Threat Outbreak Alert: Fake Outstanding Obligation Notice Email Messages on January 9, 2014

Medium Alert ID: 32391 First Published: 2014 January 9 21:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an outstanding obligation notice from the Department of the Treasury for the recipient. The text in the email...

[Suricata 1.4.7] Open Source Next Generation Intrusion Detection and Prevention Engine

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of...

大汉通版jis统一身份认证系统漏洞打包

简要描述： 大汉通版jis统一身份认证系统漏洞打包，政府部门使用居多 详细说明： 大汉通版jis统一身份认证系统: 在用户修改信息时进行抓包发现 POST: http://10.11.5.201:9080/jis/front/upduserdo.jsp CONTENT:...

IG Report Shows DHS Making Progress, But Still Has Room to Improve on Information Security

Although there are still a number of issues that need to be addressed with the Department of Homeland Security’s information security efforts, the department is improving in many areas and making strong progress toward implementing better security controls, a new report from the Inspector General...

US police department pays $750 Ransom to retrieve their files from CryptoLocker Malware

The CryptoLocker Malware continues to spread, infected more than 12,000 U.S computers in one week and threatening millions of computers in the UK. Just last week, The UK National Crime Agency urge people afflicted by CryptoLocker not to pay ransom, not least because there is no guarantee that the...

Department of Energy Susceptible to Attack

An audit of the Department of Energy has shown that 29 new weaknesses emerged on the agency’s networks this year in addition to 10 existing that the DoE failed to fix after a 2012 audit. The audit, undertaken by the Office of Inspector General and the Office of Audits and Inspections, revealed...

Lavabit Gives Users Chance to Recover Email Archives

Lavabit, the now-shuttered secure email provider that has become something of a rallying point for privacy advocates and security experts in the ongoing NSA surveillance saga, is giving its former users until Thursday night to change their passwords on the service. They will then have a short...

Web Hosting software WHMCS vulnerable to SQL Injection; emergency security update released

WHMCS, a popular client management, billing and support application for Web hosting providers, released an emergency security update for the 5.2 and 5.1 minor releases, to patch a critical vulnerability that was publicly disclosed. The vulnerability was publicly posted by a user named as...

Integrated circuits can be compromised using Undetectable hardware Trojans

A team of researchers from the U.S. and Europe has developed a Hardware Trojan, which is an undetectable to many techniques, raising the question on need of proper hardware qualification. They released a paper on stealthy Dopant-Level Hardware Trojans, showing how integrated circuits used in...

Oil, Energy Watering Hole Attacks Linked to DOL attack

A string of watering hole attacks targeting oil and energy companies dating back to May could be linked to similar attacks against the U.S. Department of Labor website. Researchers at Cisco discovered the compromised domains of 10 oil and energy companies worldwide, including hydroelectric plants...

Government to Release Hundreds of Documents Related to NSA Surveillance

In response to a lawsuit by the Electronic Frontier Foundation, the Department of Justice is preparing to release a trove of documents related to the government’s secret interpretation of Section 215 of the PATRIOT Act. The declassified documents will include previously secret opinions of the...

Department Of Transport UK SQL Injection

Title: ====== Department of Transport UK - SQL Injection Vulnerability Date: ===== 2013-08-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=732 VL-ID: ===== 732 Common Vulnerability Scoring System: ==================================== 8.6 Introduction: ============= O...

Department of Transport UK - SQL Injection Vulnerability

Document Title: =============== Department of Transport UK - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=732 Release Date: ============= 2013-08-28 Vulnerability Laboratory ID VL-ID: ==================================== 73...

DHS and FBI Warn About Android Security Threats

The Department of Homeland Security and the FBI are warning police and fire departments as well as emergency medical service providers and other security personnel that out-of-date Android devices pose a serious security risk to those organizations. The warning came via an unclassified memo...

Warning: Android Bitcoin wallet apps vulnerable to theft

A critical vulnerability in the Android implementation of the Java SecureRandom random number generator was discovered, that leaves Bitcoin digital wallets on the mobile platform vulnerable to theft. Before the announcement was made, users on the forums had noticed over 55 BTC were stolen a few...

House Rejects Amendment to Sever NSA Data Collection Funding

By a narrow dozen votes, the U.S. House of Representatives yesterday failed to pass an amendment to the Department of Defense Appropriations Act of 2014 that would have severed funding for the NSA’s phone record surveillance program turned out by Edward Snowden. The amendment, put forth by Rep...

Fake FBI Ransomware Targeting OS X Users

The Federal Bureau of Investigation issued an alert yesterday warning users about a strain of ransomware purporting to come from the FBI that is targeting Mac OS X machines. This time, the ransomware isn’t malware at all, but a website that uses JavaScript to load numerous iframes. The webpage...

Congress Warns Section 215 May Not Be Renewed

Incensed at the way that the Department of Justice and the intelligence community have used the controversial section 215 of the PATRIOT Act, members of the House Judiciary Committee on Wednesday angrily questioned Justice and NSA officials about their surveillance of U.S. citizens and said that...

Australia's Telstra Wiretapping undersea cables from past 12 years for FBI

According to a secret agreement it signed in 2001 with the FBI and US Department of Justice - Telstra, Australia's largest phone company is storing huge volumes of electronic communications it carried between Asia and the US for potential surveillance by US intelligence agencies. The contract was...

FAA Civil Aviation Registry Vulnerable to Data Breach

The Federal Aviation Administration’s FAA Civil Aviation Registry lacks proper security controls to prevent unauthorized access to its systems, according to a report based on a recent audit undertaken by the Office of the Inspector General OIG for the United States Department of Transportation Do...