Security Risk: The Device Formerly Known as Your Hard Drive

Guest editorial by Paul Roberts In a weird kind of synchronicity, two stories recently have raised the specter of discarded not merely misplaced hard drives as the source of considerable consternation and legal wrangling. In the most serious incident, the Inspector General of the National Archive...

Phishing Attacks Continue to Evolve

Antispam vendors, browser makers and Internet service providers have been on the front lines in the battle to contain phishing attacks, but the cybercriminals behind phishing campaigns are getting savvy at defeating technologies and tricking victims into giving up their credentials and other data...

Radisson Hotels Report Significant Data Breach

Add the Radisson Hotels & Resorts chain to the growing list of businesses datalossdb.org reporting significant data breaches that exposed sensitive customer data. In an open letter radisson.com to guests, Radisson chief operating officer Fredrik Korallus said the hotel chain’s computer system was...

Apache Shows How to Handle a Network Compromise

The Apache Software Foundation last week was the victim of a serious network attack in which a number of its Web servers and other machines were compromised by attackers who were able to gain root privileges and jump from machine to machine. The incident was embarrassing and a serious problem for...

Health Care Breach Notification Mandated

From SC Magazine Angela Moscaritolo Two new rules were created this week requiring health care organizations, and other entities that interact with personal health records PHRs, to issue notifications in the event of a data breach. The key rule, issued Wednesday by the U.S. Department of Health a...

DreamPics Builder - 'exhibition_id' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php fuseaction DREAMPICS BUILDER http://www.dreamlevels.com/dreampics.php AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Confidential Twitter Data Exposed in Attack

From Bits Claire Cain Miller and Brad Stone Twitter, which is generally quite private about its business plans, has fallen prey to an attack by a hacker who has apparently exposed confidential corporate information. The hacker claims to have private documents including confidential contracts with...

多个浏览器WEB代理重定向处理中间人漏洞

Bugraq ID: 35412 CVE ID：CVE-2009-2061 CVE-2009-2062 CVE-2009-2063 多个浏览器处理WEB代理重定向存在中间人攻击。 攻击者可以利用这个漏洞进行钓鱼攻击或获得敏感信息。不过要利用此漏洞，攻击者必须截获或控制网络通信，如通过中间人，DNS毒药等攻击。 如下浏览器受此漏洞影响： Mozilla Firefox prior to 3.0.10 Apple Safari prior to 3.2.2 Opera prior to 9.25 Opera Software Opera Web Browser 8.51 Opera...

Heartland CEO Says Data Breach Was 'Devastating'

From Computerworld Jaikumar Vijayan Heartland Payment Systems chief executive Robert Carr remembers what it felt like when he first heard about the massive data breach at his company earlier this year. “I wanted to throw up. It was devastating,” says Carr, recalling how he felt upon realizing tha...

T-Mobile data on Full Disclosure is real

T-Mobile is now saying that the information that was posted to the Full Disclosure security mailing list this weekend is in fact the company’s data. But the company stopped short of confirming that the anonymous hackers have access to customer data and other sensitive information, as they have...

The Berkeley breach: Is SaaS the answer?

One recent Friday afternoon I took time off to visit two new health providers: a new dentist nearer my home and an orthopedic to look at my lateral epicondylitis. In both cases, as a new patient, I filled in page after page of medical history and personal information, including my Social Security...

Sensitive DHS platform hacked

From Federal Computer Week Ben Bain Attackers have penetrated a network that the Department of Homeland Security uses to share sensitive information with state and local authorities, gaining access to important, but unclassified, data. The attack began in March and occurred again a few weeks late...

PHPenpals <= 1.1 (mail.php ID) Remote SQL Injection Exploit

No description provided by source. !usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Phpenpals | -Version: = 1.1 | -Site: http://sourceforge.net/projects/phpenpals/ | -Download Script:...

Who decides what health data is sensitive?

The massive UC Berkeley data breach reported last week exposed the sensitive health information of more than 160,000 Berkeley students, alumni and others who used the school’s health system. Berkeley officials said that the breach did not expose the victims’ treatment information, an assertion th...

More than 160,000 affected by data breach at UC Berkeley

Hackers had access to a database for about six months at the University of California at Berkeley and stole health-related data on more than 160,000 students and other people who used the school’s health services center. College officials said that the attack on the health center’s database was...

USPS probes possible mass security breach

CBS News is reporting word about another data breach potentially compromising the personal information of thousands of people. Companies Lexis Nexis and Investigative Professionals have sent up to 40,000 letters to customers whose “sensitive and personally identifiable” information may have been...

French hacker gains access to Twitter's admin panel

From ZDNet Dancho Danchev Yesterday, a French hacker claimed to have gained access to Twitter’s administration panel, and based on the screen shots that he included featuring internal data zataz.com for accounts belonging to U.S President Barack Obama, Britney Spears, Ashton Kutcher, and Lily...

What's on the cover of that Verizon breach report?

Psst! Psst! Ryan here. Did you notice that all the text on the cover of Verizon’s 2009 data breach report pdf is selectable? A little birdie tells me that’s no coincidence. Encrypted message, etc. Even better, the report contains some obvious clues to decrypt. And something about cash prizes for...

Five ways to survive a data breach investigation

From CSO Bill Brenner When the digital forensics crew comes in to investigate a possible data breach, company executives often make matters worse by not being prepared. To help companies deal with this issue, CSOonline talks to the experts csoonline.com and offers these five steps that can be tak...

Google search reveals 19,000 credit card details

By Carrie-Ann Skinner, PC Advisor The credit card details of 19,000 Brits that shopped online were freely available on Google, it has been revealed. Anyone using the search engine could have easily accessed not only the name and addresses of thousands infoworld.com of Visa, Mastercard and America...