FBI Quietly Admits to Multi-Year APT Attack, Sensitive Data Stolen

The FBI issued a rare bulletin admitting that a group named Advanced Persistent Threat 6 APT6 hacked into US government computer systems as far back as 2011 and for years stole sensitive data. The FBI alert was issued in February and went largely unnoticed. Nearly a month later, security experts...

Reddit Removes NSL Warrant Canary from Transparency Report

Reddit’s latest transparency report is missing a nugget of information that was present in a previous report. Last year’s report included a warrant canary which stated that as of Jan. 29, 2015, Reddit had never received a National Security Letter, Foreign Intelligence Surveillance Court order or...

Hack The Pentagon Bug Bounty Opens April 18

The Department of Defense announced today that registration for its Hack the Pentagon bug bounty trial program is open, and that the program will be run on the HackerOne platform. The trial of the government’s first bug bounty program will run April 18 to May 12. The DoD said only certain...

Google has also been Ordered to Unlock 9 Android Phones

The legal battle between Apple and the FBI Federal Bureau of Investigation over a locked iPhone that belonged to one of the San Bernardino shooters may be over, but the Department of Justice DoJ are back in front of a judge with a similar request. The American Civil Liberties Union ACLU has...

The FBI against the judges command: declined to use the Tor browser vulnerability code-vulnerability warning-the black bar safety net

! Last month, the FBI was ordered disclosure used to attack the dark web child pornography website single visitors single full version malicious code. To make this decision of judge Robert J. Bryan, he expressed his understanding of the FBI what exactly is how to caught the accused is a very fair...

农友政务系统 ftb.imagegallery.aspx组件 文件上传漏洞

No description provided by source...

Microsoft built a special version of Windows 10 just for Chinese Government

China is very strict about censorship, which makes it difficult for companies to launch their products in the country. But companies like Microsoft are playing smartly to target the largest market in the world. Microsoft has found a way to enter into the banned Chinese Market, but this time with...

Multiple vulnerabilities in the Nepalese national government's common website building system

Nepal National Government Universal System NGUS is a website builder system. There are multiple vulnerabilities in the NGN Universal System that can be exploited by an attacker to obtain sensitive information from the database, upload a webshell, and gain access to the server...

piracicaba.sp.gov.br XSS vulnerability

Vulnerable URL: http://www.piracicaba.sp.gov.br/buscar?conteudo=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 20.08.2016 Latest check for patch:| 20.08.2016 13:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Iranians Indicted Over DDoS Campaign on Banks, Dam Hack

The U.S. government on Thursday indicted seven hackers affiliated with the Iranian government for attacks it called “a frightening new frontier in cybercrime.” Accusing the men of carrying out a series of distributed denial of service DDoS attacks against 46 financial companies, the Department of...

Requests for Yahoo User Data Spiked After Paris Terror Attacks

Yahoo’s latest transparency report, published today, reflects a spike in government and law enforcement requests for user data following the Paris terrorist attacks of Nov. 13. The attacks resulted in the deaths of 130 people and injuries to more than 350 others; the situation remains fluid with...

FBI Warning Of Car Hacks A Good Start, Say Security Experts

Security researchers are applauding the FBI and the National Highway Traffic Safety Administration for warning the auto industry that cars and trucks are vulnerable to internet-based attacks. But, they argue, more needs to be done by the government and car makers to protect drivers. Last week, in...

aplicacoes.jbrj.gov.br XSS vulnerability

Vulnerable URL: http://aplicacoes.jbrj.gov.br/jabot/v2/consticket.php Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

Security Researcher Goes Missing, Who Investigated Bangladesh Bank Hack

Tanvir Hassan Zoha, a 34-year-old security researcher, who spoke to media on the $81 Million Bangladesh Bank cyber theft, has gone missing since Wednesday night, just days after accusing Bangladesh's central bank officials of negligence. Zoha was investigating a recent cyber attack on Bangladesh'...

Mitre Tackles Its Critics: Set To Revamp CVE Vulnerability Reporting

Mitre Corporation will introduce a new pilot program for classifying Common Vulnerabilities and Exposures CVE in the coming weeks. The move is in response to a backlash in the security community where some critics contend Mitre is failing to keep pace with a massive influx in the number of report...

CanSecWest 2016 Attack Attribution False Flags

With every APT report there comes the gnawing question of whodunit. Just this week, a Reuters report linked a spree of ransomware attacks against U.S. companies to state-sponsored hacker groups in China. Most reports, however, offer no tangible evidence other than technological footprints that ca...

cca.hawaii.gov XSS vulnerability

Vulnerable URL: http://cca.hawaii.gov/ins?s=london "=network=1,3,4,5,6,8,9,10,11,12,13,14,15,16,17,19,29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

CMSTOP媒体云&政务版 verfiysite 参数identifier SQL注入漏洞

No description provided by source...

zitsa.gov.gr XSS vulnerability

Vulnerable URL: http://www.zitsa.gov.gr/el/search/%3Csvg%20onload=alert%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3513302 Google Pagerank| 4 VIP website...

abc.gov.au XSS vulnerability

Vulnerable URL: http://www.abc.gov.au/rollercoaster/kidstv/50years/50gallery/viewer.swf?xmlDataPath=http://45.55.162.179/vuln.xml Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...