Thursday, December 21, 2023

Kyivstar Hack


 Why are the critical infrastructures are important?

Having a blackout of internet services occurs not only in the movies if necessary countermeasures are not taken.

Russia -allegedly- has been using the critical infrastructures of Ukraine as a Guinea pig for more than 10 years. (Yes, even before the Russian invasion.) This time, Russia -allegedly- committed another cyber attack to the biggest mobile telecom operator of Ukraine. This attack caused more than half of Ukraine's population (appr. 22 million) to go offline including the emergency air-raid system in the capital region.

This was the most significant attack by Russia which hit Ukrainian communication infrastructures since February 2022.

Well, are the critical infrastructures of your country prepared for such cyber attacks? Have you ever thought what would you do in a crisis where you won't have any internet connection? Sounds scary, huh? A little exaggerated movie but I can advise the movie Die Hard 4.0 for that.

https://bit.ly/3RMpnXg

"Kyivstar, Ukraine's biggest mobile telecom operator, has suffered a cyberattack that took out cell service for more than half of Ukraine's population and cut Internet for millions — as well as knocking offline the emergency air-raid system in the capital region.

Company CEO Oleksandr Komarov, speaking on a Ukrainian news broadcast as reported by Reuters, confirmed the attack on Tuesday, adding that the telco's IT infrastructure is "partially destroyed," and that he has no timeline on restoration."

Tuesday, March 21, 2023

Sharkfest 2015 Packet Challenge - dnsing.pcapng

Aşağıdaki videoda "Sharkfest 2015 Packet Challenge" sorulannın birincisi olan "PAY ME NOW" başlığında yer alam soruların çözümlerini bulabilirsiniz.

pcapng dosyasının adı: "dnsing.pcapng".

https://www.youtube.com/watch?v=99W9kluzkKw

Sharkfest 2015 Packet Challenge - http-gogo.pcapng

Aşağıdaki videoda "Sharkfest 2015 Packet Challenge" sorulannın ikincisi olan "GO GO SPEED RACER"  başlığında yer alam soruların çözümlerini bulabilirsiniz.

pcapng dosyasının adı: "http-gogo.pcapng".

https://www.youtube.com/watch?v=VoBpKqthFhM

Sharkfest 2015 Packet Challenge - whatsup.pcapng

Aaşağıdaki videoda "Sharkfest 2015 Packet Challenge" sorulannın dördüncüsü olan "Whats UP?"  başlığında yer alam soruların çözümlerini bulabilirsiniz.

pcapng dosyasının adı: "whatsup.pcapng".

https://www.youtube.com/watch?v=1NHEN1WCnrM

Tuesday, December 20, 2022

NIST Retires SHA-1

 

Well, every hashing algorithm has an end. The next one is SHA-1 hashing algorithm. NIST decided to retire SHA-1 algorithm. They are recommending that IT professionals replace SHA-1 with a better one. 


"The SHA-1 algorithm, one of the first widely used methods of protecting electronic information, has reached the end of its useful life, according to security experts at the National Institute of Standards and Technology (NIST). The agency is now recommending that IT professionals replace SHA-1, in the limited situations where it is still used, with newer algorithms that are more secure."

"SHA-1, whose initials stand for “secure hash algorithm,” has been in use since 1995 as part of the Federal Information Processing Standard (FIPS) 180-1..."

"...As today’s increasingly powerful computers are able to attack the algorithm, NIST is announcing that SHA-1 should be phased out by Dec. 31, 2030, in favor of the more secure SHA-2 and SHA-3 groups of algorithms."

“'We recommend that anyone relying on SHA-1 for security migrate to SHA-2 or SHA-3 as soon as possible,' said NIST computer scientist Chris Celi."

“'Modules that still use SHA-1 after 2030 will not be permitted for purchase by the federal government,' Celi said..."