RSA Says Lockheed Attack Not a New Threat to SecurID, But Will Replace Users' Tokens

In the wake of a string of attacks against high-profile users of RSA Security’s SecurID tokens including Lockheed Martin, the company has posted an open letter to its customers, trying to reassure them that the tokens are secure and that the attacks don’t represent a new threat to these businesse...

Honda hacked - 283,000 car owners personal data Leaked !

While Tokyo-based Sony Corp. battles massive data security breaches, Japanese carmaker Honda is confronting its own online challenge — the theft of personal information from 283,000 Honda and Acura customers in Canada. Jerry Chenkin, executive vice-president and chief compliance officer at Honda...

HB Ecommerce SQL Injection Vulnerability

Exploit for php platform in category web applications ------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB...

HB eCommerce - SQL Injection

------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB ECOMMERCE SQL Injection Vulnerability + Google Dork:...

Data Breach Notification Bill Included in New White House Proposal

The White House on Thursday proposed a new federal data breach notification law in an attempt to clarify a mish-mash of laws already on record. The notification comes as part of a much-delayed cybersecurity legislative proposal unveiled on Capitol Hill this week. The sweeping reform comes nearly...

French security firm VUPEN Say New Bugs Can Bypass Google Chrome Sandbox !

French security firm VUPEN Say New Bugs Can Bypass Google Chrome Sandbox ! Researchers at the French security firm VUPEN say that they have discovered several new vulnerabilities in Google Chrome that enable them to bypass the browser's sandbox, as well as ASLR and DEP and run arbitrary code on a...

Researchers Say New Bugs Can Bypass Google Chrome Sandbox

Researchers at the French security firm VUPEN say that they have discovered several new vulnerabilities in Google Chrome that enable them to bypass the browser’s sandbox, as well as ASLR and DEP and run arbitrary code on a vulnerable machine. The company said that they are not going to disclose t...

Sony Says Additional 25m Customers Exposed in Breach

A breach that started with the PlayStation Network has also affected Sony Online Entertainment’s 25 million customers, the company acknowledged on Tuesday. The electronics giant posted a press release on the Website of its Sony Online Entertainment division that provided additional details behind...

Inside a Google Data Center

Google is well-known for its worldwide network of data centers, in which it holds not just the company’s own data, but the sensitive information of its corporate and consumer customers. In this video, Google gives a rare behind-the-scenes look at the physical and data security measures that the...

Rich Mogull on the RSA Attack and the Epsilon Breach

Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast ...

Thousands of Bank of America Accounts Hacked !

Thousands of Bank of America customers' account information could be in jeopardy after a major security breach. Christy Clark went to a Royal Oak drug store Friday, but when her debit card was declined, she knew something was wrong. "I was very embarrassed," Clark said. She went straight to the...

Paul Kocher on the RSA Attack

Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers. Podcast audio courtesy of sykboy65 Subscribe to the Digital...

CVE-2008-7279

The CustomerInterface component in Open Ticket Request System OTRS before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers via unspecified vectors...

CVE-2008-7279

The CustomerInterface component in Open Ticket Request System OTRS before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers via unspecified vectors...

Top security firm RSA Security revealed by extremely sophisticated hack !

Top security firm RSA Security revealed on Thursday that it's been the victim of an "extremely sophisticated" hack. The company said in a note posted on its website that the intruders succeeded in stealing information related to the company's SecurID two-factor authentication products. SecurID ad...

Lush website is back online after hacking !

POOLE-based cosmetics retailer Lush is back online after it was forced to suspend internet sales after hackers attacked its website. Lush closed the site last month and asked anyone who placed an online order between October 4 and January 20 to contact their bank in case their card details had be...

Russian hacker steals $10 million from a former Royal Bank of Scotland !

A 27-year old Russian hacker pleaded accusable to burglary $10 actor from a above Royal Bank of Scotland analysis aback in 2008, and he's apprehension a adjudication and sentencing at the end of this or at the alpha of the abutting week. The balloon is captivated in Novosibirsk in Siberia, and th...

Website of Lush Cosmetics Hacked

The website of cosmetic company Lush has apparently been targeted by hackers as customers who’ve made purchases on their UK website, Lush.co.uk, are being encouraged to check their bank statements for suspicious activity, according to a post on ZDNet. It remains to be seen how exactly the site wa...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote attackers to inject arbitrary web script or HTML via the 1 status parameter to admin/orders.php, 2 search parameter to admin/customers.php, or 3 STORENAME parameter to...

PGP Disk Encryption Bricks Upgraded Macs

Some Apple Mac users who rushed to upgrade their systems with the company’s latest security patch were left to scramble for help after a conflict with disk encryption software from PGP rendered the upgraded Macs un-bootable. Reports of users who were unable to boot their Macs after upgrading thei...