• After CIA leaks, tech giants scramble to patch security flaws

    Home » Forums » Cyber Security Information and Advisories » Code Red – Security/Privacy advisories » After CIA leaks, tech giants scramble to patch security flaws

    Author
    Topic
    #100012

    After CIA leaks, tech giants scramble to patch security flaws
    http://www.zdnet.com/article/tech-giants-scramble-for-cia-hacking-fixes-most-flaws-patched/

    Apple, Microsoft, and Google are analyzing leaked CIA documents to see if their products are affected, but security researchers say that most of the flaws have long been fixed.

    By Zack Whittaker for Zero Day | March 9, 2017 — 16:58 GMT (08:58 PST) | Topic: Security

    Image: file photo
    (Image: file photo)

    Several tech giants have said they are examining a trove of documents leaked earlier this week that purport to show the CIA’s ability to hack into phones, computers, and smart TVs.

    The documents, released by WikiLeaks, did not contain exploit code that could be used by hackers to carry out attacks, but the documents do provide details of vulnerabilities that may help security researchers identify some flaws in tech products, including Android devices and iPhones.

    Apple, Google, Microsoft, and Samsung were all named in the thousands of released documents, which are believed to have come from the CIA’s Center for Cyber Intelligence.

    The CIA has so far not commented directly on the authenticity of the leak, but on Wednesday it suggested that the release had damaged national security by helping its adversaries “with tools and information to do us harm.”

    …….

    --------------------------------------

    1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB

    SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64

    CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
    Graphics Radeon RX 580, RX 580 ONLY Over Clocked
    More perishable

    2xMonitors Asus DVI, Sony 55" UHD TV HDMI

    1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
    1xOS W8.1 Pro, NAS Dependent, Same Sony above.

    -----------------

    Viewing 3 reply threads
    Author
    Replies
    • #100024

      If the CIA and others have really been hacking large numbers of American citizens, then whoever leaked the documents has done America a great service.

      Group "L" (Linux Mint)
      with Windows 10 running in a remote session on my file server
      2 users thanked author for this post.
    • #100055

      So I wonder if Windows will get a patch.

      1 user thanked author for this post.
    • #100064

      So I wonder if Windows will get a patch.

      That is a really good question! Is it possible for them to fix it???

      I would guess we will have to wait and see…..

      --------------------------------------

      1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB

      SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64

      CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
      Graphics Radeon RX 580, RX 580 ONLY Over Clocked
      More perishable

      2xMonitors Asus DVI, Sony 55" UHD TV HDMI

      1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
      1xOS W8.1 Pro, NAS Dependent, Same Sony above.

      -----------------

    • #100187

      Most of what has been analysed is old, already known stuff. MS says that W10 is safe but the older versions may not be – did you expect them to say something else!!! All the tech companies named are issuing statements (PR mostly) and some software companies are issuing patches (belated for the most).

      WL say they have only released the first barrage of leaks, there is more to come. Let’s see if there is anything in the next round that deserves genuine panic.

      I like the story about the user who asked his Echo (Alexa) if it was in contact with the CIA and it did not reply and just turned itself off. I wonder what Hello, Siri and Cortana does when asked.
      – As far as Smart TVs spying on you – that is not the CIA, that is the manufacturer. They are selling your private data to third parties and advertisers.

      • #101770

        It will interpret “CIA” as the Culinary Institute of America

        Important links you can use, without the monetization pitch = https://pqrs-ltd.xyz/bookmark4.html
        1 user thanked author for this post.
    Viewing 3 reply threads
    Reply To: After CIA leaks, tech giants scramble to patch security flaws

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: