Attackers taking advantage of Epsilon !

We blogged about the Epsilon data breach to give our customers a heads-up on the situation. Recently, our ThreatSeeker® Network discovered a Web attack that takes advantage of the unfortunate news. As with anything our ThreatSeeker Network discovers, Websense customers are protected by ACE, our...

The Social-Engineer Toolkit v1.3.2 , New version Download !

The Social-Engineer Toolkit v1.3.2 , New version Download ! The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the...

Progenic.com down with Social Engineering by Saken & Josh of TeamDX !

Progenic.com down with Social Engineering by Saken & Josh of TeamDX ! Method: Social Engineering via LiveChat + Phone + Support Ticket System How: They had a SSN + DOB posted on their forum, Saken & Josh of TeamDX simply played the role of the person that the identity was stolen from, their domai...

Inside Story : How RSA was got hacked !

Inside Story : How RSA was got hacked ! The hack last month at RSA Security has been shrouded in mystery. How did a hacker manage to infiltrate one of the world's top computer-security companies? And could the data that was stolen be used to impair its SecurID products, which are used by 40 milli...

Sophisticated Attack Yields Data On IEEE Members

IEEE, the world’s leading society for technical professionals, has warned some 800 members that their credit card and personal information may have been stolen. The FBI has been notified of the breach. The group disclosed the November, 2010 breach in a letter to the New Hampshire Attorney General...

Elizabeth Taylor's Death Triggers Spam Campaign

Yesterday we learned that Elizabeth Taylor, an American icon for some seven decades, died of congestive heart failure at 79. Today, Kaspersky Lab expert Dmitry Bestuzhev informs us that the news of her death is being exploited via social engineering scams on Twitter. The scam uses a shortened,...

Immunity Debugger v1.82 latest version download !

Immunity Debugger v1.82 latest version download ! "Immunity Debugger is a powerful new way to write exploits, analyze malware, and reverse engineer binary files. It builds on a solid user interface with function graphing, the industry's first heap analysis tool built specifically for heap creatio...

Fox Sitcom Will Depict Pen Testing Firm

Hollywood is taking another crack at hacker culture – this time with a decidedly contemporary twist: a sitcom that will depict the zany doings of a group of security geeks who work as corporate penetration testers. The new show, breakingin, is scheduled to debut on April 6 and will star Christian...

Japan Earthquake and Tsunami Disaster Email Scams, Fake Antivirus and Phishing Attack Warning

US-CERT would like to warn users of potential email scams, fake antivirus and phishing attacks regarding the Japan earthquake and the tsunami disasters. Email scams may contain links or attachments which may direct users to phishing or malware-laden websites. Fake antivirus attacks may come in th...

Reverse Engineering of Proprietary Protocols, Tools and Techniques !

Reverse Engineering of Proprietary Protocols, Tools and Techniques ! This talk is about reverse engineering a proprietary network protocol, and then creating my own implementation. The talk will cover the tools used to take binary data apart, capture the data, and techniques I use for decoding...

EC-Council Launches Center of Advanced Security Training (CAST) !

EC-Council Launches Center for Advanced Security Training CAST to Address the Growing Need for Advanced Information Security Knowledge Mar 9, 2011, Albuquerque, NM - According to the report, Commission on Cybersecurity for the 44th President, released in November 2010 by Center for Strategic and...

Security Event : Recon 2011 Conference !

Security Event : Recon 2011 Conference ! WHAT RECON is a computer security conference held annually in Montreal, Canada. It offers a single track of presentations over the span of three days with a focus on reverse engineering and advanced exploitation techniques. The registration fee includes an...

Fedora 14 : moin-1.9.3-4.fc14 (2011-2156)

Thu Feb 24 2011 Ville-Pekka Vainio - 1.9.3-4 - Fixes CVE-2011-1058 rhbz679523 - Tue Feb 8 2011 Fedora Release Engineering - 1.9.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora15MassRebuild Note that Tenable Network Security has extracted the preceding description block directly from the...

GnackTrackR6 Released , available for Download !

GnackTrackR6 Released , available for Download ! GnackTrack is a Live and installable Linux distribution designed for Penetration Testing and is based on Ubuntu. Although this sounds like BackTrack, it is most certainly not; it's very similar but based on the much loved GNOME! GnackTrackR6 has ju...

iDefense Security Advisory 03.02.11: Apple CoreGraphics Library Heap Memory Corruption Vulnerability

iDefense Security Advisory 03.02.11 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 02, 2011 I. BACKGROUND Apple's CoreGraphics library is an API used to create and manipulate graphical elements. This API is used by many Apple applications, including the Safari browser on both Windows...

Google buy Reverse Engineering Company Zynamics (German security firm) !

Google has just acquired a small German software company called Zynamics. The company, which was founded in 2004, focuses on reverse engineering — that is, analyzing software malware in particular for which no source code is available. It's an incredibly interesting and complicated problem to try...

Google Buys Security Firm Zynamics

Google has acquired a small German security start-up called Zynamics, which is well-known in the security industry for its reverse-engineering and analysis tools. Zynamics announced the deal on its corporate blog on Tuesday, saying little other than that the company had been acquired by Google. T...

Lessons to learn from the HBGary Federal hack !

The Anonymous attack on HBGary may have amused some who enjoyed the sight of a security firm left embarrassed and exposed, but it should send a shiver down the spine of any IT administrator responsible for securing their own company. Because can you honestly put your hand on your heart and say a...

HBGary Emails A Sweet Valentine For Social Engineers

SAN FRANCISCO– The news keeps getting worse for security firm HBGary Federal. Members of the online mischief-making group Anonymous posted another cache of 20,000 company e-mails Sunday, following a similar disclosure last week. But the real damage from the leak may be yet to come, as sophisticat...

Still Smarting, Anonymous Releases 20,000 More HBGary Emails

More e-mail messages believed to belong to HBGary Federal Chief Operating Officer Greg Hoglund were posted online Sunday, fulfilling a promise by online mischief making group Anonymous to further embarrass the Washington D.C. security firm, whose CEO aroused the ire of the hacktivists last week. ...