CVE-2012-4737

channels/chaniax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certa...

Team GhostShell leak One Million Records

TeamGhostShell a team linked with the Activist group Anonymous, is claiming that they have hacked some major U.S. institutions including major banking institutions, accounts of politicians and has posted those details online. The dumps comprising of millions of accounts has been let loose on the...

ocPortal CMS 8.x Session Hijacking

OVERVIEW ocPoral CMS 8.x and lower versions are vulnerable to Session Hijacking flaw which could allow attackers to compromise administrator session. 2. PRODUCT DESCRIPTION ocPortal is the website Content Management System a CMS for building and maintaining a dynamic website. ocPortal's powerful...

Your Friend can help Investigators to Access your Facebook Profile

If you're not already particularly picky about who you friend on Facebook, you might want to think about rejiggering those privacy settings. It's not the backdoor access that the FBI has been pushing for, but US District Judge William Pauley III has now ruled that it and other law enforcement...

Cyber Security Alliance Launches Trend Spotting Project

A new international cyber security alliance announced plans to put the Continents best heads together to try to envision future cyber security trends. The International Cyber Security Protection Alliance ICSPA, a British organization that helps support law enforcement cyber crime units, announced...

Wireless Carriers See Spike in Cell Phone Records Requests

Some of the nation’s largest wireless carriers say they last year collectively received some 1.3 million requests from law enforcement for customers’ phone records – a number that continues to rise. The information shared with police includes geolocation information, content of text messages,...

Twitter Transparency Report Shows Huge Interest From U.S. Law Enforcement

Privacy advocates and security experts often warn users about the consequences of handing over so much of their personal data to Web sites or social networks, saying that they never know how it’s going to be used or sold. But it’s rare that users ever see examples of that in action. Twitter is...

Citadel Malware Crew May Be Taking Its Wares Off the Market

It turns out that malware authors–at least some of them–may have an interest in economics. Perhaps worried about market saturation or commoditization, the distributors of the Citadel malware, which has been used to deliver ransomware in the past, are apparently about to take their creation off th...

CarderProfit Case Shows Maturation of FBI Anti-Cybercrime Operations

The FBI is the country’s top police unit, charged with tackling the biggest problems facing its citizens. Cybercrime, by just about any measure, would fall somewhere near the top of that list of problems.The FBI historically has been ineffective and at times indifferent to all of this. However,...

Operation Card Shop : FBI Arrested 24 Credit Card Cyber Criminals

Operation Card Shop : FBI Arrested 24 Credit Card Cyber Criminals The FBI has arrested 24 cybercriminals part of an international law enforcement operation aiming to arrest and prosecute the users of a sting operation called "Carder Profit". The suspects, collared after a two-year investigation...

Assange's Asylum In The Balance, Researcher Warns Ecuador's Deliberations Are Vulnerable To Online Snooping

With Wikileaks founder Julian Assange anxiously awaiting word from the government of Ecuador on his request for political asylum, a security researcher warns that the country’s Ministry of Foreign Affairs, which is handling the Assange asylum request, is using a video conferencing system that is...

Anonymous Again Crusading Against Child Pornography

Members of the hacktivist collective Anonymous resurfaced this week with a new campaign to expose suspected pedophiles on Twitter and get the site and its users to help root out other accounts linked to child pornography. In a Pastebin post, someone using the hashtag Anonymous posted the Twitter...

Why Google Won't Protect You From Big Brother

In this talk from the TEDx San Jose conference, security and privacy researcher Chris Soghoian explains the way that surveillance works these days, why it’s so easy for law enforcement to watch private citizens and why companies such as Facebook, Twitter, Google and others won’t protect their use...

Senator Seeks More Info On DOJ Location Tracking Practices

Senator Al Franken D-MN is demanding answers to questions about the U.S. Department of Justice DOJ practice of gathering data from wireless providers in order to monitor individuals’ movements using mobile phone location data. Franken released a copy of a letter to Attorney General Eric Holder on...

FBI Concerned About Bitcoin Usage Among Cybercriminals

The Federal Bureau of Investigation has become increasingly concerned over the usage of the mostly-anonymous payment network Bitcoin by hackers and cybercriminals, according to an unclassified report obtained by Wired this week. The report, “Bitcoin Virtual Currency: Unique Features Present...

UK Ministry of Defence: Hackers Have Breached Top Secret Systems

The UK’s military’s head of cyber security warned that hackers have breached computer systems containing top secret data, The Guardian reported. Major General Jonathan Shaw told the paper that the number of known breaches to top secret systems was small, but that attacks were “hard to quantify” a...

Malware Poses as US Department of Justice Violation Notice

Posing as the US Department of Justice DoJ, a new variant of the Citadel Malware called Reveton is responsible for a ransomware campaign that attempts to extort $100 from its victims. The infections are occurring after users are lured to a drive-by download site where a dropper installs the Citad...

36 Web domains seized tied to online financial fraud

Thirty-six websites used to sell stolen bank account details have been taken down following an investigation by the Serious Organised Crime Agency SOCA. The arrest of two men in the UK and another in Macedonia is the result of an international operation in which 36 web domains, used to trade...

Russian Mafia Organizes to Double Cybercrime Profits in 2011

The dollar-value of online criminal activity conducted by the Russian mafia and other criminal organizations doubled in 2011, according to a new report from the Russian security firm Group-IB. The global cyber crime market was worth $12.5 billion in 2011, the report claims. Russian-speaking...

Anon Tweets About Hack, Gets Arrested

A 21 year-old Ohio man associated with the Anonymous Internet collective is in detention after boasting on Twitter about his involvement in the hack of the Utah Chiefs of Police Association and the Salt Lake City Police Department. John Anthony Borell III was charged with two counts of computer...