45000 Wordpress blogs hacked on 2nd day of Spam campaign

Yesterday I have reported about a huge mysterious hack in wordpress servers, that cause compromise of 15000 wordpress account and hacker managed to post same spam article of "Money making sites" with title - "Im getting paid!" on each blog. We explained how hacker was earning in thousands of...

New Twitter-Based Malware Uses Direct Messaging to Spread

Sophos is warning of a new trick to get Twitter users to open direct messages from trusted users that ultimately infect their machines with malware. In a blog post, senior technology consultant Graham Clulely said the initial message is a tweet claiming the recipient’s been captured on a Facebook...

Pinterest Temporarily Locking Down Compromised Accounts

The popular social sharing site Pinterest is addressing an uptick in suspected hacks by temporarily locking down suspicious accounts and forcing those users to create more unique passwords. The lockouts follow a couple of weeks of notices that include an 11-question survey to help the company...

Bogus Report: 55,000 Twitter accounts compromised

Bogus Report: 55,000 Twitter accounts compromised Thousands of Twitter passwords were exposed this week and the site was looking into matter. According to a message posted on Twitter's Japanese blog, None of the recently leaked Twitter logins and passwords came from within the company. Twitter ha...

Attorney General: Massachusetts Won't Investigate iTunes Fraud

It looks as if Apple iTunes users who have been the victim of identity theft will have to look for a new knight in shining armor to wring answers from the notoriously close-lipped Cupertino technology giant. The Massachusetts Attorney General’s Office said on Monday that it isn’t planning to...

10GB data of law enforcement agencies leaked by #AntiSec

10GB data of law enforcement agencies leaked by AntiSec AntiSec , Lulzsec and Anonymous Hackers once again leak a huge data of 10GB at , hacked from 70 law enforcement agencies. The leak contain hundreds of compromising email spools, personal information about officers, police training videos, an...

Weak Passwords Banned from Hotmail

Microsoft’s email service, Hotmail, is implementing tougher standards for user passwords to combat the increasing occurrence email account hijackings. The company said Hotmail users will no longer be allowed to use common, easily guessable passwords like “password,” “12345,” and “qwerty,” which a...

Massive Phishing Attack in Progress on Tumblr

There is an ongoing phishing attack playing out right now on the Tumblr network and it already has succeeded in stealing the login credentials of several thousand users, according to researchers who have been following the activity. The attack relies on a fake login page and some promises of free...

Dslreports.com hacked, Over 9000 accounts compromised !

Dslreports.com hacked, Over 9000 accounts compromised ! DSL Reports - the information and review site on high speed Internet services which operates over 200 forums - has been hit with a blind SQL injection attack, which resulted in the compromise of at least 9000 accounts. Founder Justin Beech...

European Space Agency (ESA.INT) Hacked by TinKode !

European Space Agency ESA.INT Hacked by TinKode ! The European Space Agency ESA, established in 1975, is an intergovernmental organisation dedicated to the exploration of space, currently with 18 member states. Headquartered in Paris, ESA has a staff of more than 2,000 with an annual budget of...

Hackers Changes Millions of Passwords to "password" !

Hackers Changes Millions of Passwords to "password" ! Passwords from over 3,000,000 user accounts were apparently set to "password" late last night in a wide-spread hack that affected hundreds of news, retail and Web 2.0 sites. Most affected users are completely unaware of the attack. According t...

iTunes Users Puzzle, Fume Over Account Hacks

Terry Coffey of Anchorage, Alaska, said that he first became aware of a problem with his iTunes account when he received a receipt for a $50 iTunes gift card purchase. Coffey, who says he’s careful with his money, was immediately suspicious and investigated the charge, but couldn’t find any recor...

Farmville Compromises Facebook - Facebook Fixes Flaw !

After the release of FireSheep, Facebook took an important step to help protect Facebook user accounts by allowing users to choose to keep an encrypted connection as long as they used just Facebook and intelligently designed apps. Savvy users immediately discovered that if they tried to use gross...

Worm Virus Twitter Scam Push Rogue !

Thousands of Twitter users are believed to have been struck with malicious links tied to a rogue anti-virus hoax circulating the microblog service. Scam is spreading malicious links goo.gl wrong URL shortening services. According to Kaspersky Lab, malicious links to redirect users to different...

Google Unveils Gmail Security Checklist

In the face of continued attacks targeting its hugely popular Gmail service, Google has put together a checklist to help Gmail users better secure their accounts by looking at the settings in their inboxes, their browsers and their PCs. The security guide doesn’t automate any of these tasks for...

SEC: BroCo Investments Hijacked Accounts

A U.S. federal judge has agreed to freeze the assets of a company being accused of manipulating the stocks of 38 companies listed on the Nasdaq and New York Stock Exchange via compromised trading accounts. Read the full article. CNet...

Twitter Hit By Phishing Attack

Twitter users were hit by potent phishing attacks over the weekend that have already led to spam runs from compromised accounts. Read the full article. The Register...

DEBIAN-CVE-2005-2666

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the knownhosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likel...

PHP-Nuke 6.x (Multiple Modules) - SQL Injection

PHP-Nuke 6.x Multiple Modules - SQL Injection source: https://www.securityfocus.com/bid/9544/info Multiple SQL injection vulnerabilities have been reported in various modules included in PHP-Nuke versions 6.9 and earlier. These issues could permit remote attackers to compromise PHP-Nuke...