Dead Drop 25 / Cali Voter DB, VBulletin 0-day, Monero Mining, No Password Printers


Welcome to Dead Drop number 25, your look at what’s happening in the world’s of computer security and digital freedom. All source links mentioned are below. All footage used falls under fair-use guidelines for news and comment.

—————-

Shop: http://N-O-D-E.net/shop/
Patreon: http://patreon.com/N_O_D_E_
BTC: 17HqC7ZzmpE7E8Liuyb5WRbpwswBUgKRGZ
Newsletter: http://eepurl.com/ceA-nL
Music: https://archive.org/details/Fwawn-FromManToGod

—————-

BREACHES

Cali Voters
https://mackeepersecurity.com/post/cyber-criminals-steal-voter-database-of-the-state-of-california
https://www.youtube.com/watch?v=H3P0lW94L2Q

Tripwire
https://www.bleepingcomputer.com/news/security/data-breach-at-website-with-45-million-users-discovered-during-academic-research/
https://github.com/ccied/tripwire/
https://www.sysnet.ucsd.edu/~jdeblasio/papers/tripwire-imc17.pdf

VULNERABILITIES

VBulletin
https://thehackernews.com/2017/12/vbulletin-forum-hacking.html
https://www.youtube.com/watch?v=5h8JJRH_UgI

MOZILLA

Mr Robot Extension
https://sircmpwn.github.io/2017/12/16/Firefox-is-on-a-slippery-slope.html
https://gizmodo.com/mozilla-slipped-a-mr-robot-promo-plugin-into-firefox-1821332254
https://www.bleepingcomputer.com/news/software/mozilla-angers-firefox-users-after-force-installing-mr-robot-promo-add-on/

MINING

Android Monero Mining
https://securelist.com/jack-of-all-trades/83470/
https://www.bleepingcomputer.com/news/security/android-malware-will-destroy-your-phone-no-ifs-and-buts-about-it/

Apache Monero Mining
https://f5.com/labs/articles/threat-intelligence/cyber-security/zealot-new-apache-struts-campaign-uses-eternalblue-and-eternalsynergy-to-mine-monero-on-internal-networks

INTERNET OF FAILS

IP Door Access
https://threatpost.com/vulnerability-found-in-two-keyless-entry-locks/129132/
https://www.secureworks.com/research/advisory-2017-001
https://www.scmagazine.com/vulnerabilities-found-in-amag-technology-symmetry-ip-based-access-door-controllers/article/713740/
https://www.youtube.com/watch?v=jRhb4_O3IIg

No Password Printers
https://threatpost.com/user-gross-negligence-leaves-hundreds-of-lexmark-printers-open-to-attack/129187/
https://www.youtube.com/watch?v=4dypOxfkbkY

INTERNET FREEDOM

Net Neutrality
https://www.youtube.com/watch?v=fmQn_pDnUDE

Related Post: