Locky Ransomware Causes 'Internal State of Emergency' at Kentucky Hospital

For a strain of ransomware that’s only been in the wild for a little more than a month, Locky has sure been able to make a name for itself. The malware gained notoriety last month when it confounded administrators at the Hollywood Presbyterian Medical Center in Los Angeles and apparently took...

Your iPhone will Alert You if You are Being Monitored At Work

Are You an Employee? It's quite possible that someone has been reading your messages, emails, listening to your phone calls, and monitoring your activities at work. No, it's not a spy agency or any hacker… ...Oops! It's your Boss. Recently, European Court had ruled that the Employers can legally...

[SECURITY] Fedora 23 Update: hamster-time-tracker-2.0-0.3.rc1.fc23

Project hamster is time tracking for individuals. It helps you to keep trac k on how much time you have spent during the day on activities you choose to tra ck. Whenever you change from doing one task to other, you change your current activity in hamster. After a while you can see how many hours...

ncagr.gov XSS vulnerability

Vulnerable URL: http://www.ncagr.gov/aspzine/employeedirectory/dirsearch.asp?firstname=Justin=query%22%3E%3Cscript/src=%22http://xssposed.org/1.js%3Elol%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:07 GMT Vulnerability type:|...

Cyclope Employee Surveillance 8.6.1 Insecure File Permissions

Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution again Version: = 6.8.1 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.html Link: http://www.cyclope-series.com/setups/setup.exe Software descriptio...

Cyclope Employee Surveillance v8.6.1 Insecure File Permissions Vulnerability

Exploit for windows platform in category local exploits Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution again Version: = 6.8.1 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.html Link:...

Cyclope Employee Surveillance 8.6.1 - Insecure File Permissions

Cyclope Employee Surveillance 8.6.1 - Insecure File Permissions Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution again Version: = 6.8.1 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.html Link:...

Cyclope Employee Surveillance 8.6.1 - Insecure File Permissions

Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution again Version: icacls mysqld.exe...

Threat Outbreak Alert RuleID19624: Email Messages Distributing Malicious Software on November 24, 2015

Medium Alert ID: 42250 First Published: 2015 November 24 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19624 may contain the following files: Name |...

consumerprotectionbc.ca XSS vulnerability

Vulnerable URL: http://www.consumerprotectionbc.ca/businesses-cemetery-and-funeral-home/employee-search?firstname=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3Ename=name=businessasname=&Submit.x;=0&Submit.y;=0&submitcheck=1 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017...

High school Student Hacked Into CIA Director's Personal Email Account

A self-described teenage hacker has claimed to have hacked into personal AOL email account of Central Intelligence Agency CIA Director John Brennan and swiped sensitive top-secret data. It's Really a major embarrassment for Brennan as well as the CIA. The hacker, who describes himself as an...

How Amazon Employee bought 'Google.com' Domain for Only $12 from Google

Difficult to believe this, as we hardly come across such news. But trust me, a person managed to buy no ordinary .com domain, but — Google.com and that too for one whole minute. Sanmay Ved, an ex-Google employee and current-Amazon employee, experienced something of a shock when he found that the...

Federal CISOs Propose New Efforts to Shore Up Govt. Cybersecurity

Nearly six months removed from the OPM hack and with many government departments still reeling when it comes to security, several federal chief information security officers volunteered a handful of new ideas at last week’s Billington Cybersecurity Summit in Washington, D.C to combat future hacks...

Ashley Madison Hacker – An Insider Woman Employee?

"Ashley Madison was not hacked!" This is what declared by John McAfee, former founder of antivirus software company McAfee. So far everyone must be aware of Ashley Madison massive data breach. Last week, the hackers, who called themselves Impact Team, posted 10GB of personal data for tens of...

Ashley Madison Hackers (with another 300GB Dump) – Wait, Cheaters! We haven't Yet Done

Over a month ago, a group of hackers breached the popular cheater's dating service Ashley Madison and its parent company Avid Life Media, affecting tens of Millions site customers private life and also dump the website's source code onto the dark web. The hackers behind the Ashley Madison hack, w...

ShopEx多名员工安全意识不足泄露内部业务信息

简要描述： ShopEx 详细说明： 以下多名员工邮箱存在弱口令，包括hr。 hr Shopex123 chenminrui Shopex123 huhao Shopex123 lihuatian Shopex123 lixunlong Shopex1234 可进一步登陆 mail.shopex.cn 漏洞证明： 随机抽两个看一下 还有vpn说明 点到为止 就这样吧...

New Snowden Documents Outline Govt. Memos on Expanded Spying

A new set of memos uncovered by Edward Snowden and shared with the New York Times and ProPublica this week reveal how the Obama administration narrowed its search for hackers and expanded its warrantless surveillance program. The two memos, which date back to May and July 2012, enabled the Nation...

用友内部论坛数据备份信息泄露一万多员工已经内部交流信息泄露

简要描述： 看到这有个正在维护的系统，写着"系统正在升级中...将于2011年10月27日正常访问，敬请谅解！" 于是果断扫了目录，果然有数据备份、 涉及一万多的内部人员数据、大量的用友邮箱、还有部分的内部交流信息、 能再上首页吗？ 详细说明： 涉及的IP：http://219.141.185.30/wk.htm 备份数据下载地址：http://219.141.185.30/webroot.rar 果断的解压、 数据挺多的，看了下下面这两个比较有意思、 搜了下，涉及用友邮箱一共1500多、 账户总数是一万七千多、 下面这个比较有意思、...

SendGrid Email Delivery Service Hack

SendGrid, which sells a cloud-based email delivery service, has admitted that the extent of a hack disclosed three weeks ago was much more serious than originally reported. The company said an employee account was compromised and used to access other systems that contained customer and employee...

Kony EMM 1.2 Insecure Direct Object Reference

------------------------------------------------------------------------ Product: Enterprise Mobile Management Vendor: Kony Vulnerable Versions: Kony EMM 1.2 and probably older versions Tested Version: Drupal Kony EMM 1.2 Advisory Publication: 24 December 2014 Vendor Notification: 8 December 2014...