Researchers Claim to Crack Car Alarm Code
296537
Researchers said Saturday they have found a way to crack the code used in millions of car keys, a development they said could allow thieves to bypass the security systems on newer car models.
252901
Safety experts say the influx of electronics is turning cars into sometimes chaotic â and distracting â moving family rooms.
48525
The British government says that forgery of their new biometric passports is inconceivable, but a security expert has demonstrated a successful crack of the embedded RFID chip and its info. And he did it without taking the document out of its mailing envelope.
472866
An anonymous hacker who claimed last week to have found a way to generate valid Windows Vista activation codes now says his crack was a joke. But some users who tried it say it worked for them.
36812
In a twist, security researchers have discovered a group of hackers who are exploiting a new category of victims -- aspiring Internet scammers.A Moroccan group called &quot;Mr. Brain&quot; is offering free phishing kits on a Web site hosted in France, said Paul Mutton, Internet services developer at Netcraft, a security company in Bath, England.The software packages make it easy to quickly set up a fraudulent Web site mimicking a known brand in order to trick people into divulging credit card details or bank account numbers. Templates for spam e-mail are also included, targeting brands such as Bank of America, eBay, PayPal, and HSBC.Mr. Brain&#39;s Web site lists the kits and what kind of details each one is capable of collecting, such as usernames, passwords or Social Security numbers. Netcraft posted screenshots on its Web site.But what the aspiring scammer doesn&#39;t know is that the phishing kits are designed to send any sensitive information that&#39;s collected back to e-mail accounts controlled by Mr. Brain, Mutton said.&quot;Obviously, that&#39;s why they are offering this stuff for free,&quot; Mutton said. &quot;I was impressed by it.&quot;Mr. Brain hides the special e-mail function in a blend of PHP scripts, one of which is encrypted, Mutton said. Just in case someone decrypts it, Mr. Brain has written at the top of the file &quot;Don&#39;t need to change anything here. Created by Mr. Brain Morocco Team.&quot;The scheme seems to be targeted at new phishers, Mutton said. Mr. Brain benefits since other wannabe scammers shoulder the cost and risk of finding an ISP (Internet Service Provider) to host the phishing site, Mutton said.&quot;Essentially, they&#39;re exploiting all these novice phishers -- basically getting them to do all the hard work,&quot; Mutton said.It&#39;s difficult to tell without further research how many of the free phishing kits linked with this latest scam are live on the Internet, but Mutton said Netcraft noticed one earlier this month targeting Bank of America.&quot;Clearly, these are actively being used in phishing attacks,&quot; Mutton said.
91733
Have you ever dreamt of smashing up that  car in your neighborhood whose burglar alarm has the bad habit  of going off in the middle of the night?
98022
A new service that makes mobile phones  emit a piercing electronic scream if stolen and automatically  blocks access to sensitive data was launched in Britain on  Monday.
10046
A recent study by researchers from the Bristol University was published in the journal Thorax. The report is likely to cause an alarm among pregnant women and mothers of newly born.
521756
This holiday season's hottest gadget gift for music-loving athletes might also be a potential security nightmare, the likes of which might have come straight from the latest James Bond film, according to researchers at the University of Washington.
498738
A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.
687532
A security researcher warned today that there are ways the sleek device could potentially be compromised.
242478
Several experts and officials said that the technology behind two thwarted car bombings in central London seemed to be amateurish.
744409
Security researchers release code that shows how a pair of widely used technologies could be misused to take control of a victim's Web browsing experience.
37871
Police forces test a new DNA technique which scientists say will boost crime detection rates.
511947
often via spam-style blastings that plague mailboxes worldwide -- is fake, a British researcher said Tuesday. Dr. Nic Wilson of the School of Pharmacy
222388
In what may be the first step toward a major security problem, security researchers have released attack code that will crash Windows machines that are susceptible to a recently patched bug in the operating system.The code is not available to the general public. It was released Thursday to security professionals who use Immunity&#39;s Canvas computer security testing software. It causes the Windows system to crash but does not let the attacker run malicious software on the victim&#39;s system.&quot;It reliably crashes Windows machines,&quot; said Dave Aitel, Immunity&#39;s CTO. &quot;In fact, it blue-screened our print server by accident -- this is a broadcast attack, after all.&quot;That&#39;s the biggest concern for security experts who worry that a more dangerous attack may soon follow as researchers dig further into the vulnerability. The bug is particularly troublesome for two reasons. First, it affects a widely used Windows component that is turned on by default. Worse, no user interaction is required to trigger the flaw, meaning that it could be exploited in a self-copying worm attack.Microsoft patched the flaw in its MS08-001 update, released last week, but it takes time for enterprise users to test and install Microsoft&#39;s patches.The flaw lies in the way Windows processes networking traffic that uses IGMP (Internet Group Management Protocol) and the MLD (Multicast Listener Discovery) protocol, which are used to send data to many systems at the same time. The protocols are used by a range of applications, including messaging, Web conferencing, and software distribution products.For a worm attack to work, the attacker would have to send specially crafted packets to a victim&#39;s machine, which could then allow the attacker to run unauthorized code on the PC. The worm could then spread from computer to computer within a LAN but would generally be stopped from travelling to another network by a firewall.A reliable exploit could be combined with malicious botnet software, giving attackers a way to widen the size of their networks of infected computers. The flaw is rated critical for Windows XP and Vista systems, according to Microsoft.After patching the flaw, Microsoft published some technical research indicating that it would be hard for an attacker to exploit this vulnerability.But Aitel believes that Microsoft may have overestimated how difficult it would be to create reliable attack code. Because it could spread so quickly through a network, a reliable exploit &quot;is going to be worth the effort,&quot; Aitel said. &quot;You can be assured lots of smart people are working on it.&quot;Part of the problem is that IT staff may not be aware of how widely these multicasting protocols are used within their companies, said Russ Cooper, a senior network consultant with Verizon Business. &quot;I am extremely worried that this becomes a problem simply because people are unaware of what they&#39;re already allowing,&quot; he said.If one machine were infected within a network subnet, its attempt to attack other machines might not even be noticeable, he added. &quot;It may look like a large file transfer.&quot;
611813
A tool has been posted online that can apparently crack Vista's activation process by applying brute force -- and lots of time -- to come up with valid product keys. But the author is now telling users it's wrong to use it.