CNN

Researchers at ERPScan discovered that SAP’s POS product, that is a component of the company’s SAP for Retail giving, was stricken by many flaws. Specifically, the system’s server element, Xpress Server, lacked necessary authorization checks for vital practicality. This allows AN assailant with access to the system to send malicious configuration files to Xpress Server and gain complete management of each the frontend and backend of the PoS system. A hacker will abuse tens of commands, permitting them to steal knowledge from all the credit and debit cards used at the targeted store, and apply special costs and discounts to such that things. These discounts is applied for such that times in order that AN item contains a tiny value only fraudsters visit purchase it. Fraudsters may also got wind of the system in order that their purchases area unit charged to the previous customer’s card. An assailant may also modification the info displayed on a receipt, as well as to s...

A ill-famed hacking group is come back with a replacement methodology of distributing Trojan malware, with the aim of making backdoor into the networks of edifice chains across the U.S.A.. Known as  “Bateleur”, the researchers at Proofpoint United Nations agency uncovered it, it's thought to be the work of Carbanak, a group that focuses its attacks on company targets. The cluster has purloined over $1bn from banks worldwide and is assumed to be behind a string of alternative attacks all over the world. Carbanak has antecedently targeted cordial reception organisations as well as retailers, and suppliers. This time, however, it's trying to infiltrate chain restaurants through a backdoor into their Windows systems, facultative the cluster to require screenshots, steal passwords, execute commands, and many more to do. In order to extend the possibilities of infection, the JavaScript backdoor is in the course of new macros, anti-analysis tools, and sandbox evasi...

Attendees at a hacking convention in las vegas will spend some time this weekend attempting to break in to over thirty voting machines utilized in recent elections. Hackers at at DEFCON in las vegas were able to successfully breach the software of U.S. voting machines in exactly ninety minutes. The idea behind to hack these machines is to boost awareness and find out exactly how at risk of tampering they're, said by Jeff Moss,DefCon. Technocrats at the annual "DEF CON" in las vegas got physical voting machines and remote access, with the directions of gaining access to the software. According to a Register report, within minutes, hackers exposed evident physical and software vulnerabilities across multiple U.S. mechanical device companies' product. Some devices were found to own physical ports that would be accustomed attach devices containing malicious software. Others had insecure Wi-Fi connections, or were running obsolete software with securit...