Thursday, August 6, 2015

Hackers turn off Tesla Model S at low speed: FT

Hackers turn off Tesla Model S at low speed: FT


[BENGALURU] Cybersecurity researchers said they took control of a Tesla Motors Inc Model S car and turned it off at low speed, one of six significant flaws they found that could allow hackers to take control of the vehicles, the Financial Times reported.
Kevin Mahaffey, chief technology officer of cybersecurity firm Lookout, and Marc Rogers, principal security researcher at Cloudflare, said they decided to hack a Tesla car because the company has a reputation for understanding software than most automakers, the FT said.
"We shut the car down when it was driving initially at a low speed of five miles per hour," the newspaper quoted Mr Rogers as saying. "All the screens go black, the music turns off and the handbrake comes on, lurching it to a stop." The hack will be detailed at cybersecurity conference Def Con in Las Vegas on Friday, the FT said.
Tesla is issuing a patch, which all drivers will have by Thursday, to fix the flaws, the FT said.


Tesla could not be immediately reached for comment outside regular U.S. business hours.
The hack on Tesla follows a similar attack on Fiat Chrysler's Jeep Cherokee last month that prompted the company to recall 1.4 million vehicles in the United States.
REUTERS

Google, Samsung to issue monthly Android security fixes

Google, Samsung to issue monthly Android security fixes


[LAS VEGAS] Google Inc and Samsung Electronics Co will release monthly security fixes for Android phones, a growing target for hackers, after the disclosure of a bug designed to attack the world's most popular mobile operating system.
The change came after security researcher Joshua Drake unveiled what he called Stagefright, hacking software that allows attackers to send a special multimedia message to an Android phone and access sensitive content even if the message is unopened. "We've realised we need to move faster," Android security chief Adrian Ludwig said at this week's annual Black Hat security conference in Las Vegas.
Previously, Google would develop a patch and distribute it to its own Nexus phones after the discovery of security flaws.
But other manufacturers would wait until they wanted to update the software for different reasons before pushing out a fix, exposing most of the more than 1 billion Android users to potential hacks and scams until the fix.


Mr Ludwig also said Google has made other security changes. In an interview, he told Reuters that earlier this year the team broke out incidence rates of malicious software by language. The rate of Russian-language Androids with potentially harmful programs had spiked suddenly to about 9 per cent in late 2014, he said.
Google made its roughly weekly security scans of Russian phones more frequent and was able to reduce the problems to close to the global norm.
Mr Ludwig said improvements to recent versions of Android would limit an attack's effectiveness in more than nine out of 10 phones, but Mr Drake said an attacker could keep trying until the gambit worked. Mr Drake said he would release code for the attack by Aug 24, putting pressure on manufacturers to get their patches out before then.
Nexus phones are being updated with protection this week and the vast majority of major Android handset makers are following suit, Mr Ludwig said.
Samsung Vice President Rick Segal acknowledged that his company could not force the telecommunications carriers that buy its devices in bulk to install the fixes and that some might do so only for higher-end users. "If it's your business customers, you'll push it," Segal said in an interview. Samsung is the largest maker of Android phones.
Mr Ludwig said many Android security scares were overblown. He added that only about one in 200 Android phones Google can peer into have any potentially harmful applications installed at any point.
Mr Drake noted that those figures exclude some products, including Fire products from Amazon, which use Android.
As with Apple's iPhones, the biggest security risk comes with apps that are not downloaded from the official online stores of the two companies.
Stolen files from Hacking Team, an Italian company selling eavesdropping tools to government agencies around the world, showed that a key avenue was to convince targets to download legitimate-seeming Android and iPhone apps from imposter websites.
REUTERS

Russia suspected in cyber attack on US military email

Russia suspected in cyber attack on US military email


[WASHINGTON] Russia is the leading suspect in a sophisticated cyber attack on the unclassified email network of the US military's Joint Staff that prompted the Pentagon last month to restrict access to portions of that network, US officials said on Thursday.
Early reports firmly linked Russia to the attack, said one US official, who declined to be named since the investigation is still underway. "It was a spearphishing attack traced to that country," said the official, when asked about Russia's possible involvement. Spearphishing emails purport to be from colleagues.
A second official, who also spoke on condition of anonymity, described Russia as a leading suspect but cautioned that it would take time for investigators to firmly attribute blame.
The Pentagon declined comment on the investigation.



In late April, US Defense Secretary Ash Carter blamed Russian hackers for a cyber intrusion on an unclassified US military network this year, saying they discovered an old vulnerability that had not been patched.
In that case, Mr Carter said the Pentagon quickly identified the compromise and had incident responders "hunting the intruders within 24 hours." In this latest case, the US military's Joint Staff, which employs about 2,500 civilian and uniformed personnel, have seen their unclassified email access severely restricted since the last weekend of July. The rest of the Pentagon appeared to be unaffected.
Officials told Reuters the attack bore the hallmarks of the actions of a foreign state, as opposed to a less sophisticated hacker.
Dmitri Alperovitch, chief technology officer and co-founder of CrowdStrike, a cybersecurity firm, said his company had seen a "massive escalation" in cyber attacks tied to the Russian government since sanctions were imposed last year over Moscow's actions in Ukraine.
He said he had no information on the alleged attack on the Joint Chiefs of Staff network, but his firm had detected a large number of attacks against US national security agencies and commercial companies by a hacker group called "Cozy Bear" that had clear ties to the Russian government.
Cozy Bear engaged in a variety of cyber attacks ranging from spearphishing to more sophisticated and complex attacks. The latest set of attacks used hundreds of emails with a zipfile attachment that, if double-clicked, could introduce the malware to an organization's networks, Mr Alperovitch said. "Once they get a beachhead, their tradecraft is very, very good," he said.
REUTERS

Hollande and Tsipras want Greek bailout agreed in late August

Hollande and Tsipras want Greek bailout agreed in late August


[ATHENS] A new bailout for Athens should be agreed by late August, Greek Prime Minister Alexis Tsipras and French President Francois Hollande said on Thursday.
Greece is in negotiations with the European Union and International Monetary Fund for as much as 86 billion euros (S$130 billion) in fresh loans to stave off financial ruin and economic collapse.
Mr Tsipras said the new deal would be agreed soon after Aug 15; Mr Hollande said by the end of the month. The two men were speaking in Egypt on the sidelines of a ceremony to inaugurate the New Suez Canal.
It will be Greece's third bailout since its financial troubles became evident more than five years ago. Negotiations in the past have been heated, but all sides are reporting progress this time around.


An accord must be settled - or a bridge loan agreed - by Aug 20, when a 3.5 billion euro debt payment to the European Central Bank falls due.
In a statement, Tsipras's office in Athens said he and Mr Hollande had agreed that the deal "should and could be concluded right after Aug 15".
That would give enough time for the Greek parliament to approve it to enable the Aug 20 repayment to the ECB. "They also agreed that everything should be done for the Greek economy to rebound, especially after the effects of the banking crisis," the statement said.
Greece's banks are in need of recapitalisation by 10 billion to 25 billion euros, according to the EU.
France has been generally supportive of Greek requests for aid, contrasting with a harder line taken by Germany which has demanded stringent reform and austerity measures from Athens.
Mr Hollande, speaking to reporters in Egypt, said: "The objective is for the negotiations on the (bailout) programme to be concluded at the end of August. We know it's difficult but we must make sure that the conditions are met, in a good spirit. "For now I believe the atmosphere is right and discussions are going in the best of directions," he added.
A European Commission spokeswoman said earlier in Brussels that talks with Greece on a third bailout were moving ahead "in a satisfactory way" and reaching an agreement was possible before Aug 20.
CASH CRUNCH
However, German newspaper Bild cited a government official saying that an agreement in the next two weeks is "not achievable".
If a pact was not secured, Greece might be offered a bridge loan to cover the ECB payment, but Athens has said it only wants to sign up to strict conditions for a full bailout, not a temporary one.
Part of the money is expected to go to recapitalise Greek banks, a factor that has hammered banking sector stocks for most of this week because it hurts existing shareholders.
The stocks surged 17.8 per cent on Thursday, but only after a three-day rout that wiped 63 per cent from their market value.
The IMF said that Greece had paid it about 186.3 million euros in interest charges that were due it on Thursday.
REUTERS

728 X 90

336 x 280

300 X 250

320 X 100

300 X600