Attacks/Breaches

5/15/2018
03:25 PM
50%
50%

Feds Name Suspect in CIA 'Vault 7' Hacking Tool Leak

Ex-CIA employee in jail for unrelated charges at this time.

Former CIA employee Joshua Adam Schulte has been named as a suspect who allegedly may have handed over to WikiLeaks a massive trove of the intelligence agency's cyber espionage tools that the activist group then published online.

The Washington Post reported today that federal prosecutors named Schulte as the suspect in a hearing earlier this year, and that he is now imprisoned in Manhatten for separate and unrelated charges. Schulte worked on a CIA team that built hacking tools to conduct cyber espionage against foreign adversaries, according to the report.

WikiLeaks in March of 2017 began publishing more than 8,700 confidential CIA documents under the title "Vault 7"  that laid bare the intel agency's global hacking arsenal. Among the leaked documents were various zero-day vulnerabilities in Android, iOS, and Windows as well as exploits against network routers, smart TVs, and connected vehicles.

Materials gathered from a search warrant of Schulte's home did not provide sufficient evidence for charges in the Vault 7 case, but he reportedly remains a target in the probe.

Read more here.

 

 

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
White House Cybersecurity Strategy at a Crossroads
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/17/2018
Mueller Probe Yields Hacking Indictments for 12 Russian Military Officers
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/13/2018
10 Ways to Protect Protocols That Aren't DNS
Curtis Franklin Jr., Senior Editor at Dark Reading,  7/16/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2016-10727
PUBLISHED: 2018-07-20
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive ...
CVE-2018-8018
PUBLISHED: 2018-07-20
Apache Ignite 2.5 and earlier serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a spe...
CVE-2018-14415
PUBLISHED: 2018-07-20
An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen.
CVE-2018-14418
PUBLISHED: 2018-07-20
In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI.
CVE-2018-14419
PUBLISHED: 2018-07-20
MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page.