exploit

Infopackets Reader Paul E. writes: " Dear Dennis, I read with interest John Lister's article on the WPA2 exploit (KRACKs) , which explains how hackers can break into any WiFi network. I have 4 TPLink routers in my home that I use as 'hot spots' in ... various locations. As per your suggestion, I have visited TPLink's website for firmware updates for my routers, but there are none available. I am worried that someone is going to break into my network and steal my financial information. What can I do? " My response: I own a few TP Link routers as well and what I've done is flashed the routers using ... (view more)

Around 465,000 pacemakers have been 'recalled' over hacking fears. However, the St Jude Medical brand devices will be patched with a software update rather than removed and replaced. The pacemakers are radio controlled to allow doctors to alter the ... specific rhythm they aim for when regulating a heart beat. This radio control means doctors can adjust to the patients changing needs without the need to remove the pacemaker for alterations. That's important as the surgery for such a removal is inherently risky. No Signs Of Hack Attacks While the precise details haven't been revealed for obvious ... (view more)

Microsoft has issued three updates to fix flaws in older, unsupported versions of Windows. It's an unusual move that follows the discovery that both the National Security Agency (NSA) and outside hackers are exploiting the flaws , similar to the one ... that allowed the WannaCry Ransomware worm to spread just a few weeks ago. The updates cover both Windows and Windows Server editions going right back to XP . They'll be issued through the usual automated updates, which means people on Windows 8.1 and later shouldn't need to do anything. Those on earlier systems may need to manually ... (view more)

The FBI has asked businesses for urgent help dealing with a new form of ransomware. The attack is designed to compromise an entire network, rather than just a single computer. Ransomware is a form of malware that damages a computer in a way that's ... usually reversible - but only by the malware creators. Commonly it involves encrypting files or even an entire hard drive so that they can't be accessed without a key, which is only provided when the victim hands over a fee. Last month the FBI put out a warning of a form of ransomware dubbed MSIL/Samas.A. It targets a security vulnerability ... (view more)

Dell has confirmed it shipped computers with a major built-in security flaw. The unintentional move could expose users to a significant risk of hackers accessing their personal data. The issue at hand deals with an exploit in the secure sockets ... layer (SSL). Specifically, Dell has inadvertently shipped PCs and laptops with both a trusted root certificate and key, when only the trusted certificate should have been allowed. The idea behind the mishap was to help identify Dell computers when they were connected to Dell's online support service. In this case, the computer's model number could be ... (view more)

Infopackets Reader Steve W. writes: " Dear Dennis, Thanks for your articles on how to reset the admin password in Windows XP , and Windows 7 and 8 . I have a friend who is locked out of his Windows Vista machine and was wondering if the instructions ... for resetting the admin password are similar? If not can you tell me how to reset a user account password for Windows Vista? " My Response: Resetting an admin or user password for Windows Vista uses similar methods previously discussed. Note that if you can login as the "Administrator" user, you can also use this account to reset any user password ... (view more)

Earlier this year, a hack was discovered that would allow Windows XP users to continue receiving security updates , despite Microsoft no longer officially supporting the system . However, experts are now warning users that the hack guarantees ... neither security, nor stable computing. Windows XP: No More Security Updates Microsoft finally pulled the plug on Windows XP in April this year , including all future security updates. The problem is that many people still continue to use the operating system, despite significant security risks . The Windows Embedded hack essentially tricks Windows XP ... (view more)

Microsoft has patched a security vulnerability that somehow evaded detection for roughly twenty years. The bug has reportedly existed in every single version of the Windows operating system since Windows 95. According to reports, the bug can allow a ... hacker to execute code remotely when a user visits a malicious website. IBM security expert Robert Freeman says the bug is related to a flaw in VBScript, which first debuted with Internet Explorer 3.0 in the late 1990s. Freeman says that the bug remains invulnerable to Microsoft's anti-exploitation tools, otherwise known as the Enhanced ... (view more)

A new report suggests that many users who use the Windows Update feature to automatically download and install the latest security patches from Microsoft do not have an up-to-date operating system. Windows Update gives users two options: manual and ... automatic updates. With the manual option, users must initiate security downloads themselves, which can be carried out when it's most convenient. On the other hand, the automatic option alerts users to necessary updates and begins the download and installation process without requiring user input. Most Windows Users Delay Automatic Updates The ... (view more)

Microsoft has issued a fix for an Internet Explorer security vulnerability so serious that it prompted the United States' Department of Homeland Security to warn Americans against using the popular web browser. Somewhat surprisingly, Microsoft has ... also provided a fix for Windows XP -- even after promising not to do so. The Internet Explorer (IE) flaw was discovered last weekend. If left unpatched, it could allow hackers unprecedented access to a remote PC. Security experts say that Internet Explorer users could become instantly infected simply by visiting a malicious website or clicking ... (view more)