London Police Arrest Five Anonymous Hacker !

Month after allegedly assaulting various websites to defend Wikileaks London police may have caught members of "hacktivism" Anonymous group. Five alleged members were arrested in London today for Anonymous violation of the Computer Misuse Act. The men are aged 15 to 26 and face up to 10 years in...

Infected PC Compromises Pentagon Credit Union

The credit union used by members of the U.S. armed forces and their families has admitted that a laptop infected with malware was used to access a database containing the personal and financial information of customers. The Pentagon Federal Credit Union PenFed issued a statement to the New...

CVE-2010-1679

Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package...

Estonia institutes volunteer cyber army !

In 2007, when Estonia's government, financial and media computer networks were attacked by unknown Russian hackers following the government's decision of relocating a Soviet war memorial, it must have been hard to believe that something good would come from it at the end. With that attack, Estoni...

China said that needs 'more Internet security' !

China should invest more in its own Internet security, lest it become a victim, or even scapegoat, for international hacking activities, an industry expert said on Tuesday. "Our current protection input is not enough, and the scale and size is far less intensive compared to that of Europe and the...

Hackers Expose EDL Members' Details Online, Group Urges Vigilance

A controversial anti-Islamist group has alerted its members to be vigilant after their details were disclosed online. Hackers, claiming to be from the Mujahideen Hacking Unit, infiltrated one of the organization's websites, releasing hundreds of names and addresses linked to the English Defense...

Germany to create cyber defense center !

Germany is planning the creation of a national cyber defense center in 2011 in reaction to a growing number of cyber attacks on government institutions that mostly originate in China. An interior ministry spokesman said Monday that while in 2009 the government registered only 900 attacks, there...

Experts Discuss Stuxnet's Long-Term Impact on Cybersecurity

Stuxnet has both fascinated and horrified the cybersecurity community throughout 2010. Its multiple zero-day exploits, stealth capabilities, and precise control over industrial machinery mark it as a prime example of advanced cyber threats. Stuxnet represents both a nightmare and a dream for...

U.S. Faces Shortage of Computer Science Graduates Amid Rising Cybersecurity Needs

The United States could soon face a significant shortage of computer science professionals unless it starts graduating more students in this field. At a time when computer hacking and security are critical issues for both the government and the private sector, the U.S. is producing only 9,000...

The Case for Enterprise Cyber Ranges

The illustrious op-ed page of the Wall Street Journal featured talk of cyberwar again this week with “How to Fight and Win the Cyberwar.” The piece, written by Mortimer Zuckerman, rehashes some important facts: U.S. critical infrastructure, including the parts of it owned by major enterprises, is...

Front Accounting 2.3RC2 Multiple Persistent XSS Vulnerabilities

Exploit for php platform in category web applications =============================================================== Front Accounting 2.3RC2 Multiple Persistent XSS Vulnerabilities =============================================================== Affected Applications: Front Accounting v2.3RC2;...

Exposing SCADA Systems With Shodan

Editor’s Note: The U.S.’s Industrial Control System Computer Emergency Response Team ICS-CERT recently issued a warning to its members about the ability of attackers to discover ICS systems using a simple search on Shodan, a public search engine that is used to locate systems accessible from the...

Top 5 best criminal computer hackers of all time

These hackers are the ones that you've seen in shackles arrested for cybercrimes when they were just getting out of puberty. Some have done it for financial gain others just for fun. 1. Kevin Mitnick. Mitnick is perhaps synonymous with Hacker. The Department of Justice still refers to him as "the...

Canada Aims to Strengthen Cyber Defense with $90 Million Security Plan

Canada released its Cybersecurity Strategy this month, emphasizing the immense challenge of protecting government and corporate computer systems. “There is no simple way to detect, identify, and recover from attackers who cannot be seen or heard, who leave no physical evidence behind them, and wh...

New Rules Enable Military Assistance During Domestic Cyber-Attacks

The Obama administration has revised federal policy, enabling the military to assist during a domestic cyber-attack, reported the New York Times on Oct. 21. Typically, the military cannot deploy units within the country's borders, except for natural disasters, and even then, a presidential order ...

CGI Generic Fragile Parameters Detection (potential)

A web application hosted on the remote service returned 50x response codes when discovered CGIs were called with invalid values. These codes may have several origins : - A web application firewall or another defense mechanism may abruptly interrupt the request. - There could be a transient web...

EU Agency Says Stuxnet Portends Future Sophisticated Attacks

The European agency responsible for protecting the critical infrastructure of EU countries is warning its member states that the Stuxnet attack represents a major change in the malware landscape and that they should be prepared for further attacks with the same level of sophistication and...

Achievo 1.4.3 - Cross-Site Request Forgery

Achievo 1.4.3 - Cross-Site Request Forgery Advisory Name: Cross Site Request Forgery in Achievo 1.4.3 Internal Cybsec Advisory Id: 2010-08-03 Vulnerability Class: Cross Site Request Forgery Release Date: 2010-Sept-28 Affected Applications: Achievo 1.4.3 other versions may be also vulnerable...

U.S. Wants "Cyber Shield" for NATO

The U.S. and its NATO allies should build a ‘cyber shield’ to protect against future attacks, the Pentagon’s 2 man said in a speech in Brussels. A senior official at the Department of Defense urged the U.S.’s European allies to erect a “Cyber Shield” to protect NATO members against Internet based...

Some Pushdo Variants Resuming Spam Operations

A few days after the majority of the command-and-control servers belonging to one of the variants of the Pushdo botnet were taken offline, some researchers say that there are indications that portions of the botnet are back to their old tricks, downloading new spam templates for a resumption of...