TJX Browser Exploit Accomplice Gets Probation

A computer security professional who sold Internet Explorer exploit code to credit card hacker Albert Gonzalez was sentenced Tuesday to three years probation and a $10,000 fine. Jeremy Jethro, 29, was paid $60,000 by Gonzalez for a zero-day exploit against Microsoft’s browser, “the purpose and...

Feds Seek 25-Year Sentence for TJX Hacker

Computer hacker Albert Gonzalez deserves a quarter-century behind bars for leading a gang of cyberthieves who stole tens of millions of credit and debit card numbers from a transaction processor and several giant retail chains, federal prosecutors argued in a recent court filing. Read the full...

Mariposa Bot Found Pre-Loaded on Second Vodafone Handset

It seems that the HTC Magic phone distributed by Vodafone in Spain that security researchers discovered recently was pre-loaded with the Mariposa bot client was not an isolated incident after all, as the concerned party had claimed. An employee of another Spanish security vendor found the same...

Code injection

Unspecified vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2009-4704

Unspecified vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2009-4704

Unspecified vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2009-4704

The CVE-2009-4704 entry concerns the Webesse E-Card (ws_ecard) TYPO3 extension, version 1.0.2 and earlier, with an unspecified information-disclosure vulnerability that allows remote attackers to obtain sensitive data via unknown vectors. The NVD metrics show a network-facing, low-exploitability ...

CVE-2009-4704: Undefined Security Weakness

Unspecified vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

Vodafone-Distributed Handset Found Pre-installed With Mariposa Bot

Security researchers have found the Mariposa bot client pre-installed on a mobile phone handset distributed in Europe, and say that the malware looks to have been installed on the phone’s memory card. The phone, the HTC Magic, runs the Google Android mobile operating system, and is a low-priced...

Malaysian Hacker Will Be Extradited to U.S.

A Thai court has approved the extradition to the U.S. of a Malaysian man allegedly involved in hacking credit card information, causing massive losses for victims in the U.S. Read the full article. Computerworld...

APC Network Management Card web interface vulnerable to cross-site scripting and cross-site request forgery

Overview The web management interface for the APC Network Monitoring Card NMC used in various APC devices contains cross-site scripting XSS and cross-site request forgery CSRF/XSRF vulnerabilities. By convincing a victim to load a specially crafted URL while authenticated to an NMC, an attacker...

Card Skimming Hits Up to 180 Gas Pumps

Criminals hid bank card-skimming devices inside gas pumps — in at least one case, even completely replacing the front panel of a pump — in a recent wave of attacks that demonstrate a more sophisticated, insidious method of stealing money from unsuspecting victims filling up their gas tanks. Read...

cPanel - Multiple Cross-Site Request Forgery Vulnerabilities

cPanel - Multiple Cross-Site Request Forgery Vulnerabilities Create Database: Create New Database New Database: Add Redirect: Type Permanent 301 Temporary 302 http://www.? All Public Domains sEc-r1z.com...

cPanel Multiple CSRF Vulnerabilities

Exploit for unknown platform in category web applications ==================================== cPanel Multiple CSRF Vulnerabilities ==================================== Create Database: Create New Database New Database: Add Redirect: Type Permanent...

cPanel - Multiple Cross-Site Request Forgery Vulnerabilities

Create Database: Create New Database New Database: Add Redirect: Type Permanent 301 Temporary 302 http://www.? All Public Domains sEc-r1z.com /...

Chip and PIN Security Completely Broken by New Attack

A group of researchers has found a significant flaw in the chip-and-PIN security system used by credit card companies in the UK. The weakness allows an attacker to use a card without the PIN associated with it. In a normal transaction using the chip-and-PIN system, the cardholder needs to enter a...

Hotels Major Target of Credit Card Hacks

Hackers hit the hospitality industry more than any other – including the often-hacked financial services industry, according to a new report. Read the full article. USA Today...

3D Secure Authentication Taken to Task

Researchers at the University of Cambridge Computer Laboratory, say the 3D Secure 3DS authentications system branded as the “Verified by Visa” and “MasterCard SecureCode” schemes are “a text book example of how not to design an authentication protocol.” Read the full article. The H Security...

A Closer Look At ATM Skimmers

Security reporter Brian Krebs goes visual with ATM skimmers, asking readers to look at images and see if they would be able to tell the difference between a real ATM card reader and actual skimming devices. Read the full article. KrebsonSecurity.com...

Jobs Fighting Cybercrime Are In Demand

Banks, military contractors and software companies, along with federal agencies, are looking for “cyber ninjas” to fend off a sophisticated array of hackers, from criminals stealing credit card numbers to potential military adversaries. Read the full article. NY Times...