ChipAndPin Technology hacked – Breaches Only a Matter of Time

Samy Kamkar is at it again: http://www.net-security.org/secworld.php?id=19155   Samy Kamkar is a unique hacker as he hacks with small hardware devices such as his previous device OpenSesame(Opens garage doors): http://oversitesentry.com/hackers-find-ways-to-attack/   My last post was to explain the process of hacking a bit, which Samy uses to just figure out a way to do things … Read more

What Is An Advanced Firewall? UTM? NGFW?

UTM is an acronym for Unified Treat Management  but it really is just another name for “New” Firewall. NGFW is an acronym for Next Generation Firewall – and it was the literal explanation that the marketers of Cisco/Checkpoint/Fortinet wanted to make a distinction with the older packet filter firewalls. The marketers at Watchguard wanted to … Read more

BaaS – Potential Cloud Insecurity

BlackHat2015 Europe has an interesting presentation on Backend-as-a-Service https://www.blackhat.com/docs/eu-15/materials/eu-15-Rasthofer-In-Security-Of-Backend-As-A-Service.pdf   the image above explains in a picture what the backend is – i.e. an app uses the BaaS SDK (Software Development Kit) functions  to connect into the cloud. Cloud can be Parse, Cocoafish, StackMob, Kinvey, Cloudmine, AmazonwebServices, BAASBOX, and mobeelizer. These “cloud services” have specific … Read more

Are You Afraid Of Malware Ads?

Maybe you should be: https://blog.malwarebytes.org/exploits-2/2015/11/magnitude-exploit-kit-activity-increases-via-malvertising-attacks/ Also the .pw domain should be blocked – (Palau Pacific Island). The malware tries to insert itself into your computer while you are watching an ad. This is what should happen – where your anti-virus /anti-malware software protects you from these unseen attacks. Guess what is in the malware? Did … Read more