ShadowBrokers Dump More Equation Group Hacks, Auction File Password

The mysterious ShadowBrokers, long thought to have given up their cause, released on Saturday additional hacking tools allegedly belonging to the Equation Group, along with the password guarding the original set of exploits the group planned to auction off. The password was at the tail end of a...

Stack Buffer Overflow Vulnerability in Legba Incorporated YateBTS

Legba Incorporated YateBTS is software for analog protocol stacks for GSM networks. A stack buffer overflow vulnerability exists in Legba Incorporated YateBTS. An attacker could exploit the vulnerability by sending an oversized UDP packet resulting in a memory buffer overflow, which in turn could...

Experts Question Legality of Use of Regin Malware by Intel Agencies

The disclosure of the Regin APT malware campaign this week has spurred much speculation about the source of the attack, with many experts pointing the finger at either the NSA or GCHQ, the British spy agency. Though security researchers involved in uncovering the attack have remained mum on the...

Regin Cyberespionage Malware Platform Targets GSM Networks

Researchers have uncovered a complex espionage platform reminiscent of Duqu that has been used since at least 2008 not only to spy on and extract email and documents from government agencies, research institutions and banks, but also one that targets GSM network operators in order to launch...

Phone Hack Could Block Messages, Calls on GSM Networks

By tweaking the firmware on certain kinds of phones, a hacker could make it so other phones in the area are unable to receive incoming calls or SMS messages, according to research presented at the USENIX Security Symposium earlier this month. The hack involves modifying the baseband processor on...

Rogers CA Website - SQL Injection Vulnerability

Document Title: =============== Rogers CA Website - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=725 Release Date: ============= 2012-10-02 Vulnerability Laboratory ID VL-ID: ==================================== 725 Common...

Rogers CA Website - SQL Injection Vulnerability

Document Title: =============== Rogers CA Website - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=202 Release Date: ============= 2011-09-16 Vulnerability Laboratory ID VL-ID: ==================================== 202 Common...