SECURITY WARNINGS & Notices - Please post them here

[Chris Thomas]

Chinese Hackers Have Stolen Sensitive US Weapon Design Files


Quote :

""Making the list of system designs stolen during the hack include: the advanced Patriot missile system (PAC-3); a system for shooting down ballistic missiles known as the Terminal High Altitude Area Defense (THAAD); and the Navy’s Aegis ballistic-missile defense system. Elsewhere, classified details regarding the F/A-18 fighter jet, the F-35 Joint Strike Fighter, the V-22 Osprey, the Black Hawk helicopter and the Navy’s new Littoral Combat Ship were also nabbed"



http://www.washingtonpost.com/world/national-security/confidential-report-lists-us-weapons-system-designs-compromised-by-chinese-cyberspies/2013/05/27/a42c3e1c-c2dd-11e2-8c3b-0b5e9247e8ca_story.html


If you ask me, these are the most powerful weapons in the U.S arsenal. Chinese will probably reverse engineer it within 5-10 years.

[SpeedyPC]

Seriously? USA to legalize rootkits, spyware, ransomware and trojans to combat piracy?

http://blog.emsisoft.com/2013/05/27/seriously-usa-to-legalize-rootkits-spyware-ransomware-and-trojans-to-combat-piracy/

[bob3160]

Seriously? USA to legalize rootkits, spyware, ransomware and trojans to combat piracy?

http://blog.emsisoft.com/2013/05/27/seriously-usa-to-legalize-rootkits-spyware-ransomware-and-trojans-to-combat-piracy/

It always pays to read the whole article.  Just because someone makes a proposal, doesn't make it reality.

[SpeedyPC]

Seriously? USA to legalize rootkits, spyware, ransomware and trojans to combat piracy?

http://blog.emsisoft.com/2013/05/27/seriously-usa-to-legalize-rootkits-spyware-ransomware-and-trojans-to-combat-piracy/

It always pays to read the whole article.  Just because someone makes a proposal, doesn't make it reality.

I knew it somebody would say the same thing going through my mind it "Just because someone makes a proposal, doesn't make it reality" Thank you Bob because I had to check my thought correctly as I wasn't to sure.

Edit: I hope I wasn't wasting you're time Bob

[Asyn]

RoR CVE-2013-0156 in the Wild
http://jarmoc.com/blog/2013/05/28/ror-cve-2013-0156-in-the-wild/

[bob3160]

Analysis of a self-debugging Sirefef cryptor

[bob3160]

Twitter's 2 step verification is easily compromised

[bob3160]

Google changing it's SSL Certificates
"all of our SSL certificates will be upgraded to 2048-bit keys by the end of 2013."
I'd say that will turn SSL into SuperSSL

[Asyn]

Log file vulnerability in Apache server
http://www.h-online.com/open/news/item/Log-file-vulnerability-in-Apache-server-1873651.html

[bob3160]

Privacy no longer exists as I've said for a long time
If you think you can hide, you're sadly mistaken.
The following article and their Video (32 min) proves my point:
http://www.geek.com/mobile/mini-documentary-shines-a-light-on-the-surveillance-state-1556671/

[Asyn]

PayPal.com XSS Vulnerability
http://seclists.org/fulldisclosure/2013/May/163

PayPal vulnerability finally closed
http://www.h-online.com/security/news/item/PayPal-vulnerability-finally-closed-1873322.html

[Johnny4745]

Old Soviet Union domain name attracts cybercriminal interest

Published May 31, 2013

Associated Press

MOSCOW –  The Soviet Union disappeared from the map more than two decades ago. But online an `e-vil empire' is thriving.

Security experts say the .su Internet suffix assigned to the USSR in 1990 has turned into a haven for hackers who've flocked to the defunct superpower's domain space to send spam and steal money.

http://www.foxnews.com/tech/2013/05/31/ussr-old-domain-name-attracts-cybercriminals/?intcmp=HPBucket

[polonus]

Hi Johnny4745,

Thanks for that heads-up! Appreciated...
With this google search query we can get a general idea what is out there and what malcode awaits us at dot su: https://www.google.nl/search?q=urlquery.net+su&oq=urlquery.net+su&aqs=chrome.0.57.13369j0&sourceid=chrome&ie=UTF-8
Newest trojans from here for instance: https://www.virustotal.com/nl/url/45a530e0af9498f7b4776f3bd0329f3e96895a3466f26ad8e8ccb4ef267a511e/analysis/
re: http://regrunreanimator.com/newvirus/trojan/pkc-exe.htm
And anotherr one with indicator obfuscation and Blackhole landing: http://urlquery.net/report.php?id=2603621
see: http://playingwithothers.com/2013/03/06/blackhole-landing-page-obfuscation-example/  (link article author = chris Jordan)
Here the trojan is directlt blocked by avast! Web Shield as JS:Includer-NS[Trj] for urlquery etc / php?id=43243|{gzip}
htXp://urlquery.net/report.php?id=43243 (do not visit)

polonus

[mchain]

P2P botnets, new threat, much more resistant to takedown, and are larger than first estimated.

Sality, ZeroAccess, Zeus, use this type of network to control and infect.  http://www.h-online.com/security/news/item/P2P-botnets-much-larger-than-they-seemed-1874071.html

[Asyn]

Google researcher discloses zero-day exploit for Windows
http://www.h-online.com/security/news/item/Google-researcher-discloses-zero-day-exploit-for-Windows-1876170.html