Iowa State Hacked--To Mine Bitcoins

It’s an odd week these days when there isn’t a data breach at some university or college. These institutions are prime targets for attackers for several reasons, not the least of which are their open network environments and databases bulging with personal information. But now attackers are looki...

2014 Verizon Data Breach Investigations Report DBIR

Most of us—hopefully—awaken every day, shower and brush our teeth. If you own a home, you patch a leaky roof and paint the shutters so they don’t rot. You own a vehicle, you change the oil when you’re supposed to and make sure the brakes work the way they’re supposed to. It’s simple hygiene. Yet ...

2014 Verizon Data Breach Investigations Report DBIR

The attention given to the Target data breach elevated concerns about point-of-sale hacks and got us reacquainted with RAM scrapers and other threats to retailers big and small. And while it’s been a noteworthy highlight to the annual Verizon Data Breach Investigations Report for the past few...

3 Million Cards Implicated in Michaels Breach

Nearly four months after it first reported it was investigating a data breach, the arts and crafts retail chain Michaels confirmed yesterday that most of its U.S. stores were compromised on and off for eight months and that payment card information of nearly three million of its customers may hav...

19-Year-Old Teenager Arrested for Exploiting Heartbleed Bug to Steal Data

A teenager has been arrested by the Canadian police in relation to the infamous malicious breach on the country's taxpayer system using one of the most critical internet flaws, Heartbleed. Heartbleed bug, that made headlines over past two weeks and every websites around the world flooded with its...

Sophos Antivirus for vShield OpenSSL TLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 Sophos Antivirus是一款防病毒应用程序。 Sophos Antivirus for vShield所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 Sophos Antivirus for vShield 1.0 Sophos Antivirus for vShield 1.1 目前没有详细解决方案： http://www.sophos.com...

Hardware Maker LaCie Admits Yearlong Data Breach

The French computer hardware company LaCie, perhaps best known for their external hard drives, announced this week it fell victim to a data breach that may have put at risk the sensitive information of anyone who has purchased a product off their website during the last year. According to an...

German Developer responsible for HeartBleed Bug in OpenSSL

We have already read so many articles on Heartbleed, one of the biggest iNternet threat that recently came across by a team of security engineers at Codenomicon, while improving the SafeGuard feature in Codenomicon's Defensics security testing tools. The story has taken every media attention acro...

AMTELCO miSecureMessages Server insecurely authenticates clients

Overview AMTELCO miSecureMessages Server Release 6.2 performs weak authentication for access to user messages CWE-287. Description AMTELCO miSecureMessages Server Release 6.2 performs weak authentication for access to user messages. miSecureMessages authenticates client app XML requests for...

Everybody understood that the OpenSSL vulnerability-vulnerability warning-the black bar safety net

Title party the next, I will try to simple to let everyone understand this vulnerability of reason, as well as this decade of a nuke-level vulnerability why will give the whole Internet to bring a serious impact. What is OpenSSL for? ”OpenSSL is an open-source, implements the SSL Protocol and...

Pakistani Hacker Arrested for Hacking Telecom Company Database

Pakistan’s Federal Investigation Agency FIA has arrested a Pakistani Hacker allegedly involved in hacking into a telecom company and uploading their database on his website. With the help of the National Response Center for Cyber Crime NR3C of Pakistan’s Federal Investigation Agency, the local...

Vulnerable Texas Transportation Site 'TxTag' leaves 1.2 Million Credit Cards at Risk

Do you know, Why another major company is getting hacked every week? Because of poor policies, Laziness to Incident Response and lack in will-power to put efforts on applying important patches. Some companies are not taking their security more seriously, and best suitable example for this is TxTa...

Windows XP End of Life Breeding FUD, Legit Concerns

For those of you anticipating the start of a Walking Dead-style malware apocalypse next Tuesday, calm yourselves. The official end of security support for Windows XP is upon us, but it’s important to check some anxiety at the door and keep some perspective. “I’ve been a forensics investigator 14...

University Data Breaches Pose Threat to Students, Academic Openness

North Dakota State University administrators confirmed last week that hackers never accessed the personal information of more than 200,000 students, faculty and staff housed on the server they successfully infiltrated. This attack perfectly suits the modern hackers MO. They attack open systems...

Ukrainian Hacker falsely claimed theft of 800 million Credit Card

800 Million US based Credit and Debit cards compromised! Really it’s a big number and till now it has not been sized by the cyber security officials but a hacker group claims that they had stolen data on hundreds of millions of U.S. card accounts. Last week, the hacker group called itself Anonymo...

Data Breaches Show Difficulty of Defenders' Task

When attackers broke into the network of the University of Maryland last month, the university’s wasn’t sure how to react. The organization had never had a major security incident before, and this one qualified as major: 310,000 Social Security numbers and other information was gone. And then thr...

Ganib "userDomain" SQL注入漏洞

Ganib是一款基于WEB的应用。 Ganib LoginProcessing.jsp不正确过滤用户提交给"userDomain"参数的数据，允许远程攻击者利用漏洞提交特殊的SQL查询，可操作或获取数据库数据。 0 Ganib 2.3 Ganib 3.0已经修复该漏洞，建议用户下载更新： http://www.ganib.com/...

Dexter, Project Hook Point of Sale Malware Still Prevalent

While the Target data breach may be in the rear view mirror, research this week shows it’s clear that many attackers are still using point of sale malware, namely Dexter and Project Hook, in active attacks. Researchers at Arbor Networks’ Security Engineering & Response Team ASERT looked at severa...

IBM Rational多个产品多个安全漏洞

CVE ID:CVE-2014-0844、CVE-2014-0845、CVE-2014-0846 IBM Rational Requirements Composer软件是一项需求定义解决方案,旨在通过为需求信息提供共享位置,并帮助进行反复改进以实现平衡解决方案。IBM Rational DOORS是一款需求管理工具，它通过改进需求沟通与协作，可以最大限度地提高业务流程。 IBM Rational Requirements Composer和IBM Rational DOORS存在多个安全漏洞：...

CVE-2014-0844

IBM CVE-2014-0844 affects IBM Rational Requirements Composer (RRC) 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6. The vulnerability is described as an unspecified remote-authenticated data exposure via unknown vectors. The connected CVE collect...