Inside the Black Energy 2 Botnet

By Dmitry Tarakanov Cybercriminals use a variety of bots to conduct DDoS attacks on Internet servers. One of the most popular tools is called Black Energy. To date, Kaspersky Lab has identified and implemented detection for over 4,000 modifications of this malicious program. In mid-2008 malware...

DBA Gets 1-Year Sentence for Hacking Employer

A former senior database administrator for GEXA Energy in Houston was sentenced to 12 months in prison for hacking into his former employer’s computer network. Read the full article. Help Net Security...

Cisco Warns of Vulns in Building Systems

Cisco Systems has warned of serious vulnerabilities in a device that connects a building’s ventilation, lighting, security, and energy supply systems so they can be controlled by IT workers remotely. The networking giant urged users of the Cisco Network Building Mediator products to patch the...

Top 20 'Critical Controls' from SANS Institute

The SANS Institute has released critical security controls for cyber defense agreed to by a consortium of agencies including: “NSA, US Cert, DoD, DoD JTF-GNO, the Department of Energy Nuclear Laboratories, Department of State, DoD Cyber Crime Center plus the top commercial forensics experts and p...

Energy, Chemical Companies Are Malware Targets

Critical infrastructure organizations, such as those in the energy, oil, pharmaceutical and chemical sectors, encountered at least twice as much web malware as other organizations during 2009, researchers found. Read the full article. Secure Computing...

Survey of Executives Finds a Growing Fear of Cyberattacks

A survey of 600 computing and computer-security executives in 14 countries suggests that attacks on the Internet pose a growing threat to the energy and communication systems that underlie modern society. Read the full article New York Times...

DBA Convicted of Hacking GEXA Energy

Steven Jinwoo Kim, 40, a DBA has been convicted of hacking his former employer GEXA Energy following his guilty plea to intruding into his employer’s computer database system. Read the full article. Databreaches.net...

AREVA e-terrahabitat SCADA systems vulnerabilities

Overview AREVA e-terra habitat contains multiple vulnerabilities. Description AREVA e-terra habitat is a core component of the Energy Management system that provides real-time data and process management services. e-terra habitat contains vulnerabilities, including a buffer overflow. For more...

Unfixed XSS vulnerability at www.cmcenergyservices.com

Security researcher bydefaced, has submitted on 12/10/2008 a cross-site-scripting XSS vulnerability affecting www.cmcenergyservices.com, which at the time of submission ranked 7526081 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. ...

Unfixed XSS vulnerability at www.poetenergy.com

Security researcher EKBER, has submitted on 16/11/2007 a cross-site-scripting XSS vulnerability affecting www.poetenergy.com, which at the time of submission ranked 1018337 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

Areva/Alstom Energy Management System Detection

Binary data scadaapparevaemsdetect.nbin...

CVE-2022-32507

An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should have been designed to be only called from privileged accounts, could also be called from unprivileged accounts. This demonstrates that no access controls were implemented for the different BLE commands...