract), Benedikt Driessen and Ralf Hund of Ruhr University describe how they reverse engineered…

read more

Microsoft researchers discover malicious cookie scheme

Microsoft researchers checking how easy it is to identify users by analysing commonly collected web-log data incidentally discovered a cookie-forwarding scheme that can be used to aid session hijacking. If put into play, the scheme could clandestinely forward stolen session cookies to individual zombie machines in botnets that could use…

read more

SCADA industrial control systems exposed by security researchers

Researchers showcased unpatched security flaws in software used to control critical industrial systems by oil, gas, water and electrical distribution plants at the 2012 SCADA Security Scientific Symposium (S4) last week. The vulnerabilities ranged from information disclosure and privilege escalation bugs to remote denial-of-service (DoS) and arbitrary code execution flaws….

read more

Researcher’s Tool Maps Malware In Beautiful 3D Models

Quist’s VERA visualization software showing a key section of the Koobface worm. Security researchers face a tough problem: Computer viruses, unlike their biological counterparts, can’t be seen under a microscope. Even common reverse engineering tools merely render malware as thousands of lines of garbled text more legible to machine than…

read more