Author: admin

The malware was first released for sale on January 26, 2022 as an HVNC implant, but later evolved

The resignation of CEO Shalev Hulio will see COO Yaron Shohat take the helm

Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels.

We haven’t validated this vuln ourselves… but the source of the story is impeccable. (Impeccably dressed, at least.)

Holdcroft Motor Group says most systems back online now

General Bytes confirms serious attack last week

This is a dumb crypto mistake I had not previously encountered:

A developer says it was possible to run their own software on the car infotainment hardware after discovering the vehicle’s manufacturer had secured its system using keys that were not only publicly known but had been lifted from programming examples.

[…]

“Turns out the [AES] encryption key in that script is the first AES 128-bit CBC example key listed in the NIST document SP800-38A [PDF]”.

[…]

Luck held out, in a way. “Greenluigi1” found within the firmware image the RSA public key used by the updater, and searched online for a portion of that key. The search results pointed to a common public key that shows up in online tutorials like “RSA Encryption & Decryption Example with OpenSSL in C.“

The UK government report found that many leaders only review cybersecurity practices following an incident

The vulnerability gave hackers the ability to infiltrate WebKit, the engine that powers Safari

Cryptojackers take advantage of legitimate system binaries on more than 200,000 devices daily