Apple appeared at Black Hat Security conference

<div dir="ltr" style="text-align: left;" trbidi="on"><br />Apple will give the hacking community a peek under the hood of iOS this week, with the company’s first-ever presentation at the Black Hat security conference.<br /><br />Bloombergs Jordan Robinson first reported the Apple appearance, which is scheduled for Thursday. Dallas De Atley, manager of Apples platform security team, will give the presentation.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtJiXWtzF5GO078pDpZ8SvuYNiTo0Ch-SzuV-lMVGMWh7d02YAzXpmFt81C2fi9I37he2UgIbeCqPzf5XCXCp4HfTbNu_30Agn9PB-hOYs2AI-3rqUKU4GCyc7JJmc0bHlcRSFVNf9ARcI/s1600/blackhat+hackersmedia.com.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="245" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtJiXWtzF5GO078pDpZ8SvuYNiTo0Ch-SzuV-lMVGMWh7d02YAzXpmFt81C2fi9I37he2UgIbeCqPzf5XCXCp4HfTbNu_30Agn9PB-hOYs2AI-3rqUKU4GCyc7JJmc0bHlcRSFVNf9ARcI/s400/blackhat+hackersmedia.com.jpg" width="400" /></a></div><br />Black Hats website describes the session: Apple designed the iOS platform with security at its core. In this talk, Dallas De Atley … will discuss key security technologies in iOS.<br /><br />De Atleys appearance, however, would come when iOS security has been increasingly challenged. Earlier this month, a Russian hacker exploited a flaw in the operating system, letting the public make in-app purchases for free. A week before that, the Find and Call app was revealed to be a Trojan horse that uploaded a users contacts and SMS messages to a remote server. And the forthcoming release of iOS 6 is expected to contain numerous security improvements.<br /><br />Black Hat general manager Trey Ford suggested to Bloomberg that De Atleys appearance is a coup for the conference. Bottom lineno one at Apple speaks without marketing approval, Ford told the news service. Apple will be at Black Hat 2012, and marketing is on board.<br /><br />References: <a href="http://www.blacknewbieteam.org/2012/07/24/apple-to-appear-at-black-hat-security-conference/" target="_blank">Link1</a><br /></div>

Apple appeared at Black Hat Security conference

Apple will give the hacking community a peek under the hood of iOS this week, with the company’s first-ever presentation at the Black Hat se...

Read more »

Defcon 20: Skillz, Thrillz & got Feelz for the whole Hacker Family

<div dir="ltr" style="text-align: left;" trbidi="on"><br />You might not think that a hacker conference in Sin City in the summer is the best place to take the kids. But if you want them to learn some skills, know their digital rights and have some fun, I can’t think of any place better. Oh, and there’s some stuff for us big kids too.<br /><h4 style="text-align: left;"> Defcon, which turns 20 this year, runs Friday through Sunday, following the more corporate Black Hat conference, the newsy parts of which are tomorrow and Thursday.</h4><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf3o900wCkaf65rjv9kCETG0z3xzQ6wcLYWsAWswSPBhFNb6njJXQCaDR7iajg0rOF8P3BxGdyIZEduWRCY-2dnLILdP-3-RDliSYepE-S1pX7CHA8_BRzotWM3yTX9kyGbN235TCv0dQ1/s1600/Defcon+20.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf3o900wCkaf65rjv9kCETG0z3xzQ6wcLYWsAWswSPBhFNb6njJXQCaDR7iajg0rOF8P3BxGdyIZEduWRCY-2dnLILdP-3-RDliSYepE-S1pX7CHA8_BRzotWM3yTX9kyGbN235TCv0dQ1/s1600/Defcon+20.jpg" /></a></div><br /><br />Black Hat organizers had a rocky start to their week with a security issue of their own. One of their volunteers sent 7,500 attendees a suspicious e-mail that appeared to be a phishing scam. The message asked recipients to confirm a new password that supposedly had been requested and directed them to a dicey-looking URL. “We have reviewed the server logs, we know the user, host, and have spoken with the volunteer who has emailed each of you this morning,” Trey Ford, general manager of Black Hat, wrote in a blog post, without saying exactly why it happened. “The email this morning wasn an abuse of functionality by a volunteer who has been spoken to.”<br /><br />And in a first, Apple is hosting a talk at Black Hat to discuss security for its iOS mobile operating system. It’s a timely appearance: just last week, the iPad and iPhone maker offered developers a way to protect themselves from a high-profile exploit that targeted Apple’s in-app purchase system.<br /><br />Defcon, meanwhile, will no doubt have plenty of hair-raising sessions about scary security holes in software and hardware we use every day and the tools released to help exploit them. But there also will be Defcon Kids, at which security researchers of the future will hone their chops on protecting data in a digital age.<br /><br />The Defcon Kids program, which runs concurrently with Defcon and is now in its second year, looks seriously interesting. There will be sessions on how to break crypto code and how to work with electronics and circuit boards. There’s a panel on location data tracking in cell phones, a zero-day contest for finding previously unknown vulnerabilities, a lockpicking race, a Q&A session on drones and 3D printing, and a session on “The Art of the Con” with a live con game.<br /><br />Attendees of Defcon Kids also will learn about liability and other issues related to design problems that allow locks and safes to be opened in seconds, and there’s a session called “Hacking your School’s Network” in which sci-fi author and Internet thinker Cory Doctorow will tell the kids that “the best way to hack the network is to study it, document the ways in which it interferes with your schooling, use Freedom of Information requests to find out what your school is paying for this junk, and publish and present that material.” The ACLU is holding a session on the NSA and the Constitution, and in the Department of Defense Crime Scene Investigation session, kids will confront a simulated crime that they have to solve in 15 minutes. Heady stuff for minors.<br /><br />And there’s plenty of fun for the over-21 crowd too, including sessions on all manner of security topics like backdoors in hardware and industrial control software, hacking aircraft tracking systems, “human augmentation” using medicine and technology and how to hack a nation’s transportation networks. There are also plenty of privacy-related sessions and deep dives into the security architectures of iOS, Android, and Win 8.<br /><br />For people who want a more hands-on experience, there’s an exploit-coding contest, a tamper-proof packaging contest, a Defcon art contest, capture the packet, lockpicking, social engineering contest and a beverage cooling contraption contest. For pure pleasure and good deeds you have the beard championship, along with bone marrow and blood drives. The winners of the Defcon short story contest will be announced, and people will be sharing anecdotes for the Defcon documentary that’s in the making. And if you just want to get out of town, there’s a two-hour bike ride in the desert being organized.<br /><br />Things kick into another gear at night. After hours there will be the usual shmoozing over drinks, goth dance parties, and DJs from nerdcore rappers Duo Core and Dale Chase to MC Frontalot and local boys gone big, The Crystal Method.<br /><br />There is also a separate event, B-Sides, that runs tomorrow and Thursday and features some interesting sessions like “How I Managed to Break into the InfoSec World with Only a Tweet and an Email” and “Dropping an Intelligent F-BOMB.”<br /><br /><span style="background-color: white;">Reference</span>: <a href="http://www.blacknewbieteam.org/2012/07/24/defcon-20-skillz-thrills-for-the-whole-hacker-family/" target="_blank">Link1</a></div>

Defcon 20: Skillz, Thrillz & got Feelz for the whole Hacker Family

You might not think that a hacker conference in Sin City in the summer is the best place to take the kids. But if you want them to learn som...

Read more »

‎400+ site Got Hacked and Defaced by 8lack 3y3s

<div dir="ltr" style="text-align: left;" trbidi="on">3xp1r3 Cyber Army back again with fresh attack. This hacking group is really active in these days and already hack about 1,500+ sites in this month.<br />Bangladeshi hacking Group name as "3xp1r3 Cyber Army" hacked 400+ sites by 8lack 3y3s of different countries include lot of amount of Australian sites. These kind of attacks are clearly showing how much awareness about security is need in cyber world. 3xp1r3 Cyber Army already hack a 7,000+  sites and we can see all info of hacked sites on there <a href="http://zone-h.org/archive/notifier=3xp1r3" target="_blank">zone-h</a>.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix_pLs-6gT2agp5LRi9DI9MTfF62ATEm_WSPyEWrMKLY9Ll7ukuXEVxlYvnha7Q65Zt-PqEBYUunVCg9sczM8vfqPQ7Y7J60ZS36r1cCSYhBHWTz11b4_HX-wNAFnGFF1FwJuF7CnMx7NV/s1600/3xp1r3+Cyber+Army.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix_pLs-6gT2agp5LRi9DI9MTfF62ATEm_WSPyEWrMKLY9Ll7ukuXEVxlYvnha7Q65Zt-PqEBYUunVCg9sczM8vfqPQ7Y7J60ZS36r1cCSYhBHWTz11b4_HX-wNAFnGFF1FwJuF7CnMx7NV/s320/3xp1r3+Cyber+Army.png" width="320" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"></div>The list of impacted sites was published on <a href="http://pastebin.com/M6VzfR8a" target="_blank">Pastebin</a> yesterday, but at press time, most of them still weren’t restored.<br /><br />"<span style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13.333333015441895px; line-height: 11.333333015441895px;">w3 ar3 3xp1r3</span><br /><span style="color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13.333333015441895px; line-height: 11.333333015441895px;"><br /></span><span style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13.333333015441895px; line-height: 11.333333015441895px;">w3 n3v3r g1v3 uP...any lamers</span>"<br /><br /><br />While these mass defacements may not seem to have devastating effects, many website owners complain that it takes quite an effort to fully recover after such a hack. Few days ago they also hack <a href="http://www.hackersmedia.com/2012/07/860-sites-defaced-by-3xp1r3-cyber-army.html" target="_blank">860+ Sites Defaced By 3xp1r3 Cyber Army</a> & <a href="http://www.hackersmedia.com/2012/07/200-site-got-hacked-by-8lack-3y3s.html" target="_blank">200+ Site Got Hacked by 8lack 3y3s</a><br /><br />Hacked Site List:<br /><a href="http://pastebin.com/M6VzfR8a" style="color: #1155cc; cursor: pointer; font-family: arial, sans-serif; font-size: small; text-align: -webkit-auto;" target="_blank">http://pastebin.com/M6VzfR8a</a><span style="font-family: arial, sans-serif; font-size: x-small; text-align: -webkit-auto;"> </span><br /><br />Zone-H Mirror:<br /><a href="http://zone-h.org/archive/notifier=3xp1r3">http://zone-h.org/archive/notifier=3xp1r3</a><br /><br />Zone-HACK Mirror:<br /><a href="http://www.zone-hack.com/notifier/3xp1r3/">http://www.zone-hack.com/notifier/3xp1r3/</a><br /><br />Hack-DB Mirror:<br /><a href="http://hack-db.com/team/3xp1r3_Cyber_Army/all.html">http://hack-db.com/team/3xp1r3_Cyber_Army/all.html</a><br /><br />z-z0ne Mirror:<br /><a href="http://z-z0ne.net/notifier/3xp1r3/">http://z-z0ne.net/notifier/3xp1r3/</a><br /><br /><br /></div>

‎400+ site Got Hacked and Defaced by 8lack 3y3s

3xp1r3 Cyber Army back again with fresh attack. This hacking group is really active in these days and already hack about 1,500+ sites in thi...

Read more »

Australian Death Threat Text Scam under Investigation

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"></div><h4 style="text-align: left;">Thousands of Australians have received a "death threat" text, demanding they pay 5,000 Australian dollars ($5,140, £3,311) or face being murdered.</h4><span style="text-align: left;"><div style="text-align: left;"><span style="background-color: white;">The scale of the scam has surprised t</span><span class="text_exposed_show" style="background-color: white;">he police authorities.</span></div></span><span class="text_exposed_show" style="text-align: left;"><div style="text-align: left;"><br /></div><div style="text-align: left;"><span style="background-color: white;">At a press conference in Queensland, Det Supt Brian Hay said: "Do not respond. Delete it immediately and don't panic... because that's what they prey upon."</span></div><div style="text-align: left;"><br /></div><div style="text-align: left;"><span style="background-color: white;">The fraud is believed to be the work of an organised crime gang.</span></div><div style="text-align: left;"><span style="background-color: white;">Huge scale</span></div></span><br /><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8bHEDccsEfq-Cwk6TDHlY4E173nxJdqqwKTs3u9RDt0n90qVF-9o3Fh4JCuiB9cvvzgQ5jR4D6Dss22dwZ0KGuE7GmApD9iTamZCA9MB_PadGaVwHkpfDPcubL6aur57Swoi5s6h2YJgp/s1600/Australian+death+threat+text+scam.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="251" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8bHEDccsEfq-Cwk6TDHlY4E173nxJdqqwKTs3u9RDt0n90qVF-9o3Fh4JCuiB9cvvzgQ5jR4D6Dss22dwZ0KGuE7GmApD9iTamZCA9MB_PadGaVwHkpfDPcubL6aur57Swoi5s6h2YJgp/s400/Australian+death+threat+text+scam.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><br /><h4 style="text-align: left;"><br /></h4><span class="text_exposed_show"> The message, which began to hit people's phones on Monday, reads: "Sum1 paid me to kill you. Get spared, 48hrs to pay $5000. If you inform the police or anybody, death is promised."<br /> <br /> It directs people to a Yahoo email account which police have now disabled.<br /> <br /> Mr Hay told reporters that enquiries were ongoing as to whether the criminals were based in Australia.<br /> <br /> Some people had already fallen for the scam, mainly those with little experience of text messaging, he revealed.<br /> <br /> He said that the scale of the scam was "unprecedented".<br /> <br /> "We've never see this anything like this before - to have so many people contacted at the same time."<br /> <br /> "There is an extraordinary amount of Australian consumer data that they are exploiting," he added.<br /> <br /> He added that the scam was likely to be the work of organised criminals rather than an individual.</span></div>

Australian Death Threat Text Scam under Investigation

Thousands of Australians have received a "death threat" text, demanding they pay 5,000 Australian dollars ($5,140, £3,311) or face...

Read more »