2000 matches found
Huawei Denies Stealing State Secrets or Supporting Cyber Espionage
Huawei, the massive Chinese technology company that has come under criticism for its close ties to China’s government, is defending itself, saying that it has never stolen national intelligence or intellectual property and does not support any groups that do so. The company has been a frequent...
Huawei and Cyber Espionage, a question of trust ?
Chinese telecoms equipment suppliers have previously been criticized for allegedly being security risks. Huawei is working with British spooks to prove that it has no backdoors in its products which would allow Chinese agents to snuffle Her Majesty's secrets. The U.S. and Australia have made clea...
Mandriva Update for ffmpeg MDVSA-2012:076 (ffmpeg)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for firefox CESA-2012:0387 centos5
Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2012:0387 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
A school/government CMS default background account password-loophole warning-the black bar safety net
Author:Exp1oITs Not a Oday Today went to zone-h submitted to the Black page, find foreign a hacking the Black page all the Chinese gov site. So see, a lot of government and school station there is this problem, should not back door. However, the government so do not mind let us Heavenly good...
Kindle Touch a remote code execution vulnerability-vulnerability warning-the black bar safety net
I don't know if amazon kindle fans? Recent foreign media reports, the Kindle Touch appears a remote executable code vulnerabilities. For Kindle Touch 5.1.0 firmware version, you can remotely execute code, The/etc/shadow file is sent to the specifiedweb server. Vulnerability relates to...
Magento eCommerce Platform XXE Injection exploit-vulnerability warning-the black bar safety net
0x1 In tick-zone xsser the articlezend framework file read vulnerability analysishas reference to magento, the following is one of the original: According to@crickets brother in the clouds on the vulnerability report warns that some open source software because of the use of zend framework's xml...
Indian Navy Computers hacked by Chinese Hackers
Chinese hackers allegedly plant bug via flash drives on India navy's computers, which relayed sensitive data to China IP addresses. The sniffing tool was found in the naval computers exactly as INS Arihant, India's first nuclear missile submarine, was in trials at the targeted facility in...
A virus specialized for AutoCAD, a perfect cyber espionage tool
A virus specialized for AutoCAD, a perfect cyber espionage tool In recent years we are assisting to a profoundly change in the nature of malware, it is increased the development for spy purposes, for its spread in both private and government sectors. The recent case of Flame malware has...
CactiEZ Chinese version of the snmp default community name vulnerability-vulnerability warning-the black bar safety net
| CactiEZ Chinese version, is a monitoring control system; wherein the default snmp settings public, does not modify the result can be read remotely target device to the host information. Such as: snmputil.exe walk 127.0.0.1 public. 1. 3. 6. 1. 2. 1. 2 5. 4. 2. 1. 2 //The process list snmputil.ex...
House Hearing to Address Capital Market Threats
The House Committee on Financial Services is hosting a hearing tomorrow in which they will explore the various cyber threats targeting capital markets and government sponsored enterprises. Entitled “Cyber Threats to Capital Markets and Corporate Accounts,” the hearing in front of the Committee on...
ZTE Score M Android Phone Found to Have Backdoor Installed
UPDATE–An Android handset produced by Chinese manufacturer ZTE has a backdoor installed that could enable an attacker to take control of an affected device remotely and run arbitrary code. The manufacturer has acknowledged the issue in the ZTE Score M, which includes a harcoded password, and says...
Stolen Certificates Found in Malware Possibly Targeting Tibetan Groups
The recent trend of attackers using stolen digital certificates to make their malicious executables look legitimate is continuing unabated, with researchers now having come across a series of variants of the Etchfro Trojan that are using certificates taken from several companies and issued by...
Debian DSA-2464-2 : icedove - several vulnerabilities
Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client. - CVE-2012-0467 Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory...
Chinese Hackers continued to attack the Philippine government
Hackers continued to attack the Philippine government's online presence, with at least one agency on Thursday reporting a denial-of-service attack the night before. The official website of the Department of Budget and Management DBM yesterday became the latest victim of a cyber attack by suspecte...
Debian DSA-2457-2 : iceweasel - several vulnerabilities
Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian. - CVE-2012-0467 Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hal...
E-Mail, Source Code From VMWare Bubbles Up From Compromised Chinese Firm
In what looks like the IT equivalent of the Deepwater Horizon oil spill disaster, purloined data and documents, including source code belonging to the U.S. software firm VMWare, continue to bubble up from the networks of a variety of compromised Chinese firms, according to “Hardcore Charlie,” an...
[SECURITY] [DSA 2457-1] iceweasel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2457-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 24, 2012 http://www.debian.org/security/faq -...
Mozilla: Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues (MFSA 2012-29)
Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 ISO-2022-KR or ...
