Default credentials

libuser before 0.57 uses a cleartext password value of 1 !! or 2 x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values...

Worm Virus Twitter Scam Push Rogue !

Thousands of Twitter users are believed to have been struck with malicious links tied to a rogue anti-virus hoax circulating the microblog service. Scam is spreading malicious links goo.gl wrong URL shortening services. According to Kaspersky Lab, malicious links to redirect users to different...

[SECURITY] Fedora 14 Update: libuser-0.56.18-3.fc14

The libuser library implements a standardized interface for manipulating and administering user and group accounts. The library uses pluggable back-ends to interface to its data sources. Sample applications modeled after those included with the shadow password suite are included...

Spotlight On Woeful Web Security In iPad Hacking Case

If a Web site leaves sensitive data hanging out in the open, can you still be accused of hacking when you grab it? Turns out, the answer is “hell, yeah!” But lots of people still do it. OK – you’re walking down the street and you come upon this apple tree in some one’s front yard. It’s a lovely...

Hackers Steal $ 150,000 Malware Job Search !

Small businesses are worried about a new scam: criminals in search of work who want to break into online bank accounts. The U.S. Federal Bureau of Investigation issued a warning Wednesday on a new version of a fraud technique called long-term computer automated information exchange fraud. With AC...

RedHat Update for libuser RHSA-2011:0170-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for libuser RHSA-2011:0170-01

Check for the Version of libuser OpenVAS Vulnerability Test RedHat Update for libuser RHSA-2011:0170-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Moderate: Red Hat Security Advisory: libuser security update

Updated libuser packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Selena Gomez's Twitter and Facebook Accounts Hacked !

Selena Gomez has warned fans to ignore a series of hateful messages posted on her Twitter and Facebook.com pages, after her online accounts were targeted by hoaxers. The Wizards of Waverly Place star's pages on the social networking sites were taken over by hackers earlier this week. Imposters...

Is The Tunisian Government Hacking Facebook Accounts?

The government of Tunisia may have chosen an odd way to combat protesters: Hacking into their Facebook accounts. This appears to have gotten the attention of the hacker group Anonymous, which is siding with the protests. The past month has seen many large-scale uprisings in the North African...

Thurston sees largest identity theft case in the county's history !!

An Olympia-area man has been arrested in what the Thurston County Sheriff's Office says is the largest identity-theft case in the county's history. More than 1,000 victims statewide had their driver's licenses, credit cards and Social Security numbers stolen, according to the Sheriff's Office...

Zwii 2.1.1 - Remote File Inclusion

Zwii 2.1.1 - Remote File Inclusion Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility Google Dork: Propulsé par Zwii 2.1.1 Date: 08/01/2011 Author: Abdi Mohamed Software Link: http://scripts.toocharger.com/fiches/scripts/zwii/5147.htm Version: v 2.1.1 Tested on: ubuntu + centos Email :...

Multi-Million Dollar Cyber Fraud Investigation Surrounds Exchange Students

Two international students from Vietnam are under investigation by the Department of Homeland Security on charges of identity theft and wire fraud. The two Winona State University students, Tram Vo and Khoi Van, are alleged to have taken part in a criminal ring that defrauded ecommerce merchants...

ID-theft suspects arrested by Detectives !

A nearly nine-month investigation by Santa Barbara County Sheriff's detectives has led to the arrest of a former UCSB student as a suspected identity thief who bilked at least five victims out of at least $158,000. Imoukhuede Ohiwerei Ehimika, 26, of Nigeria was arrested Dec. 21 at his home in th...

SSH password weakness

Added: 01/05/2011 CVE: CVE-1999-0502 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

Microsoft Releases Security Advisory

Microsoft has released security advisory 2490606 to alert users of a vulnerability affecting the Windows Graphics Rendering Engine. Exploitation of this vulnerability may allow an attacker to install programs; view, change, or delete data; or create new accounts with full user rights. US-CERT...

Kanpur police face difficulty operating Facebook account !

In view of the difficulty faced by policemen in operating the newly opened Facebook accounts of police stations here, a workshop would be conducted to make them more computer savy and efficient in handling online services. "Although the police stations have opened Facebook accounts, the station...

SNMP Windows Username Enumeration

This module will use LanManager/psProcessUsername OID values to enumerate local user accounts on a Windows/Solaris system via SNMP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SNMP Windows...

Internal Memo Outlines Gawker's Security Plan

After a hack of systems belonging to online publishing giant Gawker Media that yielded more than one million passwords, the online media company’s chief technology officer has announced new defense strategies aimed at placating their users and preventing further humiliating data breaches. Gawker...

Australian Police Arrest Man for Hacking Nearly 100 Online Accounts

The Australian police have arrested a 33-year-old man accused of hacking into nearly 100 online accounts. The Australian Federal Police's high-tech crime unit has been monitoring the suspect since last September. This surveillance began when a local telecom company alerted the authorities to...