Two security researchers claim to have developed a new attack that can decrypt session cookies from HTTPS (Hypertext Transfer Protocol Secure) connections. Websites use session cookies to remember authenticated users. If an attacker gains ...
Tags: Data Center, HTTPS, computer security, security research
Computerworld - Siemens is working on a fix for a remotely exploitable vulnerability in network routers and switches from subsidiary RuggedCom that are widely deployed in refineries, power substations and other critical infrastructure ...
Tags: Siemens, network routers, ROS, router
Google yesterday said it will pay up to$2 million for major vulnerabilities in its Chrome browser at a second Pwnium hacking contest this fall. Pwn2Own,a rival contest sponsored by Hewlett-Packard,will award as much as$200,000 in a ...
Tags: Google, Pwn2Own, Kuala Lumpur, Chrome Hacking Contest
Security researcher Jonathan Brossard created a proof-of-concept hardware backdoor called Rakshasa that replaces a computer's BIOS (Basic Input Output System) and can compromise the operating system at boot time without leaving traces on ...
Tags: Hardware, Basic Input Output System, computer technology, Brossard
Security researchers released two tools at the Defcon security conference that can be used to crack the encryption of any PPTP (Point-to-Point Tunneling Protocol) and WPA2-Enterprise (Wireless Protected Access) sessions that use MS-CHAPv2 ...
Tags: Microsoft, PPTP, US, Cyberwarfare
Microsoft today launched a security toolkit preview that includes anti-exploit technologies created by one of the three finalists in the company's$250,000 BlueHat Prize contest. Enhanced Mitigation Experience Toolkit(EMET)3.5 features new ...
Tags: Microsoft, anti-exploit tool, security toolkit preview, Las Vegas, EMET
A Black Hat volunteer mistakenly sent to 7,500 conference goers a password-reset email that was initially thought to be a phishing attempt. Organizers of the security conference that started Saturday in Las Vegas, quickly released a ...
Tags: Black Hat, security conference, US, password reset email
Just two weeks before researchers are to disclose bugs in Windows "gadgets" at Black Hat, Microsoft acknowledged unspecified security vulnerabilities in the small pieces of software supported by Vista and Windows 7. To deal with the ...