5492 matches found
DOD Launches New Cyber Strategy Website
DOD Launches New Cyber Strategy Website The Department of Defense today launched a new website to highlight DoD's first unified strategy for cyberspace announced on July 14. The website is a tool to help explain and consolidate DoD's cybersecurity accomplishments and new way forward for military,...
GAO: The DoD's Plan To Unify Cyber Defenses Looks Like Swiss Cheese
A new report out from the Government Accountability Office GAO warns that the U.S. Department of Defense’s efforts to unify its cyber security operations has serious gaps and that the Department is “unprepared to meet the current threat” of cyber attack. The report, issued on Monday, is an...
Report: Web Applications Attacked Every Two Minutes
Web applications are attacked every two minutes and at some times can experience upwards to 25,000 attacks an hour according to a report published by security firm Imperva today. As part of its continuing Hacker Intelligence initiative, Imperva’s Application Defense Center ADC released their Web...
Hacking Crew Attacks German National Cyber Defense Center
Germany’s newly created National Cyber Defense Center was attacked by a group of hackers referring to themselves as the “n0n4m3 cr3w” No Name Crew in early July, according to a report from the IDG News Service. The group broke into the National Cyber Defense Center’s network and stole information...
ZDI-11-237: CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability
ZDI-11-237: CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-237 July 20, 2011 -- CVE ID: CVE-2011-2667 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: CA -- Affected Products: CA Tota...
CA20110720-01: Security Notice for CA Gateway Security and Total Defense
-----BEGIN PGP SIGNED MESSAGE----- CA20110720-01: Security Notice for CA Gateway Security and Total Defense Issued: July 20, 2011 CA Technologies support is alerting customers to a security risk with CA Gateway Security. A vulnerability exists that can allow a remote attacker to execute arbitrary...
CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite r12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Icihttp.exe module CA Gateway Security for HTTP, which responds to...
THE CRAZIES Hackers Leaks Server Certificates of Defense Information Systems Agency (DISA)
THE CRAZIES Hackers Leaks Server Certificates of Defense Information Systems Agency DISA THE CRAZIES Hackers steal the Several Certificate revocation lists CRLs from Server of Defense Information Systems Agency DISA - https://disa.mil/ and leak the Certificates at :...
Pentagon Admits to biggest ever data breach
Pentagon Admits to biggest ever data breach According to Report, Department of Defense and Pentagon is disclosing news of the one of the largest data loss events to date . From investigation, officials to believe the intrusion was orchestrated by a foreign government. The theft of around 24,000...
Pentagon Admits to biggest ever data breach
Pentagon Admits to biggest ever data breach According to Report, Department of Defense and Pentagon is disclosing news of the one of the largest data loss events to date . From investigation, officials to believe the intrusion was orchestrated by a foreign government. The theft of around 24,000...
Pentagon Discloses Massive Data Theft, Lays Out New Security Strategy
A targeted attack on a defense contractor in March of this year resulted in the theft of 24,000 files by an unknown attacker, according to Defense Department officials. The attack, which officials say was the work of a foreign government, would represent one of the more serious known attacks on t...
CVE-2011-1867
Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager UAM 5.0 before SP1 E0101P03 and Endpoint Admission Defense EAD 5.0 before SP1 E0101P03 components in HP Intelligent Management Center aka iNode Management Center allows remote attackers to execute arbitrary code via a...
CVE-2011-1867
Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager UAM 5.0 before SP1 E0101P03 and Endpoint Admission Defense EAD 5.0 before SP1 E0101P03 components in HP Intelligent Management Center aka iNode Management Center allows remote attackers to execute arbitrary code via a...
Unitronics UNIOPC Server Input Handling Vulnerability
Overview Independent security researchers Billy Rios and Terry McCorkle have identified a vulnerability in Unitronics’ UniOPC Server product. --------- Begin Update A Part 1 of 3 -------- This vulnerability is a result of improper handling of input by a third-party component, https50.ocx, which i...
HP Intelligent Management Center Endpoint Admission Defense < 5.0 E0101P03 Code Execution Vulnerability
Binary data 5984.prm...
[security bulletin] HPSB3C02687 SSRT100377 rev.1 - HP Intelligent Management Center User Access Manager (UAM) and Endpoint Admission Defense (EAD), Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02901775 Version: 1 HPSB3C02687 SSRT100377 rev.1 - HP Intelligent Management Center User Access Manager UAM and Endpoint Admission Defense EAD, Remote Execution of Arbitrary Code NOTICE: The...
InduSoft ISSymbol ActiveX Control Buffer Overflow
Overview ICS-CERT has received a report from independent security researcher Dmitriy Pletnev of Secunia Research about ActiveX control buffer overflow vulnerabilities with proof-of-concept exploit code affecting the InduSoft ISSymbol product. Secunia has coordinated with InduSoft, who has produce...
Titan Rain
Hacks against the Defense Department and other U.S. agencies stretching back to 2003 were codenamed Titan Rain by investigators. The attacks, which breached hundreds of networks, including Departments of State, Energy and Homeland Security, were coordinated from Chinese computers, investigators...
SecurID Attack Was the Work of 'Very Experienced' Attackers
MALAGA, SPAIN–An RSA official on Friday offered more details of the attack the company suffered earlier this year in which thieves made off with key data related to the RSA SecurID two-factor authentication system. The attack, he said, targeted just four employees and was executed by a group he...
Schmidt: White House Feels 'Very Positive' About Prospects of Data Breach Bill Passing
Howard Schmidt has been the White House cybersecurity coordinator for nearly 18 months now, and in that time has helped develop and shape the Obama administration’s policies and thinking on cybercrime, online privacy and cybersecurity. In the second part of a recent interview with Threatpost edit...