Hacker 'Cosmo the God' Sentenced and Banned from Internet for Six Years

A 15-year-old UG Nazi hacker going by the name of Cosmo or Cosmo the God was sentenced in juvenile court on Wednesday with terms for six years without any computers or Internet, until his 21st birthday. During these 6 years, he'll need approval from his parole officer to access the internet. Wire...

Pizza Hut defaced, Authorities denies theft of 240000 Credit Cards

Yesterday Australian Pizza Hut website was compromised by a hacking group going by the name of 0-Day and Pyknic. Hackers defaced the website and claim that they made off with 260,000 Australian credit card numbers. Hack was 1st noticed by Whirlpool Forum users. But a Pizza Hut spokeswoman said th...

South Carolina Data Breach Casts Spotlight on Lack of Encryption, Stolen Credentials

South Carolina governor Nikki Haley said a mouthful this week when she spilled a dirty industry secret that Social Security numbers are generally not encrypted by state agencies. Reeling from a Department of Revenue data breach that leaked 3.6 million Social Security and credit card numbers as we...

Mail.Ru выйдет на Запад под брендом my.com

Российская интернет-компания Mail.Ru Group будет использовать имя my.com для глобального развития, сообщается в пресс-релизе. Гендиректор компании Дмитрий Гришин пояснил, что на сегодняшний день сервисами Mail.Ru Group пользуется более 90 процентов российских интернет-пользователей. Компания такж...

3.6 Million South Carolina Taxpayers at Risk of ID Theft

State officials are warning South Carolina taxpayers that 3.6 million Social Security numbers and other personal data was exposed in a recent attack on Department of Revenue servers. Anyone who filed a state return since 1998 are asked to call 866 578-5422 or visit protectmyid.com/scdor. The stat...

EasyITSP - customers_edit.php Authentication Bypass

EasyITSP - customersedit.php Authentication Bypass source: https://www.securityfocus.com/bid/56321/info EasyITSP is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to customer's information. EasyITSP...

New windows malware can target smart cards for full remote access

If you think that having a USB Token Smartcard is extremely secure for Digital signatures or other activities, you may be wrong! The research done by Paul Rascagneres can remotely give access to victims smartcard! What makes the attack unique is it uses a keylogger to get the PIN or password and...

Point-of-Sale Terminals Compromised at 63 Barnes & Noble Locations

UPDATE – America’s largest book retailer, Barnes & Noble, announced this morning it has detected evidence of tampering in 63 PIN-pad devices used in as many stores by criminals trying to steal payment card information. Barnes & Noble claims to have disconnected all the affected devices from servi...

Hackers stole Credit Card details from 63 'Barnes & Noble' stores

Over 60 Barnes & Noble stores have been used by hackers to gain the credit card data, including the PINs, of customers. The New York company is warning customers to check for unauthorized transactions and to change their personal identification numbers or PINs. It hasn't said how many accounts ma...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6.2 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, whi...

Anonymous Hacker claims to have 20,000 debit card details from HSBC Cyberattack

One of Anonymous hacker groups "FawkesSecurity" who claim responsibility for a DDOS cyber attack on HSBC Bank says that they also manage to get 20,000 debit card details. When HSBC said, "This denial-of-service attack did not affect any customer data, but did prevent customers using HSBC online...

DropBox iOS / Android App File Theft

DropBox version 1.4.6 on iOS, 2.0.1 on Android, and Google Drive version 1.0.1 on iOS suffer from a file theft vulnerability due to allowing arbitrary javascript to be executed inside of the privileged file zone. 1 Introduction ================================================ Recently, I discover...

Security weakness in Android App SSL Implementations

The most common approach to protect data during communication on the Android platform is to use the Secure Sockets Layer SSL or Transport Layer Security TLS protocols. Thousands of applications in the Google Play market that are using these implementations. A group of researchers including Sascha...

HSBC Sites Knocked Offline in 'Large Scale' DoS Attack

Websites belonging to British bank and financial services company HSBC are back online today after reportedly experiencing a denial of service DoS attack. The attack, which lasted approximately 10 hours last night, was deemed a “large scale denial of service attack” by the company. “On 18 October...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

gitolite -- path traversal vulnerability

Sitaram Chamarty reports: I'm sorry to say there is a potential path traversal vulnerability in v3. Thanks to Stephane Chazelas for finding it and alerting me. Can it affect you? This can only affect you if you are using wild card repos, and at least one of your patterns allows the string "../" t...

New Strain of Man-in-the-Browser Malware Refines Data Sent to Attacker in Real Time

Hackers fond of man-in-the-browser MiTB attacks have brought efficiency to their work. New strains of MiTB malware have been discovered that are able to parse logs for the sensitive information hackers are targeting, rather than send massive unstructured logs back to the attacker’s command and...

Client Data Leakage Detection (Credit Card Number)

Binary data 7064.pasl...

Server Data Leakage Detection (Credit Card Number)

Binary data 7065.pasl...

Line of code let the Samsung galaxy do Factory Reset-vulnerability warning-the black bar safety net

SAMSUNG including the GALAXY S3 and other models of the smart phone there is a serious security vulnerability, a line of USSD code can be formatted the phone and even damage the SIM card! The current is determined there is a problem of the phone as follows: Galaxy S3, Galaxy S2, Galaxy Ace, Galax...