jimmyLi's blog

The Russian Government offers ~4 million ruble (~$111,000) to the one who decrypts data sent over Tor , an encrypted anonymizing network used by online users in order to hide their activities from law enforcement, government censors, and others. MVD (Russian Ministry of Internal Affairs) issued an notice on July 11, named “ Perform research, code ‘TOR’ (Navy) ”, an open call for Tor-cracking proposals whose winner will be chosen by August 20. Anonymity, which is of everybody’s interest, specially of activists, journalists, researchers, whistleblowers, who uses Tor anonymity service to hide their activities, are now under great threat from both sides. Source: thehackernews

Slightly Mad Studios revealed the Official PC Requirements for the much expected upcoming racing game, Project CARS: MINIMUM SPECS: -CPU – 2.66 GHz Intel Core 2 Quad Q8400, 3.0 GHz AMD Phenom II X4 940 -GRAPHICS – nVidia GTX 260, ATI Radeon HD 5770 -MEMORY – 4Gb RAM, 1Gb VRAM RECOMMENDED SPECS: -CPU – 3.5 GHz Intel Core i7 3700, 4.0 GHz AMD FX-8350 -GRAPHICS – nVidia GT600 series, AMD Radeon HD7000 series -MEMORY – 8Gb RAM, 2Gb VRAM

An estimated 50,000 websites ware compromised so far, due to MailPoet Newsletter plug-in flaw. The security flaw allows attackers to upload PHP files on the server and take control of the website. The flaw was fixed in the version 2.6.7 of the plug-in, so be sure you update it, if using. The Web security firm Sucuri also spotted injection attacks on vulnerable websites, PHP backdoor files being injected into thousand of WordPress websites

European Central Bank released on 24 July 2014 an announcement about the hack: Email addresses and contact data stolen from public ECB website Theft was from database that is separate from any internal system No market sensitive data compromised "The theft came to light after an anonymous email was sent to the ECB seeking financial compensation for the data. While most of the data were encrypted, parts of the database included email addresses, some street addresses and phone numbers that were not encrypted. The database also contains data on downloads from the ECB website in encrypted form." Source: ecb

Thought you escaped the IE vulnerabilities, with the new IE release ? You ware wrong! In 2014, the IE vulnerabilities increase with more than 100% than in 2013, surpassing Java and Flash, according to Infosecurity . Bromium Labs said that: “Both IE exploits released in 2014 (CVE-2014-1776, CVE-2014-0322) used Flash to build the ROP chain and launch shellcode” Source: infosecurity-magazine