430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow|GuardFall Flaw Hits 10 of 11 Popular Open-Source AI Agents|XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t|U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog|Hackers Steal Data of 4.38 Million Aflac Japan Customers|Apple Fixes WebKit Flaws in iOS and macOS, With Help From AI Tools|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow|GuardFall Flaw Hits 10 of 11 Popular Open-Source AI Agents|XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t|U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog|Hackers Steal Data of 4.38 Million Aflac Japan Customers|Apple Fixes WebKit Flaws in iOS and macOS, With Help From AI Tools|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

Linux, Apache, MySQL is all that evil XKeyscore needs to control the world

According to new revelations of the popular whistleblower Edward Snowden the powerful spying machine XKEYSCORE runs on Red Hat Enterprise Linux. In August 2013, Edward Snowden revealed the existence if a tool named DNI Presenter that allows the Agency to read the content of stored emails, and it also enables the intelligence analysts to tool collects […]

Linux, Apache, MySQL is all that evil XKeyscore needs to control the world

According to new revelations of the popular whistleblower Edward Snowden the powerful spying machine XKEYSCORE runs on Red Hat Enterprise Linux.

In August 2013, Edward Snowden revealed the existence if a tool named DNI Presenter that allows the Agency to read the content of stored emails, and it also enables the intelligence analysts to tool collects ‘nearly everything a user does on the internet’ by using the XKeyscore platform.

XKeyscore Slide1
XKeyscore map
KS3edit2
KS10

As The Intercept reports, besides sniffing web traffic from the fiber-optic cables worldwide the system is able to collect router data, emails, Skype conversations, people’s internet searches, documents, credentials, emails, and it also syphon data belonging 700,000 voice, fax and video files every day.

“[The XKeyscore system’s] servers collect all of this data for up to five days, and store the metadata of this traffic for up to 45 days.” states the Intercept.

The news of the day is that according to Edward Snowden the XKEYSCORE runs on Red Hat Enterprise Linux. The popular journalist Glenn Greenwald, who supports Snowden in the divulgation of the NSA documents, described the XKEYSCORE with the following eloquent statement:

“… is a piece of Linux software that is typically deployed on Red Hat servers.” wrote Greenwald. “It uses the Apache web server and stores collected data in MySQL databases. File systems in a cluster are handled by the NFS distributed file system and the autofs service, and scheduled tasks are handled by the cron scheduling service.”

It’s not a mystery that the US Intelligence Agency has always sustained also open source projects, the Xen Project project is an example as reported by The Register.

It we consider the enormous power of the XKEYSCORE and its scalability, this revelation provides a very important customer reference for Linux environments.

The Lesson learned is that it could be enough a Linux, an Apache server, and a MySQL DBMS to control the world 😉 .

Pierluigi Paganini

(Security Affairs – XKEYSCORE , surveillance)