13 Years Jail for Phishing Attack

13 Years Jail for Phishing Attack A 27 year old man "Kenneth Joseph Lucas II " from Los Angeles has been sentenced to 13 years in prison for allegedly playing an active role in a phishing attack, aimed at stealing money from consumer bank accounts during the operation "Phish Phry" in 2009. The tw...

13 Years Jail for Phishing Attack

13 Years Jail for Phishing Attack A 27 year old man "Kenneth Joseph Lucas II" from Los Angeles has been sentenced to 13 years in prison for allegedly playing an active role in a phishing attack, aimed at stealing money from consumer bank accounts during the operation "Phish Phry" in 2009. The two...

Barr Unbowed Part II: Setting the Record Straight on HBGary Federal

This is the second in a two-part interview with Aaron Barr, the former CEO of HBGary Federal In the second half of his exclusive interview with Threatpost, former HBGary CEO Aaron Barr – speaking before the arrest of alleged Lulzsec member Ryan Cleary in the UK – talked about the likely law...

Lulzsec Outs "Snitches" After UK Arrest

The age-old adage that there’s “no honor among thieves” appears to be playing out in the world of hacking, as well, as members of the online hacking group Lulzsec published information identifying two associates they accuse of informing on them to authorities. The outing followed the arrest on...

Three Alleged Anonymous Leaders Arrested in Spain

The New York Times is reporting that Spanish Law enforcement officials have arrested three individuals in connection with cyberattacks on Sony’s PlayStation Network as well as other corporations and governments around the world. The individuals are alleged to be leading members of the internet...

CVE-2011-1921

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to...

CVE-2011-1921

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz shortcircuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to...

Nmap NSE net: smb-brute

Attempts to guess username/password combinations over SMB, storing discovered combinations for use in other scripts. SYNTAX: userdb: The filename of an alternate username database. brutelimit: Limits the number of usernames checked in the script. In some domains, it's possible to end up with...

Company Offers Tool To Break iPhone Encryption

ElcomSoft, a Russian security firm, claims that a new encryption cracking tool can decode data encrypted on mobile devices running Apple’s iOS operating system. Elcomsoft says it has developed the first ever commercially available password and encryption cracking tool. The company has made a phon...

They Changed What? HIPAA & HITECH

In 1996, the Healthcare Insurance Portability and Accountability Act HIPAA opened the door to increased exchanges of healthcare information in an effort to improve care and reduce costs. The Act included new provisions for protected health information PHI. Since there are only a few limited revie...

CVE-2011-1402

Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a block, via a reque...

Design/Logic Flaw

Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a block, via a reque...

CVE-2011-1402

Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a block, via a reque...

CVE-2011-1402

Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a block, via a reque...

CVE-2011-1402

Mahara prior to 1.3.6 is affected by CVE-2011-1402 (and related CVEs). The issue stems from incorrect privilege enforcement, a missing user-id check, and improper handling of the Overriding Start/Stop Dates setting, allowing remote authenticated users to bypass restrictions and perform actions ac...

CVE-2011-1402: Undefined Security Weakness

Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a block, via a reque...

Finnish Police Arrest 17 in Online Banking Scam

Finnish law enforcement officials arrested seventeen individuals in connection with an attack against Nordea Finland’s online banking services that took place in early 2010, according to a report from Softpedia. The group allegedly used a variant of the Gozi Trojan, also known as Papras, to pilfe...

Hackers steal 250,000 X Factor Details !

Hackers steal 250,000 X Factor Details ! The FBI is reportedly investigating after hackers broke into Simon Cowell's computer network. Details of more than 250,000 X Factor entrants are said to have been stolen and Simon and bosses at American TV network Fox, are said to be scared that the thieve...

PlayStation Network Security Update !

On Tuesday, April 26 Sony shared that some information that was compromised in connection with an illegal and unauthorized intrusion into our network. Once again, Sony'd like to apologize to the many users who were inconvenienced and worried about this situation. Sony want to state this again giv...

Information disclosure

IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly enforce privilege requirements for table access, which allows remote authenticated users to modify SYSSTAT.TABLES statistics columns via an UPDATE statement. NOTE: some of these details are obtained from third...