Yahoo Slams Email Surveillance Story: Experts Demand Details

Bombshell revelations that Yahoo conducted mass email surveillance is raising hackles among legal, civil liberties and security experts that demand Yahoo and the U.S. government come clean. Meanwhile Yahoo challenged the accuracy of Tuesday’s report by Reuters. “The article is misleading. We...

Subpoena for Signal Messaging Data Renders Little

Open Whisper Systems, the non-profit group behind the encrypted messaging app Signal, was served with a subpoena for user data earlier this year but since the company keeps such little information on its users, it was unable to produce most of what it was asked for. The American Civil Liberties...

Threat Outbreak Alert RuleID25281: Email Messages Distributing Malicious Software on September 27, 2016

Medium Alert ID: 49052 First Published: 2016 September 27 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25281 may contain the following files: Name ...

nord.gouv.fr XSS vulnerability

Vulnerable URL: http://www.nord.gouv.fr/Outils/Glossaire/namefilter/Y%22%3E%3Cmarquee%20onstart=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

MarsJoke Ransomware Targets .EDU, .GOV Agencies

New ransomware has surfaced that targets state and local government agencies, and educational institutions that are less likely to have big budgets to ward off or mitigate threats, according to researchers. The ransomware, called MarsJoke, was detected in a large-scale email campaign last week th...

Arbitrary File Read Vulnerability in Shanghai Ohuhu Network Technology Co.

Shanghai Ohuhu Network Technology Co., Ltd. is a service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. Shanghai Ohuhu Network Technology Co., Ltd Ohuhu government system suffers from an arbitrary file read vulnerability...

Contrexx CMS GOV Module OnlineDesk SQL Injection Vulnerability

Contrexx is an open source content management system. A SQL injection vulnerability exists in the Contrexx CMS GOV module OnlineDesk, which can be exploited by an attacker to transfer the Id parameter of the egov module to the database, resulting in the disclosure of database information...

Arbitrary File Write Vulnerability in Eurohoo Government System of Shanghai Eurohoo Network Technology Co.

Shanghai Ohuhu Network Technology Co., Ltd. is a service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. There is an arbitrary file write vulnerability in Shanghai Ohuhu Network Technology Co. The vulnerability allows an...

DHS Announces Intent to Publish IoT Security Framework

CAMBRIDGE, Ma.—The Department of Homeland Security today formally announced its plan to develop a set of strategic principles for the Internet of Things, saying such a framework is necessary to protect the nation’s critical infrastructure from cyber threats. In a brief talk at the Internet of...

Google Retreats on Some Allo Privacy Promises

Google released its Allo messenger application today, and right along with it a measure of controversy that has critics urging potential users to stay away. The angst stems from what seems to be a reversal on Google’s part to start logging chats in the app’s non-incognito mode by default, somethi...

Experts Want Transparency From Government's Vulnerabilities Equities Process

The federal government’s Vulnerabilities Equities Process—albeit a heavily redacted version—was turned over more than a year ago, and despite that measure of visibility, privacy and security watchdogs still don’t have the transparency they seek with the regard to the unreported flaws the governme...

maine.gov XSS vulnerability

Vulnerable URL: http://www.maine.gov/search?search= Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21778 VIP website status:| Yes Check maine.gov SSL...

British Court rules Hacktivist 'Lauri Love' can be extradited to USA

British citizen and alleged hacker Lauri Love will be extradited to the United States to face allegations of hacking into United States government computer systems, a UK judge ruled on Friday. Love, 31, is currently facing up to 99 years in prison for allegedly hacking into the FBI, the US Army,...

Snowden Makes Case for a Presidential Pardon

Edward Snowden took his case to the media Wednesday arguing a presidential pardon would be an important step in preserving democracy and his only hope in returning to the United States. He argued that under the current Espionage Act, future whistleblowers would be less inclined to come forward to...

Tor Joins Movement Against Expanding Hacking Powers

The Tor Project on Monday made a public plea for others to speak out against the proposed amendments to Rule 41 of the Federal Rules of Criminal Procedure, which are taking effect Dec. 1 barring a Congressional injunction. The amendments would expand the Department of Justice’s ability to hack...

Fallout Over OPM Breach Report Begins

Wednesday’s bombshell report on the U.S. Office of Personnel Management breaches that exposed sensitive data belonging to more than 22 million people has sparked a cavalcade of finger pointing, politicking and squabbling over who knew what first. The scathing report by Republicans on the U.S. Hou...

SQL injection vulnerability in the webappcode parameter of sendmail.jsp page of government information system of Fujian Xingyu Information Technology Co.

The open government information platform is a WEB system that strengthens the construction and management of open government information through informatization means. There is a SQL injection vulnerability in this product, the vulnerability URL is: http://target/cms/cms/infopub/sendmail.jsp, the...

SQL injection vulnerability in the NewUserName parameter of the getquestion.jsp page of the government information system of Fujian Xingyu Information Technology Co.

The open government information platform is a WEB system that strengthens the construction and management of open government information through informatization means. There is a SQL injection vulnerability in the modified product, the vulnerability URL is:...

SQL Injection Vulnerability in Showgg.asp Page ID Parameter of Chengdu Yilian Government Website System

Chengdu Yilian Government Website System is a portal website for government courts and other users developed by . There is a SQL injection vulnerability in this product, the vulnerability URL is:/Showgg.asp?ID=,cookie injection, the injection parameter is ID, the attacker can use the vulnerabilit...

SQL Injection Vulnerability in Showarticles.asp Page ID Parameter of Chengdu Yilian Government Website Building System

Chengdu Yilian government website building system is a portal website for government courts and other users developed by . There is a SQL injection vulnerability in this product, the vulnerability URL is: /Showarticles.asp?ID=,cookie injection, the injection parameter is ID, the attacker can use...