Mitsubishi Hack May Have Yielded Defense, Nuke Secrets

A report claims the recent hack of Japanese Defense Contractor Mitsubishi Heavy Industries may have led to the theft of sensitive data related to weapons systems and nuclear reactors. The report, on the Website of The Asahi Shimbun, cites unnamed sources as saying that malware planted on servers...

WellinTech Kingview 6.53 Remote Heap Overflow

Overview This advisory is a follow-up to ICS-ALERT-11-011-01 WellinTech Kingview Buffer Overflow, published on the ICS-CERT Web site on January 11, 2011. Independent security researcher Dillon Beresford reported a heap overflow vulnerability in WellinTech KingView V6.53, which may allow a remote,...

Report: Obama Administration Considered Libyan Cyber-Offensive

The Obama Administration reportedly debated kicking off its latest war-effort in Libya with a cyber-offensive targeting the Qaddafi regime’s air-defense infrastructure, according to a report from the New York Times. The details of the Obama Administration’s plan remain classified, but the Times...

Report says : US considered cyber war on Libya

Report says : US considered cyber war on Libya Officials in the US Obama administration considered compromising Libya's government computer networks to block early-warning data gathering and missile launches on NATO war planes during the American-led strikes, but decided against it, according to...

Defense Department Sued Over Data Breach

A group of people affected by the TRICARE data breach in September has filed a class-action lawsuit against the Department of Defense, alleging that the department and its health care organization didn’t properly safeguard personal information that was stored on backup tapes stolen last month. Th...

Derbycon 2011 Videos talks

Derbycon 2011 Videos Talks The idea behind DerbyCon was developed by Dave Kennedy ReL1K, Martin Bos PureHate, and Adrian Crenshaw Irongeek. Their motivation stemmed from a desire to see more of the old-style talks and events of the conventions of the past. DerbyCon was hosted by some specialized...

CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

$Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

DDIVRT-2011-34 Metropolis Technologies OfficeWatch Directory Traversal

Title ----- DDIVRT-2011-34 Metropolis Technologies OfficeWatch Directory Traversal Severity -------- High Date Discovered --------------- August 15, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Chris Graham and r@b13$ Vulnerability Description...

CA Total Defense Suite - reGenerateReports Stored procedure SQL Injection (Metasploit)

$Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

Exploit for cgi platform in category web applications $Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Nation-State Attackers Are Adobe's Biggest Worry

SAN FRANCISCO–It’s no secret that attackers have made Adobe’s products key targets for the last couple of years, routinely going after bugs in Reader, Flash and Acrobat in targeted attacks and widespread campaigns alike. But it’s not just the rank-and-file bad guys who are making Adobe a priority...

Report: Japan Fesses Up to First Cyber Attack on Defense Industry

Mitsubishi Heavy Industries MHI, Japan’s primary defense contractor, recently suffered a data breach that may be the first major cyber-attack on Japan’s defense industry to be publicly disclosed, according to a report from Reuters. The attack, first discovered in early August, is believed to have...

Military Contractor Mitsubishi hacked

Military Contractor Mitsubishi hacked Mitsubishi Heavy Industries Ltd said on Monday that its computers had been hacked into, with one newspaper saying the target was Japan's biggest defence contractor's factories for submarines, missiles and nuclear power plant components. "There is no possibili...

Military Contractor Mitsubishi hacked

Military Contractor Mitsubishi hacked Mitsubishi Heavy Industries Ltd said on Monday that its computers had been hacked into, with one newspaper saying the target was Japan's biggest defence contractor's factories for submarines, missiles and nuclear power plant components. "There is no possibili...

Sony Hires Ex- Homeland Security Official after PlayStation Hack

Sony Hires Ex- Homeland Security Official after PlayStation Hack Sony has hired a former official at the US Department of Homeland Security for the new post of chief information security officer, months after a massive hacking attack leaked information on 100 million user accounts on its games...

Malcon 2011 - Call for Papers

Malcon 2011 - Call for Papers Malcon is the worlds first platform bringing together Malware and Information Security Researchers from across the globe to share key research insights into building and containment of the next generation malwares . Call for Papers: Malcon 2011 are looking for new...

7-Technologies Data Server Denial of Service

Overview ICS-CERT originally released advisory “ICSA-11-335-01P - 7-Technologies Data Server Denial of Service” in the US-CERT secure portal on December 01, 2011. This web page release was delayed to allow users time to download and install the update. Security researcher UCQ from the Cyber Defen...

China Propaganda Film Reveals Military Hacks Of Political Targets

It’s no secret that China is a major source of attacks on governments and political groups and individuals. However, it’s been harder to prove that the Chinese government and military is directly involved in such attacks. At least until now. According to this report on the Website...

InduSoft Web Studio Vulnerabilities

Overview ICS-CERT has become aware of a report from the Zero Day Initiative concerning two vulnerabilities in the InduSoft Web Studio software. This information was reported to Zero Day Initiative by independent security researcher Luigi Auriemma. These vulnerabilities exploit unauthenticated...

Vanguard Defense Industries (VDI) Hacked for #Antisec Operation

Vanguard Defense Industries VDI Hacked for Antisec Operation AntiSec is targeting defense contractors again. Continuing their beef with law enforcement, and organizations that offer them support, they have targeted Richard Garcia, the Senior Vice President of Vanguard Defense Industries VDI...