4175 matches found
Black Hat 2015 Going Dark Cryptography Presentation
LAS VEGAS – Try as they might, technologists are struggling to find a feasible way to solve the government’s and law enforcement’s “Going Dark” crypto issue. Cryptographer Matthew Green and D.C. intellectual property attorney James Denaro today during a talk at the Black Hat conference made no...
Emissary Panda APT Group Gets Selective About Data it Steals
LAS VEGAS – The Emissary Panda APT group has a long history of invading Western organizations—be they enterprises, government or political outfits—hungry for reams of intellectual property. Lately the group, however, has become a little more selective about what it steals. Researchers at Dell...
Government Asks for Security Community's Help on Technical Issues
LAS VEGAS–Washington is looking for a few good hackers. Politicians and policymakers in the United States generally are not thought of as being the most technically savvy lot. It’s a reputation that’s well-earned in some cases, with some politicians boasting about their inability to use email and...
Operation Lotus Blossom APT - Elise Malware
Advanced Persistent Threat APT type attacks continue to emerge on a global scale. What makes these attacks deviate from the norm is often the resources required to develop and implement them: time, money, and the knowledge required to create custom pieces of malware to carry out specific, targete...
DHS Raises Privacy Concerns With Senate Cyber Threat Sharing Bill
A major information-sharing bill that’s in the Senate right now would allow private organizations to share threat data with any government agency, something that the Department of Homeland Security says could have severe privacy implications and cause confusion and inefficiencies inside the feder...
citeulike.org XSS vulnerability
Vulnerable URL: http://www.citeulike.org/author/New+Zealand+Government'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14229 Google Pagerank| 8 VIP website status:| Yes Check...
United Airlines Hacked by Sophisticated Hacking Group
A group of China-backed hackers believed to be responsible for high-profile data breaches, including the U.S. Office of Personnel Management and the insurance giant Anthem, has now hit another high-profile target – United Airlines. United detected a cyber attack into its computer systems in May o...
New Hammertoss Espionage Tool Tied to MiniDuke Gang
The espionage gang behind the MiniDuke backdoor uncovered by Kaspersky Lab and CrySys Lab in 2013 has surfaced again with a new backdoor and attack platform that is used sparingly against only high-value targets. The new data theft tool, called Hammertoss, is a study not only in espionage...
Unspecified Vulnerability in Gemalto SafeNet Luna HSM
Gemalto SafeNet Luna HSM is a suite of application and transaction security solutions for enterprise and government organizations from Gemalto USA. A security vulnerability exists in Gemalto SafeNet Luna HSM, and no detailed vulnerability details are available at this time...
Hacking Team: We're Victim of a Criminal Cyber Attack
Hacking Team, the Italy-based spyware company that sells spying software to law enforcement agencies worldwide, says the company has always operated with the law and regulation in an ethical manner. However, there was only one Violation of Law in this entire event, and that is – "the massive cybe...
Java Zero-day vulnerability exploited in the Wild
Really a bad weekend for Internet users. Three previously unknown critical zero-day vulnerabilities were revealed in Adobe’s Flash Player over the weekend, thanks to Hacking team data Breach in which 400GB of internal data were leaked over the Internet. Now, a new zero-day vulnerability has been...
Hacking Team data discovered the second gold Flash 0day vulnerability-vulnerability warning-the black bar safety net
! Hacking Team is an Italian company specializing in surveillance technology hacking team and the company, was due to the government and intelligence agencies, the sale of spyware and be sued. Karma the final cycle, the company last week was the hack attack, leaked nearly 400GB of data, which in...
U.S. Government Wades Into Vulnerability Disclosure
Security researchers and software vendors have spent decades trying to work out the process of vulnerability disclosure, with limited success. Now the federal government is joining the fray in hopes of getting the two sides to play nice. The National Telecommunications and Information...
OPM Hack Expands to Include Data of 21.5M People
UPDATE–The ever-expanding data breach at the Office of Personnel Management has now spread to include the Social Security numbers and other personal data of a total of 21.5 million people, and the toll also now includes the agency’s director, Katherine Archuleta, who resigned Friday morning...
yemen.gov.ye XSS vulnerability
Open Bug Bounty ID: OBB-70745 Description| Value ---|--- Affected Website:| yemen.gov.ye Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
yemen.gov.ye XSS vulnerability
Open Bug Bounty ID: OBB-70747 Description| Value ---|--- Affected Website:| yemen.gov.ye Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
yemen.gov.ye XSS vulnerability
Open Bug Bounty ID: OBB-70744 Description| Value ---|--- Affected Website:| yemen.gov.ye Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
yemen.gov.ye XSS vulnerability
Open Bug Bounty ID: OBB-70743 Description| Value ---|--- Affected Website:| yemen.gov.ye Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
yemen.gov.ye XSS vulnerability
Open Bug Bounty ID: OBB-70740 Description| Value ---|--- Affected Website:| yemen.gov.ye Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
yemen.gov.ye XSS vulnerability
Open Bug Bounty ID: OBB-70742 Description| Value ---|--- Affected Website:| yemen.gov.ye Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...