Qakbot Virus Causes Possible Data Breach at Mass. Agencies

An untold number of computers at the Massachusetts Department of Unemployment Assistance and Department of Career Services were compromised in April, leading state officials to warn hundreds of thousands of people that their personal information may have been stolen as part of the attack. However...

DBA Gets 1-Year Sentence for Hacking Employer

A former senior database administrator for GEXA Energy in Houston was sentenced to 12 months in prison for hacking into his former employer’s computer network. Read the full article. Help Net Security...

Job Search Script - SQL Injection

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Job Search SQL Injection Vendor url:http://getaphpsite.com Version:1 Price:20$ Published: 2010-06-22...

Dallas Security Guard Pleads Guilty to Hacking

A former security guard has pleaded guilty to charges that he broke into his employer’s computers while working the night shift at a Dallas hospital. Jesse William McGraw pleaded guilty to two counts of transmitting malicious code, said the U.S. Department of Justice DoJ. Read the full article. I...

Softbiz Jobs - Cross-Site Request Forgery

======================================================================= Softbiz Jobs CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul...

ZeeCareers 2.x - PHP HR Manager Website (Cross-Site Scripting Authentication Bypass)

ZeeCareers 2.x - PHP HR Manager Website Cross-Site Scripting Authentication Bypass Title: ZeeCareers v2x - PHP HR Manager Website XSS / Auth Bypass Date: 12/12/2009 Author: bi0 Software Link: http://www.zeecareers.com/ Version: 2x CVE : Code : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \...

10 Dos and Don'ts for security job interviews

From CIO Joan Goodchild The pickings are slim in the job market and the time line of interviewing and then hiring new people is slow. But there are positions available in the security field, according to three veteran security recruiters that we spoke with recently. If you get a call that you’ve...

Unfixed XSS vulnerability at cokisimizvar.com

Security researcher Security-TR, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting cokisimizvar.com, which at the time of submission ranked 451349 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...