Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's visitors to a copy of the site they control.
GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
TN

The Hacker News

1h ago
0 0

Discussion

Start the conversation

Your voice can be the first to spark an engaging conversation.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
'AgentCorruption' Puts AWS Environments At Risk With Single Pro…

A now-patched vulnerability in AWS Bedrock AgentCore could allow an attacker to use one AI chatbot to take over an organization's entire fleet.
DR

Dark Reading

6h ago
0
bleepingcomputer.com
FBI disrupts Chinese hacking tools used to breach critical infr…

The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in att…
NightCurator

NightCurator

6h ago
0
schneier.com
How Technology Empowers—and Imperils—Dictators

This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs. Two weeks after Moscow’s full-scale invasion of Ukraine in March 2…
SS

Schneier on Security

15h ago
0
bleepingcomputer.com
FakeGit malware campaign returns with 17,610 malicious GitHub r…

More than 17, 000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the St…
EK

Emma Klein

16h ago
0
bleepingcomputer.com
Uranium crypto exchange hacker convicted for stealing $53 milli…

A Maryland man was found guilty of stealing more than $53 million after hacking the decentralized crypto exchange Uranium Finance twice in April 2021. [. .. ]
Golden Greta

Golden Greta

20h ago
0
thehackernews.com
Wazza Phishkit Targets Banking, Government, and Manufacturing A…

Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filteri…
TN

The Hacker News

21h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Wazza Phishkit Targets Banking, Government, and Manufacturing A…

Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filteri…
TN

The Hacker News

21h ago
0
thehackernews.com
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certifi…

Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said o…
alex but tired

alex but tired

1d ago
0
thehackernews.com
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver…

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript t…
TN

The Hacker News

2d ago
0
thehackernews.com
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials…

Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence (AI…
Golden Greta

Golden Greta

2d ago
0
thehackernews.com
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run…

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There…
TN

The Hacker News

2d ago
0
thehackernews.com
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other…

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privi…
TN

The Hacker News

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest