Phishing Sites Increasingly Targeting University Students

In February, the developing trend of phishing websites targeting universities in the U.S. and the U.K. became increasingly commonplace, and Symantec researchers isolated three exemplative cases. The first targeted a University in the U.K. This phishing attack came via email, and purported that...

NY Times: Stuxnet Traced to Five Iranian Internet Domains

The Stuxnet Worm attempted to infiltrate five industrial complexes in Iran over a span of ten months according to a report in the New York Times based on a Stuxnet Dossier published by Symantec. Stuxnet was designed to not only attack industrial control systems built by Siemens Corporation, which...

High Profile Education, Government Sites Hacked

The Web sites of some of the nation’s top universities were discovered to be serving up links to bogus online stores offering everything from popular software by Microsoft to student visas and Viagra, according to a report from security firm zScaler. Portions of Websites belonging to Harvard...

Spam Volume Recovers After Holiday Break

The amount of spam hitting users’ inboxes fell off a cliff in late December, with many security experts attributing the decline to the sudden disappearance of the Rustock botnet and other networks from the spam business. But the level of spam has begun to gain back some of the ground it lost toda...

Storm Botnet Returns as Part of New Year's Attacks

A new spam campaign that appeared shortly before the New Year is part of a new effort by the crew behind the Storm/Waledac botnet and is using some rather elementary tactics–in combination with fast-flux–to attempt to compromise unsuspecting users. The new attack emerged late last week and is...

NoScript Cross Site Scripting Via SQL Injection

Hi List NoScript fails to detect the reflective XSS from trusted domains when an attack is conducted through SQLXSSI. The bypass in NoScript has been successfully conducted by using "Reflective XSS" through Union SQL poisoning attacks by exploiting the reverted errors in the browser. The attack...

Report: Phishing Activity is Down (And That's A Bad Thing)

The number of phishing attacks declined in the first half of 2010, but a report from the Anti Phishing Working Group warns that might not be such a good thing. The group released its Global Phishing Survey on Monday covering the first six months of 2010. Overall, the survey reported a steep decli...

Nmap NSE: SMB Enum Domains

This script attempts to enumerate domains on a Windows system, along with their policies. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-domains.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumdomains.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Enum...

Nmap NSE: SMB Enum Domains

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Report: More Than 1 Million Web Sites Serving Malware in Q2

Web anti malware firm Dasient has published data claiming that more than 1 million Web sites were compromised in the second quarter, 2010 – a sharp increase. More than one million Web domains were infected with malicious code in the second quarter of 2010 – around one percent of all active Web...

Hack Puts Spotlight on Malware's Long Tail: Parked Domains

They’re the dusty corners of the Web: so-called “parked” domains. But these little trafficked sites are attracting the attention of security experts, who say that it’s time for hosting firms and others that profit from them to clean up malware infections that may be exposing millions of Web users...

OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0091...

USN-964-2: Likewise Open regression

USN-964-1 fixed vulnerabilities in Likewise Open. The upstream fixes were incomplete, which caused problems running certain services. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Matt Weatherford discovered that Likewise Open did not correctly chec...

USN-964-1: Likewise Open vulnerability

Matt Weatherford discovered that Likewise Open did not correctly check password expiration for the local-provider account. A local attacker could exploit this to log into a system they would otherwise not have access to...

Opera Browser Multiple Vulnerabilities july-10 (Win02)

The host is installed with Opera web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnwin02july10.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser Multiple Vulnerabilities july-10 Win02 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Spammers Moving to Disposable Domains

Spammers and the botnet operators they’re allied with are continuing to adapt their techniques to evade security technologies, and now are using what amount to disposable domains for their activities. A new report shows that the spammers are buying dozens of domains at a time and moving from one ...

CVE-2010-2659

Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site...

Code injection

Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters...

CVE-2010-2660

Opera before 10.54 on Windows/Mac and before 10.60 on UNIX suffers from improper restriction of certain homograph characters in domain names, enabling remote attackers to spoof IDN domains. Root cause: inadequate validation of characters used in domain names. Impact: possible spoofing of the addr...

CVE-2010-2660

Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters...