Whisper the Anonymous messaging App tracking its users

Table Of Contents Whisper users tracked? The so called safest place on the internet is reported to have tracked its anonymous users. Guardian today reported that the anonymous messaging App was not so anonymous at all. The unique thing about Whisper was that it guaranteed anonymity and privacy to its users. Users post messages which are displayed as text superimposed over an image, similar to greeting cards. Currently, users of Whisper are publishing as many as 2....

October 17, 2014 · 2 min · 228 words · Matthew Olson

Drupal 7 vulnerable to SQL injection which can leave a site open to hacking attacks

A malicious user can inject arbitrary SQL queries… A vulnerability in this API allows an attacker to send specially crafted requests resulting in arbitrary SQL execution. Details Drupal uses prepared statements in all its SQL queries. To handle INstatements there is an expandArguments function to expand arrays. The Problem occurs, if the array has keys, which are no integers. Since Drupal uses PDO, multi-queries are allowed. SektionEins has said that they cant reveal the PoC as they have been asked by Drupal not to....

October 16, 2014 · 1 min · 86 words · Jessica Gallagher

Pirate Bay and Deildu blocked in Iceland

Coming from a country which prides in its values of freedom above almost everything else. However It had zero negative effect on the site, TorrentFreakreported. One of the blocking request was disapproved on a procedural matter which consisted of 4 Complaints in together. source: www.techworm.net

October 16, 2014 · 1 min · 45 words · Carmen Mercado

Hacker takes over Facebook page of ‘Bucket List Baby’ Shane, posts NSFW images

He was suffering from a rare , terminal condition of anencephaly. #shanesbucketlist went viral. Thinking it was legitimate, Gassew typed in Dans name and password. Unfortunately, it wasnt from Facebook. Gassew immediately contacted Facebook to verify the user credentials and take the control of the page back. NBC on its part used it weight to expedite the process. Facebook acceded the the genuine request from the parents and gave control back to Shanes parents....

October 15, 2014 · 1 min · 97 words · Steven Roach

Hurricane Panda, a Chinese origin attack exploiting Zero Day vulnerability in X64 Windows systems

Table Of Contents What is Hurricane Panda? The file itself is just 55 kilobytes in size and contains just a few functions. This require administrative privilege access to move around and across the connection. CrowdStrike also uncovered that Hurricane Pandas RAT of choice has been PlugX. This is another reason for them to believe that the exploit has originated from Mainland China. you might download the fix fromhereand revamp your systems immediately....

October 15, 2014 · 1 min · 78 words · Philip Martin

SSL 3.0 web encryption bug can lead to ‘Poodle’ Attack, allowing attackers to steal data

What is SSL 3.0 ? source: www.techworm.net

October 15, 2014 · 1 min · 7 words · Sarah Heath

700,000 Dropbox Credentials Hacked, Hackers dump ‘Dropbox Hacks Teasers’ on Pastebin

Table Of Contents Dropbox hacked? Dropbox hack teaser being dumped on Pastebin! Popular online locker service and cloud storage service Dropbox appears to have been hacked. The hackers apparently are willing to divulge more username/password pairs if they receive donations to their bitcoin address. Pastebin The hacker who has leaked the login credentials in three tranches as of now. The first tranche givenherewas leaked 6 hours ago and the second one givenherewas just 4 hours ago....

October 14, 2014 · 2 min · 217 words · Wayne Joyce

Dorian Satoshi Nakamoto to sue Newsweek for defamation, needs your help

Leah had backed up her story by giving a interview with our good man, Mr.Dorian Satoshi Nakamoto. But ultimately, Dorian came out with a statement the very next day to prove Leahs supreme blooper. He said that he was suing Newsweek because he was allegedly targeted and victimized by a reckless news organization. source: www.techworm.net

October 14, 2014 · 1 min · 55 words · Benjamin Zuniga

Personal Data of 850,000 job seekers of Oregon potentially compromised

The system in question is Oregon Employment Departments WorkSource Oregon Management Information System (WOMIS). This system is in short, a database for job seekers. Potential candidates share personal information on the site, information that might help them secure a job. This information has apparently been breached. Around 1.9 million people are registered on WOMIS service and the people affected amounts to 850,000. If you are registered on WOMIS kindly verify that your personal information is not being misused in anyway....

October 14, 2014 · 1 min · 82 words · Pamela Jones

Sandworm : Russia backed cyber criminals targeted EU, NATO

This zero day attack apparently gave them access to all versions of Windows from Vista onwards. Team Sandworm This security loophole was uncovered by cyber-intelligence firm iSight Partners. The espionage was perpetrated since August and is still on. Microsoft will be release the patch for this vulnerability along with their other patches today. The Attack Sandworm targeted machines using a malicious PowerPoint presentation. Russian Link Why we say this group can be linked to the Russian state ?...

October 14, 2014 · 2 min · 237 words · Tammy Pugh

YouTube Malvertising : Ads on YouTube leads users to Sweet Orange exploit kit

Table Of Contents YouTube Ads lead to exploit kits, YouTube serving malvertising? You may have heard of the term malvertising and threats posed by it. Malvertising is usually served by hackers using shady sites or hacking legitimate ones to spread malware payload. This ads lead users to exploit kits which can steal their identity, personal information or banking details. TrendMicro has been researching on malvertising trends for past few months and have come to this surprising conclusion....

October 14, 2014 · 1 min · 203 words · Brandon Cannon

28 year old Russian is the owner of iCloud Hacks leaked images website

Table Of Contents iCloud Hacks latest updates News just keeps on flowing on the iCloud hack. Sergei has also put up disclaimers on his website to specify this. Serious Intent Kholodovskiis site, has images of approximately 126 female Hollywood celebrities arranged in alphabetic order. The site in question may belong to Sergei as Techworm couldnt trace the owner of the site. since the whois is hidden through Privacy Protection. Today the leakers posted images of yet another 7 Hollywood celebrities....

October 13, 2014 · 1 min · 92 words · David Acosta

CyanogenMod ROM zero day vulnerability to Man-in-the-Middle attack

This vulnerability can cause around 10 million CyanogenMod ROM users to be exposed to man-in-the-middle (MitM) attacks. CyanogenMod ROM CyanogenMod ROM is an open source operating system for Android smartphones and tablets. It allows root access to the Android users otherwise denied by Googles proprietary operating system. This in turn lets users tweak and trick the smartphone to behave exactly as the user wants it. A simple example of a user opening a banking website and communicating with the banking server....

October 13, 2014 · 1 min · 170 words · Jeffrey Bennett