Two Texas Bills Could Shape Mobile Privacy

Two bills introduced in Texas this week could refine mobile privacy in the state and tweak how law enforcement can request sensitive information from cell phones going forward. A press release from the Texas Electronic Privacy Coalition TxEPC credits Bryan Hughes, a Republican from the town of...

Anti-Virus / Anti-Bot policy enforcement issue on VSX gateways

...

Apple Breached by Facebook Hackers Using Java Exploit

Apple is the latest major American company to enter the security confessional and disclose it has been breached. The company told Reuters today it was attacked by the same crew that hit Facebook, which disclosed its breach last Friday, and that like the social media giant, no data had been stolen...

Facebook hacked in Zero-Day Attack

Facebook operator of the largest social network with more than 1 billion members, said on Friday it had been the target of an unidentified hacker group, but that no user information was compromised during the attack. The attack occurred when a handful of the company's employees visited a...

Europol Takes Down Ransomware Gang in Spain, UAE

A ransomware ring was taken down Wednesday in the United Arab Emirates and Spain by Europol and Spanish law enforcement, smashing an operation that netted more than €1 million annually. The eleven individuals arrested included six Russians, two Ukrainians and two Georgians; the 27-year-old...

Hacker broadcasts zombie warning on TV

Television viewers in Montana, perhaps looking to stay inside from the scary cold outside, got an even scarier surprise when warnings of a zombie apocalypse took over their TV screens. There TV Stations Montana's KRTVMichigan's, WNMU-TV and WBUP-TV were victims of this zombie prank. The channels...

Hacker broadcasts zombie warning on TV

Television viewers in Montana, perhaps looking to stay inside from the scary cold outside, got an even scarier surprise when warnings of a zombie apocalypse took over their TV screens. There TV Stations Montana's KRTVMichigan's, WNMU-TV and WBUP-TV were victims of this zombie prank. The channels...

Phil Zimmermann: 'We Really, Really Don't Have the Keys'

SAN JUAN, Puerto Rico–Phil Zimmermann has seen more changes in the the threat landscape in his career than he may care to remember. The inventor of the PGP encryption software and one of the key movers in the crypto wars of the early 1990s, Zimmermann is back in the game now with a new mobile...

At The Ritz-Carlton, San Juan, Puerto Rico

Held annually, this year’s Security Analyst Summit, as always aims to foster conversation and collaboration between Kaspersky Lab researchers and global law enforcement agencies, CERTs and other cyber-crime fighters...

UBUNTU-CVE-2012-6100

report/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/user:viewhiddendetails capability requirement, which allows remote authenticated users to discover a hidden lastaccess value by reading an activity report...

CVE-2012-6100

report/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/user:viewhiddendetails capability requirement, which allows remote authenticated users to discover a hidden lastaccess value by reading an activity report...

apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token

Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors...

Long-awaited HIPAA Omnibus Rule is Unveiled

As of January 17, 2013, the HIPAA Omnibus Rule has finally been released by the Department of Health and Human Services HHS, which will modify the HIPAA privacy, security, and enforcement rules. The package of regulations, in regard to this long-overdue HIPAA Omnibus Rule, will officially be post...

Payback, Indonesian president website defaced

Hackers crew Jember Hacker terrorists JHT deface the official website of Indonesian president https://www.presidensby.info with a message reads, "This is a PayBack From Jember Hacker Team". Hackers deface website of president Susilo Bambang Yudhoyono SBY apparently in protest at growing corruptio...

Payback, Indonesian president website defaced

Hackers crew Jember Hacker terrorists JHT deface the official website of Indonesian president http://www.presidensby.info with a message reads, “This is a PayBack From Jember Hacker Team”. Hackers deface website of president Susilo Bambang Yudhoyono SBY apparently in protest at growing corruption...

Design/Logic Flaw

Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allows remote attackers to bypass the 1 AlgorithmSuite, 2 SignedParts, 3 SignedElements, 4...

CVE-2012-2378

CVE-2012-2378 affects Apache CXF: versions 2.4.5–2.4.7, 2.5.1–2.5.3, and 2.6.x before 2.6.1. The issue is a flaw in enforcing WS-SecurityPolicy 1.1 SupportingToken child policies on the client side, allowing remote attackers to bypass the policies for AlgorithmSuite, SignedParts, SignedElements, ...

Regulator Warns Banks About DDoS Attacks, Encourages Information Sharing

In an alert issued by the Office of the Comptroller of the Currency OCC, Deputy Comptroller for Operational Risk Carolyn G. DuChene warned financial and other critical institutions about the wave of ongoing distributed denial of service DDoS attacks targeting their networks. DuChene is urging the...

Ransomware Extortion Scam Locks Machines, Demands Payment

The latest ransomware scam is locking down infected machines and displaying localized webpages warning users that their computer contains “banned material” and won’t be unlocked until a fine is paid, according to a report from McAfee’s Naganathan Jawahar. The Trojan displays a warning, purportedl...

New Apache Exploit Doling Out Zeus, Sweet Orange Exploit Kit

UPDATE – A new Apache module, Linux/Chapro.A, is making the rounds, injecting malicious content including a popular Zeus variant into web pages. The module was discussed in a blog on ESET’s Threat Blog by the company’s Security intelligence Program Manager, Pierre-Marc Bureau. According to the...