Threat Outbreak Alert RuleID21314: Email Messages Distributing Malicious Software on February 24, 2016

Medium Alert ID: 43730 First Published: 2016 February 24 15:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21314 may contain the following files: Name |...

Just One Device? No, Government wants Apple to Unlock 12 More iPhones

Until now, the FBI is asking for Apple's help in unlocking the iPhone belonging to one of the terrorists in the San Bernardino shootings that killed 14 and injured 24 in December. However, in addition to iPhone 5C belonged to San Bernardino shooter Syed Farook, the U.S. Justice Department is...

things.maths.cam.ac.uk XSS vulnerability

Vulnerable URL: https://things.maths.cam.ac.uk/computing/news/news.pl?id=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2016 Latest check for patch:| 25.07.2016 09:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Hacker Leaks Info of 30,000 FBI and DHS Employees

An unknown hacker who promised to release the personal information on government employees has dump online a list of nearly 20,000 Federal Bureau of Investigation FBI agents and 9,000 Department of Homeland Security DHS officers. Though the authenticity of the information has not been verified, a...

They Named it — Einstein, But $6 Billion Firewall Fails to Detect 94% of Latest Threats

The US government's $6 Billion firewall is nothing but a big blunder. Dubbed EINSTEIN, the nationwide firewall run by the US Department of Homeland Security DHS is not as smart as its name suggests. An audit conducted by the United States Government Accountability Office GAO has claimed that the...

Police Using Planes Equipped with Dirtbox to Spy on your Cell Phones

The Anaheim Police Department of California — Home of Disneyland — admitted that they used special Cell Phone surveillance technology, known as DirtBox, mounted on aircraft to track millions of mobile users activities. More than 400 pages of new documents PDF published Wednesday revealed that Loc...

Dridex Adopting Dyre Tactics, Targeting U.K. Banks

Attackers behind the Dridex Trojan have narrowed their sights on banks based in the United Kingdom frequented by high-value business accounts, researchers claim. When a new version of the Trojan was released two weeks ago, it was promptly followed by a series of infection campaigns that focused o...

Jail Authorities Mistakenly Early Released 3,200 Prisoners due to a Silly Software Bug

Washington State Department of Corrections DoC is facing an investigation after it early released around 3,200 prisoners over the course of 13 years, since 2002, when a bug was introduced in the software used to calculate time credits for inmates' good behavior. The software glitch led to a...

militaryinstallations.dod.mil XSS vulnerability

Vulnerable URL: http://www.militaryinstallations.dod.mil/MOS/f?p=MI:5:0::::url:type=external|url=http%3A//www.xssposed.org%22%3E%3Csvg/onload=pr\u006fmp\u0074%28/XSSPOSED/%29// Details: Description| Value ---|--- Patched:| Yes, at 03.02.2016 Latest check for patch:| 03.02.2016 20:12 GMT...

دائرة-الاراضي-والمساحة.الاردن Open Redirect vulnerability

Vulnerable URL: http://دائرة-الاراضي-والمساحة.الاردن/redirect.php?link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

Threat Outbreak Alert RuleID20028: Email Messages Distributing Malicious Software on December 15, 2015

Medium Alert ID: 42676 First Published: 2015 December 15 21:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20028 may contain the following files: Name |...

Domain Creep? Maybe Not.

I just read a very interesting article by Sydney Freedberg titled DoD CIO Says Spectrum May Become Warfighting Domain. That basically summarizes what you need to know, but here's a bit more from the article: Pentagon officials are drafting new policy that would officially recognize the...

Threat Outbreak Alert RuleID19665: Email Messages Distributing Malicious Software on November 30, 2015

Medium Alert ID: 42284 First Published: 2015 November 25 19:36 GMT Last Updated: 2015 November 30 14:13 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1966...

Than the gourd baby is also scary Baidu full system APP SDK vulnerability – WormHole wormhole vulnerability analysis report-vulnerability warning-the black bar safety net

Than the gourd baby is also scary Baidu full system APP SDK vulnerability – WormHole wormhole vulnerability analysis report APP vulnerability discovery,Android reverse analysis bydroidsec ”You can’t have a back door in the software because you can’t have a back door that's only for the good guys....

New Campaign Shows Dridex Active, Targeting the French

Two weeks after authorities announced they had taken down the botnet behind the banking malware Dridex, new research suggests the threat is alive and well. Researchers with security company Invincea announced today that they’ve noticed 60 instances of attackers dropping Dridex on users in France,...

5.6 Million Federal Employees' Fingerprints Stolen in OPM Hack

The OPM Data Breach Office of Personnel Management is getting even worse than we thought. We already know more than 21 Million current and former federal employees had their personal and highly sensitive private information hijacked in a massive data breach that affected Defense Department's OPM...

financekpp.gov.pk XSS vulnerability

Vulnerable URL:...

SQL Injection Vulnerability in DeptId Parameter of Wave Software Administrative Services System

The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the DeptId parameter of the administrati...

Feds Change Policy to Require Warrant for Use of Stingrays

The Department of Justice has established a new policy that requires federal law enforcement agents–and state and local agencies working with the department–to obtain search warrants in order to use Stingray devices. The change is a major one, as agents will now need to show probable cause before...

Two Arrested For Dropping Drugs And Porn Into Prison Using A Drone

The use of Unmanned Aerial Vehicles UAVs, popularly known as Drones, is rapidly transforming the way crimes are conducted, and this story helps prove this right. Maryland State Police arrested two men – Thaddeus Shortz and Keith Brian Russell – suspected of allegedly trying to smuggle drugs and...