Anonymous ID: 0b6b22 May 1, 2021, 1 a.m. No.13555756   ๐Ÿ—„๏ธ.is ๐Ÿ”—kun

April 23, 2021

 

This Week In Security: Signal Hacking the Hacker

 

"One of those companies is Cellebrite, a security company that specializes in offensive and forensic security for government and law enforcement. While Cellebrite canโ€™t read Signal messages over the network, they do produce a forensic kit that can pull messages off a phone, given physical access to it."

 

https://hackaday.com/2021/04/23/this-week-in-security-namewreck-signal-hacks-back-updates-and-more/

 

ATTACHED: Q Drop 4670, 4672

 

Q also use word SIGNAL / signal in other drops that might be connected to the app.

Anonymous ID: 0b6b22 May 1, 2021, 1:13 a.m. No.13555782   ๐Ÿ—„๏ธ.is ๐Ÿ”—kun   >>5787 >>5799

>>13555587

NOTABLE

 

New DNS vulnerabilities "WRECK" put millions of IoT devices at risk

 

"According to researchers at Forescout, the nine vulnerabilities have been dubbed โ€œNAME:WRECK,โ€ and they affect four popular TCP/IP stacks: FreeBSD, Nucleus NET, IPnet, and NetX. These vulnerabilities relate to Domain Name System (DNS) implementations, causing Denial of Service (DoS) or Remote Code Execution (RCE), allowing attackers to target devices offline or take control of them."

 

https://www.itpro.co.uk/network-internet/internet-of-things-iot/359200/new-dns-vulnerabilities-put-millions-of-iot-devices

Anonymous ID: 0b6b22 May 1, 2021, 1:15 a.m. No.13555787   ๐Ÿ—„๏ธ.is ๐Ÿ”—kun

>>13555782

 

Another quote from sauce:

 

"Researchers said that unless urgent action is taken to adequately protect networks and the devices connected to them, โ€œit could be just a matter of time until these vulnerabilities are exploited, potentially resulting in major government data hacks, manufacturer disruption or hotel guest safety and security.โ€"

Anonymous ID: 0b6b22 May 1, 2021, 1:32 a.m. No.13555822   ๐Ÿ—„๏ธ.is ๐Ÿ”—kun   >>5829

>>13555799

 

Thanks for the info. I was thinking that client vulnerability could become a back-door to server vulnerability, but what do I know. kek.

 

What came to mind was world famous DNS attack:

 

"The 2016 Dyn cyberattack was a series of distributed denial-of-service attacks (DDoS attacks) on October 21, 2016, targeting systems operated by Domain Name System (DNS) provider Dyn."

 

https://en.wikipedia.org/wiki/2016_Dyn_cyberattack