Security Questions Not So Secure

The Internet knows a lot about you, including your mother’s maiden name, your favorite food, and what street your first pet grew up on. And, according to some new research from Google, attackers have a good chance of figuring those things out pretty easily, too. The security questions that Google...

Account Recovery Vulnerability Patched in Gmail

A recent set of Google patches included a fix for a serious Gmail account recovery vulnerability, the details of which have been disclosed. Researcher Oren Hafifi of Israel points out in his disclosure that unlocking a Google password opens the door to much more than email, elevating the risk. “D...

Beware of Fraudulent Sites, phishing for Twitter accounts

There's a scam spreading through Twitter Direct messages DMs and fake emails, appealing users to visit a fake twitter phishing site i.e "twittler.com". Scam uses a hijacked Twitter account to send out direct messages that appear completely legitimate. Security blogger, Janne Ahlberg blogged about...

Facebook Issues Security Updates for Mobile App

The Facebook security team is adding some new security features to the social network’s mobile applications, including upgrades to the login mechanism and account recovery options. The first addition is an update to Facebook’s existing login approval mechanism, which they are calling ‘code...

Weak Passwords Banned from Hotmail

Microsoft’s email service, Hotmail, is implementing tougher standards for user passwords to combat the increasing occurrence email account hijackings. The company said Hotmail users will no longer be allowed to use common, easily guessable passwords like “password,” “12345,” and “qwerty,” which a...

New Password Not Enough to Secure Hacked E-mail Account

HED: New Passwords Not Enough to Secure Hacked E-mail Account DEK: Google’s Advice to Owners of Compromised Accounts Woefully Inadequate, Says Web Security Expert BY CALEB SIMA, CEO, Armorize Technologies Threatpost reported recently on a wave of warnings about Gmail account compromises linked to...

CVE-2009-2158

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...

[waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...