CVE-2011-5118

Multiple race conditions in Comodo Internet Security before 5.8.213334.2131 allow local users to bypass the Defense+ feature via unspecified vectors...

CVE-2011-5119

Multiple race conditions in Comodo Internet Security before 5.8.211697.2124 allow local users to bypass the Defense+ feature via unspecified vectors...

CVE-2011-5118

CVE-2011-5118 affects Comodo Internet Security prior to 5.8.213334.2131. Multiple race conditions reportedly allow local users to bypass the Defense+ feature via unspecified vectors. The vulnerability is documented across several sources (NVD mirrors, Red Hat advisory, OpenVAS feeds) with a CVSS ...

CVE-2010-3497

CVE-2010-3497 relates to Symantec Norton AntiVirus 2011, where the Norton Antivirus Protocol Handler (HCP) fails to properly interact with hcp:// URLs processed by Microsoft Help and Support Center, enabling remote code execution via a malware payload that is detected too late to prevent executio...

MyAgent Trojan Targets Defense and Aerospace Industries

FireEye Security experts are analyzing a targeted trojan that leverages emailed PDF files to gain access to systems and deliver its payload to specified networks in the aerospace, chemical, defense and tech industries. "We have seen different versions of this malware arriving as an exe inside a...

Email Trojan Targeting Defense, Aerospace and Other Industries

What has the makings of a targeted attack campaign against several high-value industries is using a Trojan that employs rigged PDFs to deliver its payload. Targeting organizations in the defense, chemical, technology, and aerospace industries, the MyAgent trojan is primarily spreading through ema...

Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x i386/x86_64

A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handle session renegotiation. A man-in-the-middle attacker could use this flaw to prefix arbitrary plain text to a client's session for example, an HTTPS connection to a website. This could force the...

Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x i386/x86_64

A flaw was found in the Swing library. Forged TimerEvents could be used to bypass SecurityManager checks, allowing access to otherwise blocked files and directories. CVE-2010-4465 A flaw was found in the HotSpot component in OpenJDK. Certain bytecode instructions confused the memory management...

From Three Nations and Three Different Perspectives, Blue Hat Finalists Focus on Defense

By Rob Lemos LAS VEGAS — If Jared DeMott hadn’t been eager to take a different path, he would never be in security, much less a finalist in Microsoft’s search for defensive technologies, known as the Blue Hat Prize.Raised in a manufacturing town, he was accepted to the Air Force Academy in 1996,...

Microsoft Publishes Workaround for Oracle Outside In Vulnerability

Microsoft gave its users steps earlier this week to sidestep a vulnerability in one of Oracle’s Outside In libraries. The company published some mitigations for the bug, but said it isn’t aware of any active attacks against it yet. The Oracle technology is licensed by software developers like...

Threat to U.S. Government and Businesses 'Deep and Broad', Expert Says

LAS VEGAS–It’s not difficult to find people here who are excited about security. There are roughly 10,000 of them in town this week. But there’s a smaller group of people who are on a different level, who are so passionate and amped up about their ideas that they can’t stop themselves from talkin...

Mozilla, EFF Help Launch Internet Defense League, a Bat Signal for the Internet

A group of civil-liberties organizations, software companies and popular Web sites are launching a new effort called the Internet Defense League that aims to “help Internet users, organizations, and companies fight back whenever online rights are threatened.” Inspired by the collaborative fight...

Former Pentagon Analyst Warns China Has Back Doors To Global Telcos

The Chinese Government has “pervasive access” to 80 percent of the world’s communications even military-grade encryption no longer provides sufficient protection to sensitive data, a former Pentagon analyst warns. Speaking on the Cyber Jungle podcast with host Ira Victor, former Pentagon analyst ...

Report: Wireless Hacking Suspected In Air Raid Siren Miscues

UPDATE: Residents in two Illinois communities are settling their nerves after civil defense sirens blared for around 30 minutes last Saturday – an incident that authorities say may be the result of hacking. Sirens in the communities of Evanston and Lemont, Illinois, were treated to continuous...

Library of Congress Owned

There are a number of US government branches, offices, and agencies that, by their very nature, have giant targets painted on their computer networks. America’s national library would not seem to be among that lot, but alas, not even the Library of Congress could escape the ire of hackers this...

Knight cms injection, and the background to get shell-vulnerability warning-the black bar safety net

0x1 arbitrary user login 0x2 blind 0x3 background holding shell 0x4 random function problem Detailed description: 0x1 arbitrary user login user/login.php elseifempty$SESSION'uid' || empty$SESSION'username' || empty$SESSION'utype' && $COOKIE'QS''username' && $COOKIE'QS''password' && $COOKIE'QS''ui...

Fultek WinTr Directory Traversal

Overview Researcher Daiki Fukumori of Cyber Defense Institute has identified a directory traversal vulnerability in Fultek’s WinTr SCADA application. Fultek was unable to validate this vulnerability and has not offered any mitigation plans. ICS-CERT has validated the vulnerability. This...

United States Department of Defense data leaked by Anonymous hackers

United States Department of Defense data leaked by Anonymous hackers A group called the "Wikiboat" belongs to Anonymous hackers have attacked the Defense.gov website and leaked data from the website. They have published the leaked data to the pastebin note. Also, today the Wikiboat targeted the...

Pressure Mounts For Cybersecurity Bill As Negotiations Stall

A joint letter from some of Washington D.C.’s leading minds in the areas of defense and diplomacy is urging Congress to pass a cyber security bill in some form this year, saying that the U.S. is urgently in need of a new policy and ill-prepared for cyber attacks. The letter, dated June 6, was...

Attacks Targeting US Defense Contractors and Universities Tied to China

UPDATE: Researchers have identified an ongoing series of attacks, possibly emanating from China, that are targeting a number of high-profile organizations, including SCADA security companies, universities and defense contractors. The attacks are using highly customized malicious files to entice...