Silia Maksuti

Critical chain of vulnerabilities in the Bluetooth stack enables 1-click RCE (remote code execution) on German cars. 🚘 🔵🦷💥 Security researcher Mikhail Evdokimov shared a new attack on OpenSynergy BlueSDK that consists of four separate vulnerabilities and leads to a one-click RCE (Remote Code Execution). The attack was named "PerfektBlue." The use of the German word "perfekt," which means "perfect," is a deliberate play on words - not a typo. This is a clear reference to German car manufacturers on which the author tested his kill chain: Mercedes-Benz, Škoda, and Volkswagen. A very impressive piece of work with quite serious results. I'm waiting for a presentation, technical paper, or at least some PoC code to test. Fingers crossed. In the meantime, all the details we have are below. More details: PerfektBlue [Blog]: https://lnkd.in/dskee4JY PerfektBlue - critical vulnerabilities in OpenSynergy Blue SDK [Advisory]: https://lnkd.in/diR2V4vY #automotive #hacking #vulnerability #technology #bluetooth #Volkswagen #skoda #Mercedes #data #infosec #embedded

364

2 Kommentare

🏭 A Deep Dive into the Cyberattack That Took Down Ukraine’s Power Grid – Lessons Still Relevant Today‼️ You might already know what happened in the 2015 Ukrainian power grid cyberattack⚡but I want to refresh the scenario and walk through how the attack actually played out, step by step. Trust me, it's still highly relevant today. This was the first confirmed cyberattack to cause a power outage, cutting electricity to over 225,000 people. Here’s a closer look at how it unfolded: 1. Phishing Emails 📧 Attackers sent targeted emails with malicious Word docs. When opened, they launched BlackEnergy3 malware, giving them access to internal systems. 2. Network Recon & Credential Theft 🕵️‍♂️ Using tools like Mimikatz, the attackers moved laterally, gathered credentials, and mapped the environment. 3. Remote Access Tools Used 🛠️ They leveraged legitimate tools like TeamViewer, RDP, and VNC to quietly take control. 4. SCADA System Hijack ⚙️ They accessed the HMI of substations, opened breakers remotely, and rewrote firmware on converter devices making recovery nearly impossible. 5. Destructive Payload (KillDisk) 💣 KillDisk was deployed to wipe OS files and databases, crippling restoration efforts. 6. Call Center DoS ☎️ The attackers even jammed phone lines to delay incident response. This was a coordinated, military-style attack that blended IT and OT exploitation an early warning of what’s possible when critical infrastructure isn’t secured end-to-end. 🔑 Key Takeaways: ✅ Segment your OT and IT networks ✅ Audit remote access and limit it with MFA ✅ Train staff against phishing ✅ Monitor your SCADA and ICS environments ✅ Run incident response tabletop exercises If you have more insights, resources, or better defense strategies. please drop them in the comments. Your experience and ideas are appreciated and could help someone prevent the next major attack! #CyberSecurity #Ukraine #PowerGrid #SCADA #BlackEnergy #KillDisk #ICS #CriticalInfrastructure #Infosec #CyberAttack #Phishing #IncidentResponse #CyberDefense #KnowledgeSharing #CyberResilience

65

2 Kommentare

“Hacker” was never supposed to be a synonym for “cyber thief.” It was born in basement labs where curiosity outpaced available hardware, and it still belongs to everyone who tears systems apart so we can rebuild them stronger. Ethical hacking is a public service, not a public menace. When we let headlines blur hackers with criminals, we hand narrative power to those who weaponize fear. Reclaim the word. If you break things responsibly, speak up about what responsible looks like: - Clear scope - Written permission - Full disclosure - Shared fixes Our industry’s future talent is listening for that clarity. #CyberSecurity #Hacker

81

12 Kommentare

#BlueDucky is still a relevant tool to scan and identify vulnerable #Bluetooth devices to 0-click attack (CVE-2023-45866). Don't postpone updates of your smart gadgets in 2025 👉 https://lnkd.in/dVafCZWe

756

18 Kommentare

Following the fair and highly democratic elections in Kosovo, the Central Election Commission became the target of numerous cyberattacks. It appears that one of these breaches was successful, leading to an infection of the website. In this incident, the attackers weaponized fake CAPTCHA verification systems—tools normally used to confirm a user’s legitimacy—to deliver a payload containing the Lumma infostealer. Interestingly, our fully updated lab system running Windows Defender did not detect the payload. This prompted me to test the same sample using Cybee. As a behavior-based detection EDR that doesn’t rely on signatures to identify zero-day malware, cybee.ai promptly detected and terminated the malicious payload during its pre-processing routine. I’ve recorded a video demonstration of this test, which you can view

90

13 Kommentare

The screenshot below is from a recent Incident Response case, investigated by my colleague Florian Scheiber. The user "printer" suddenly sprang to life because an attacker brute-forced the VPN login (without Multi-Factor Authentication). This was not the first time a "printer" account was breached in our investigations. This might indicate that companies are setting up regular accounts for service tasks, like printing (??), and equipping the account with a weak password and no MFA. Of course, such a "service account" should never be allowed to log into the network over VPN in the first place. However, this is an interesting example of "User behavior analytics", as this account was never seen logging in over VPN, nor generating such a usage pattern. An anomaly that could stand out in monitoring.

122

6 Kommentare

🚨 #URGENT: Chinese AI Tool "Villager" Downloaded 10,000+ Times - Global Security CRISIS! 🤖💀 BREAKING: A mysterious AI-powered pentesting tool from China called "Villager" is spreading like wildfire across the globe! Cybersecurity experts are TERRIFIED - this could be the beginning of AI-powered cyber warfare! 🔥 What Makes This SCARY: ⚡ 10,000+ downloads in just 2 months 🎯 Fully automated cyberattacks using AI 🛡️ Combines Kali Linux + DeepSeek AI 🚨 Developed by suspicious Chinese group "Cyberspike" with malware ties 💥 Being called "Cobalt Strike's AI successor" 🚀 Key Dangers: AI automates complex attacks that once required expert hackers Lowers barrier for cybercriminals to launch sophisticated attacks Self-destructs to hide evidence after 24 hours 4,201 AI prompts to generate exploits automatically Can adapt attacks in real-time based on what it discovers This represents a NEW ERA of AI-Powered Persistent Threats (AIPTs) that could change cybersecurity forever! "Attackers are moving really fast, automating attacks with AI. Defenders should also be using AI-based products to defend at the same speed." - Dan Regalado, Security Researcher Are we ready for AI vs AI cyber warfare? 💬 Drop a 🤖 if you think AI will dominate cybersecurity! 🔄 SHARE to warn your network about this threat! 👥 TAG someone in cybersecurity who needs to see this! Himanshu Shekhar #Villager #AIPentesting #CyberSecurity #ArtificialIntelligence #ChineseThreat #Cyberspike #PentestingTools #AIWarfare #ThreatIntelligence #CyberAttack #InfoSec #SecurityAlert #CyberCrime #AITools #LinkedInNews #TechNews #Viral #Breaking #GlobalSecurity #AIRevolution ⚠️ The future of cyber warfare is HERE - and it's powered by AI! 🚨⚡

26

New Research: Even your computer mouse isn’t safe anymore. A recent study reveals that ordinary computer mice can act as unintended listening devices. The sensors inside them can capture sound vibrations traveling through your desk and with minimal signal processing, those vibrations can be turned into clear speech. In other words, with the right malware, attackers could potentially eavesdrop on you through your mouse. This is a strong reminder that cybersecurity isn’t just about networks and code it’s about physics, hardware, and the smallest overlooked components in our daily tools. Welcome to the age where everything that moves, listens. #CyberSecurity #InfoSec #ThreatResearch #HardwareSecurity #Privacy #Malware #DataProtection

20

Quick post about WhatsApp, and my support of the US House of Representatives banning the app from all representatives' devices. What's wrong with #WhatsApp you might ask, well, according to the Office of Cybersecurity they have determined, "WhatsApp a high risk to users due to the lack of transparency in how it protects user data, absence of stored data encryption, and potential security risks involved with its use." What that sentence means is the data isn't private and isn't secure. If the messages on your phone are not encrypted - "absence of stored data encryption" then anyone who steals your phone, or other apps on your phone that can read data stored on your phone, can read your WhatsApp messages. I left #WhatsApp when Meta - aka Facebook, bought the app because if the App if free, you are the product. Facebook would only pay $19 Billion for an app if they were going to monetize the data in some way. Here are three ways I can image them monetizing the data from WhatsApp, and I'm not a genius here it's just common sense: 1) Harvest the content of the conversations to learn what people are talking about, like relationships, interests, travel details, etc. 2) Correlate accounts on WhatsApp to user accounts in Facebook to better learn which accounts are related to other accounts, determine relationships, and suggest new "friends" in Facebook. 3) Better target ads on Facebook based on the content of the messages in WhatsApp. I don't use WhatsApp, I use Signal Messenger, it's also free, it is run by a non-profit, and it is secure. https://lnkd.in/g28gEswf

28

7 Kommentare

For Facebook and Instagram users If you’re in the EU and don’t want your data used for Meta's AI training, here’s how to object: Facebook: https://lnkd.in/dnbZcqKC Instagram: https://lnkd.in/dVCD8fyG You will need to log in, but do not need to provide a reason Do this before 27 May to keep your existing public data outside of the AI training. #Privacy #GDPR #AI #Meta #DataProtection #DigitalRights #AITraining

39

4 Kommentare

Why is this post in English? Because corporations must understand that poor processes and careless customer service can have an instant global reach. One single story can travel across the globe within seconds. And I sincerely hope this post reaches the right audience in Ingolstadt, where the brand’s reputation is shaped. I recently purchased a brand new electric Audi Q6 e-tron. After only 2,117 km, a critical failure occurred: the air suspension stopped working, leaving the car undriveable. Now, call me old-fashioned, but I never considered an air suspension to be a consumable part. Its failure on a new premium car is not just inconvenient – it’s a reputational red flag for the entire brand AUDI AG What followed was just as disappointing: - Authorized service centers in Slovakia and Austria offered only extremely delayed repair dates. - The car was eventually towed to the original dealer, but diagnosis didn’t even start right away. - Despite Audi’s “mobility guarantee,” no replacement car was provided, because none was available. - Days later, repair parts were only then being ordered, with no clear repair timeline. And most importantly: instead of showing genuine care, Audi Slovensko simply delegated the whole issue to the dealer, citing “Audi guidelines” – as if responsibility for a brand-new vehicle could be outsourced. When you buy a new premium car and face a defect you did not cause, the very least you expect is that the brand itself shows real interest and takes ownership. That didn’t happen here. The outcome? A premium electric car that cannot be driven, no replacement vehicle, a “mobility guarantee” that exists only on paper, and a brand that failed to stand by its customer. Premium is not about marketing slogans. Premium is when the brand takes responsibility the moment something goes wrong. And the irony? The failure hit exactly the part that should embody Audi’s famous motto – “Vorsprung durch Technik”. Except in this case, the “Technik” collapsed after just 2,117 km. AUDI AG Audi Slovensko

28

8 Kommentare