Pinpointing Targets: Exploiting Web Analytics to Ensnare Victims

Over the past year, FireEye Threat Intelligence has identified suspected nation-state sponsored cyber-actors engaged in a large-scale reconnaissance effort. This effort makes use of web analytics—the technologies to collect, analyze, and report data The individuals behind this activity have amass...

ProtonMail Back Online Following Six Day DDoS Attack

Encrypted email service ProtonMail is back online today following a crippling six-day attack that saw the company’s ISPs and data centers under siege. Operators behind the service said the site may not always be reachable, as its servers are still under heavy strain and mitigating attack, and tha...

FBI Deputy Director's Email Hacked by Teenager Who Hacked CIA Chief

The same group of teenage hackers that hacked the AOL email account of the CIA director John Brennan two weeks ago has now hacked into AOL email accounts of the FBI Deputy Director, Mark Giuliano and his wife. Yesterday, Cracka, a member of the teenage hacktivist group known as 'Crackas With...

南京大汉某政府信息公开系统存在通用型SQL注入

简要描述： 貌似这处没报过。 详细说明： 大汉政府信息公开系统 参数applystarttime、webid没有做任何处理就直接可以作为sql语句拼接，会造成sql注入。 POST /xxgk/jcmsfiles/jcms1/web1/site/zfxxgk/ysqgk/ysqgksearch.jsp HTTP/1.1 Accept: text/html, application/xhtml+xml, / Accept-Language: zh-CN User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64; Trident/7.0;...

CISA Passes Senate Without Addressing Privacy Concerns

To the consternation of many — tech companies, privacy advocates, and civil liberties groups included — members of the Senate voted overwhelmingly Tuesday to pass a version of the Cybersecurity Information Sharing Act, a bill that many opposed argue will lead to continued pervasive government...

Document Containment Vulnerability in e-Government Platform of Shanghai Jofan Information Technology Co.

The eGovernment platform is an office system. A file inclusion vulnerability exists in the e-government platform of Shanghai Zhuo Fan Information Technology Co., Ltd, which allows attackers to obtain sensitive information such as configuration files by guessing the file directory...

WikiLeaks obtains CIA Director's Hacked Emails and Plans to Publish them Shortly

Breaking.... WikiLeaks, The Anti-secrecy and transparency organization, claims to have obtained the contents of CIA Director John Brennan's personal AOL email account. Also, Julian Assange, founder of WikiLeaks, has promised to publish them soon on their website. Earlier this week, Brennan's...

Apple told Judge: It's Impossible to Access Data on Locked iPhones

US Federal Official: Unlock that iPhone for me? Apple: Sorry, Nobody can do this! Neither we, nor you. Yes, in a similar manner, Apple told a U.S. federal judge that it is "IMPOSSIBLE" to access data stored on a locked iPhone running iOS 8 or later iOS operating system. In short, Apple has remind...

SQL Injection Vulnerability in Guangzhou Shengqi Computer E-Government System

Shengqi is China's first professional high-tech enterprise integrating research, development and technical service of intelligent management system for state-owned assets. SQL injection vulnerability exists in Centec's e-government system. By comprehensively exploiting the vulnerability, an...

High school Student Hacked Into CIA Director's Personal Email Account

A self-described teenage hacker has claimed to have hacked into personal AOL email account of Central Intelligence Agency CIA Director John Brennan and swiped sensitive top-secret data. It's Really a major embarrassment for Brennan as well as the CIA. The hacker, who describes himself as an...

EC Ruling Invalidates Safe Harbor - Now What?

In a ruling on October 7, 2015 the European Court of Justice ECJ invalidated the principal European component of the U.S.-E.U. Safe Harbor Framework when it ruled in Schrems v. Data Protection Commissioner. In the ruling the court said that the existing U.S.-EU Safe Harbor agreement, overseen by...

New for universal E-learning Management System SQL injection vulnerability-vulnerability warning-the black bar safety net

New for software E-learning Management System,using the enterprise pretty much Website parts list: Business: http://www.newv.com.cn/caseenterprise.html Education: http://www.newv.com.cn/casecollege.html Government: http://www.newv.com.cn/casegovernment.html The problem mainly shows in:...

Latest Microsoft Transparency Report Details Content Removal Requests

Microsoft launched a new transparency website this week that bundles reports detailing requests for data the company has received, including those from law enforcement, the government, and elsewhere. The page, which Microsoft is calling its Transparency Hub, is somewhat similar to what Apple did...

Every Call You Make or Text You Send, They'll Be Tracking From Today

From today, every phone call you make, every text message you send and every email you write will compulsorily be tracked by the government agencies under a new metadata retention scheme. Yes, you heard right. If you are a citizen of Australia with a mobile phone and an Internet connection, your...

科创政府信息公示框架任意文件上传漏洞

inurl:commfront inurl:commfront/email 该CMS多被政府网站所使用 本CMS除了POC中提到的上传点，还有很多上传点。请自行寻找。 如何寻找上传文件夹地址可以通过网站中包含上传页面的页面源代码信息获取 提交表单：...

legion-etrangere.terre.defense.gouv.fr XSS vulnerability

Vulnerable URL: http://www.legion-etrangere.terre.defense.gouv.fr/mdl/recherche/recherche.php Details: Description| Value ---|--- Patched:| Yes, at 01.11.2015 Latest check for patch:| 01.11.2015 01:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

afet.education.gouv.fr XSS vulnerability

Vulnerable URL: http://www.afet.education.gouv.fr/CVaddconfirm.php Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank...

2 0 1 5 year 9 on data security vulnerability analysis report-vulnerability warning-the black bar safety net

9 report of the core ideas In order to improve the majority of users of security awareness, of domestic professional database security vendor Anwar gold and, according to the daily order released from the vulnerability box, make up days, dark clouds, and other vulnerabilities platform security...

HTTPS Available as Opt-In for Blogspot

Google said on Wednesday it has made HTTPS available as an opt-in for its Blogspot publishing service. Google and other technology providers have been ramping up encryption rollouts in the two years since the publication of the Snowden documents began. To date, Google has encrypted Gmail, search,...

Apple Clarifies Privacy Policy

Apple’s clarified and repackaged privacy policy is merely the storefront to a company-wide decision to make the safety and integrity of user data a differentiator among large technology companies, experts said. The new privacy policy appeared today filled with practical advice for users, describi...