Researcher’s Speech on ATM Vulnerability Halted by Vendor
By Bryan on July 1, 2009 | Vulnerabilities, Black Hat, ATM vulnerability
The upcoming Black Hat conference is going to occur without Barnaby Jack’s talk on ATM vulnerability. The researcher with Juniper networks was announced to present the investigation results; however, the speech was postponed by vendor.
Barnaby Jack promised to reveal undefined vulnerability in software used by popular ATM brand. He also announced an actual demonstration of exploiting the gap on a working machine. Both the vendor (that remains anonymous) and the researcher agree on the urgency of the problem. While regular people are concerned about security of their money, the brand of ATM and software won’t be revealed until the vendor fixes the issue.
Although Jack refuses to reveal whether the problem is related to software or operating system itself, the postponed presentation triggered suppositions. Some security experts believe Diebold to be the brand of the ATM. Most other guesses also turn upon machines running Windows operating system.
The conference takes place in Las Vegas at the end of July. Other topics include VoIP vulnerabilities, hacking parking meters, dealing with privacy issues of social networks and other security problems.
More Vulnerabilities news
Firefox 9.0 and four critical flaws fixed
Firefox 9.0 comes with a faster JavaScript engine but the main thing it brings is fixes to four serious vulnerabilities that affect its earlier versions (except v3.6). The security hole could allow an attacker to execute malicious code on a machine using a specially arranged web page. Firefox 9.0 version fixed flaw that enabled the hackers to access out-of-bounds memory areas. Moreover, Firefox 9. Read more.- Major flaw of Adobe Reader and Acrobat 9.x is patched
- Adobe Reader targeted again: Acrobat vulnerability
- From „White hat“ Charlie Miller was turned to „Black hat“
- Temporary remedy against Dugu
- Malware distribution tendencies 2011
- Mac OS X Lion flaw gives opportunity attacker changing victim’s password
- Flaws have been detected in Symantec Endpoint Protection Manager
- New IE bug may expose your cookies
- Secret is not revealed but Facebook’s flaw is repaired
- XSS flaw of Facebook is unpatched and explored for Wall posting
