Myth busting: unsolved hacking mysteries

Security weekly

Author

Disable User
October 13, 2022

Hi and welcome to another Security weekly. Where we laugh, we cry and share the latest and greatest in security and tech news.

Did you know a dog's smell is at least 40 times better than ours? Just like this blog will make you 40 times more interesting if you bring it up at the bar.

In this week's edition:

❤️‍🔥 Fortinet deserves some love for how they fix a critical vulnerability🧌 Myths & hackers: unsolved hacking mysteries🔥 the quick and dirty

Reading time: 02:52

Fortinet firewalls need some love to fix a critical vulnerability

Another day another dollar. This time in the form of a critical vulnerability.

The vulnerability makes it possible for attackers to access the Fortinet admin interface. Through customized HTTP(S) requests the perpetrator is able to mislead the firewall, and gain access remotely. Making it vulnerable to unwanted visitors.Luckily Fortinet was quick as always and provided a workaround straight away with the promise of a patch to follow-up.

At this time the patch is already released and available for deployment.

Although I really appreciate the speed at which Fortinet patches issues, I found this to be a bit confusing..

Myths & hackers: unsolved hacking mysteries

I'm sure I'm not the only one who's a big fan of mystery and myths?

When I was younger I DEVOURED every program about mythological topics. I even got a subscription on a myth magazine.You know the one that come every month with a card about a mythological monster and sometimes a gadget. Sweet jezus.. take me back to the Jersey Devil

But as most thing you do when growing up, you grow out of them, forget about them, you move on.

Until I stumbled across an article by Securelist: The TOP 10 unattributed hacking mysteries.

Not nearly as much fun or imaginative as mythological creatures, but still interesting nonetheless.Enough for me to go on a Google search adventure to find some unsolved hacking mysteries.

Two of them really got my interest, here's which:

THE USB THIEF - A pretty little bit of malware that is deployed from a USB thief.Discovered in 2016 by ESET, they found this malware to be quite fascinating. The USB which ESET retrieved contained 4 files who run in a particular order, and the main objective is to steal data which then is written to the USB drive and encrypted. Making it difficult to get the data back from the USB.The malware itself is also encrypted, so it could not be examined.That's some serious Jamez Bawnd shit if you ask me. (yes, I wrote Jamez Bawnd, brings more swag to it)It was only seen once, and never discovered who made or used it.

Ministry of Defense Satellite Hacked - In 1999 the English' Ministry of Defense's satellite got hacked. The satellite was used in a coordinated attack, but moments before the satellite was going to be used, hackers gained access and re-routed the satellite so it was useless.The hackers were never caught, and no arrests were made.Pretty sure it was one of the lads.

The quick and dirty

Security like I'm five

Don't have time for hours of research? Don't have 20 years of experience in security? Me neither, but I gotchu fam.In Security like I'm five I cover a range of security topics. I do all the hard work, and explain it to you in a practical matter. Lot's of meme's too. Good stuff, good stuff.This and Security weekly conveniently delivered to your mailbox a couple of times a week, for free.Pretty sweet deal if you ask me.

So sign up for the newsletter and be enlightened! (don't set the bar too high tho)