Security Alerts & News
by Tymoteusz A. Góral

History
#677 The critical hole at the heart of our cell phone networks
In February 2014, the US ambassador to Ukraine suffered an embarrassing leak. A secret conversation between him and US Assistant Secretary of State Victoria Nuland got posted to YouTube, in which Nuland spoke disparagingly about the European Union.

The conversation occurred over unencrypted phones, and US officials told reporters they suspected the call was intercepted in Ukraine, but didn’t say how. Some people believe it occurred using vulnerabilities in a mobile data network known as SS7, which is part of the backbone infrastructure that telecoms around the world use to communicate between themselves about how to route calls and text messages.

A little-noticed report released by the Ukrainian government a few months after the leak gives credence to this theory. Although the report didn’t mention the ambassador, it revealed that for three days in April that year, location data for about a dozen unidentified mobile phone customers in Ukraine got mysteriously sent to a Russian telecom using SS7 vulnerabilities. Text messages and phone calls of some of those customers also got diverted to Russia, where someone could have eavesdropped on the conversations and recorded them.
Read more
#682 A dramatic rise in ATM skimming attacks
#681 Phony Google update spreads data-stealing Android malware
#680 U.S. labels Switzerland an internet piracy haven
#679 Google patches 9 security flaws in new Chrome browser build
#678 GCHQ has disclosed over 20 vulnerabilities this year, including ones in Apple iOS
#677 The critical hole at the heart of our cell phone networks
#676 AV comparatives: Anti-Spam Test (PDF)
#675 Locky ransomware spreads via Flash and Windows kernel exploits
#674 Almost two-thirds of software companies contributing to open source
#673 Hacking Slack accounts: As easy as searching GitHub
#672 Toymaker’s website pushes ransomware that holds visitors’ files hostage
#671 Google's OnHub is the first WiFi router to support IFTTT
History
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12