USPS Breach Hits Customers, Employees

The United States Postal Service is continuing its investigation around a cyber attack at the agency that managed to compromise the information of both employees and customers earlier this year. The USPS announced in a statement on Monday that it recently fell victim to a “cyber intrusion inciden...

Government Requests for Facebook User Data Increasing

Facebook’s latest transparency report shows that U.S law enforcement agencies issued a greater number of total requests for user data related to criminal investigations in the first six months of 2014 than they have over any previous such period. This report, per Justice Department reporting...

Hacking Team Defends Spyware, Attacks Researchers' Methods

Privacy advocates and anti-surveillance activists have been taking a close look at the way that some vendors of so-called lawful intercept and surveillance software and hardware systems conduct their business and which customers and governments they sell their wares to. Now, some of those...

APT28 — State Sponsored Russian Hacker Group

Nearly a decade-long cyber espionage group that targeted a variety of Eastern European governments and security-related organizations including the North Atlantic Treaty Organization NATO has been exposed by a security research firm. The US intelligence firm FireEye released its latest Advanced...

Cyberespionage: 'This Isn't a Problem That Can Be Solved'

WASHINGTON–Gentlemen may not read each other’s mail, as Henry Stimson famously said so long ago, but in today’s world they certainly steal it and there’s precious little in the way of gentlemanly conduct happening in the realm of cyberespionage. It’s every man—or country—for himself in this...

Government, Industry Focusing on Issue of Resiliency

WASHINGTON–As things stand right now, the United States has no overarching national information security policy or centralized agency responsible for defending the government’s networks in the event of a serious cyberattack. There have been many pushes over the years to change that and put one...

Chinese Government Executes MITM Attack against iCloud

Apple iCloud users in China are not safe from the hackers — believed to be working for Chinese government — who are trying to wiretap Apple customers in the country. Great Fire, a reputed non-profit organization that monitors Internet censorship in China, claimed that the Chinese authorities have...

Obama Executive Order Forces Chip & Pin, EMV on Government

President Barack Obama last week signed an Executive Order that will force the federal government to adopt chip and PIN technology for government payment cards and to outfit retail point-of-sale terminals at federal facilities – like national parks and post offices – with the capacity to accept...

U.S. vulnerability management library released Bash vulnerability latest summary-vulnerability warning-the black bar safety net

! Introduction NVD National Vulnerability Databaseis the U.S. government based on vulnerability management data of the standard Knowledge Base, these data support the automation of vulnerability management and security testing, and follow Federal Information Security Management act FISMA is...

XSS vulnerabilities in Megapolis.Portal Manager

Hello 3APA3A! These are Cross-Site Scripting vulnerabilities in Megapolis.Portal Manager. It's commercial CMS from Softline-IT earlier Softline, which in particularly widespread among Ukrainian government sites including ministry, parliament, two special services and many other web sites. In 2012...

Megapolis.Portal Manager Cross Site Scripting

Hello list! These are Cross-Site Scripting vulnerabilities in Megapolis.Portal Manager. It's commercial CMS from Softline-IT earlier Softline, which in particularly widespread among Ukrainian government sites including ministry, parliament, two special services and many other web sites. In 2012 I...

Effects full version Windows: iSIGHT surveillance espionage found Windows latest 0day vulnerabilities-vulnerability warning-the black bar safety net

the iSIGHT in Russian cyber-espionage discovered to affect all versions of Windows System with the latest 0day vulnerabilities, vulnerability number CVE-2 0 1 4-4 1 1 4, At present, Microsoft is the emergency of the vulnerability of making the patch. ! Yesterday, Microsoft partners iSIGHT Partner...

Sandworm APT Team Found Using Windows Zero Day Vulnerability

UPDATE–A cyberespionage team, possibly based in Russia, has been using a Windows zero day vulnerability to target a variety of organizations in several countries, including the United States, Poland, Ukraine and western Europe. The vulnerability, which will be patched today by Microsoft, is...

Microsoft Windows Zero-Day Vulnerability "CVE-2014-4114" Used to Hack NATO

Once again a Russian cyber espionage group has gained media attention by exploiting a Zero-day vulnerability in Microsoft’s Windows operating system to spy on the North Atlantic Treaty Organization NATO, Ukrainian and Polish government agencies, and a variety of sensitive European industries over...

Twitter Files Suit Over Government Restrictions on National Security Letter Data

Twitter has filed a lawsuit in federal court asking that the United States Department of Justice’s prohibitions on publishing the number and kind of government requests for data the company receives be declared unconstitutional. The suit claims that the rules infringe on Twitter’s right to free...

Experts Laud Changes to iPhone, Android Encryption

The changes that both Google and Apple have made to their mobile operating systems to encrypt the data on users’ devices have generated praise from the security and privacy communities and vitriol and criticism from the law enforcement and political worlds in equal measure. The changes to iOS and...

A station group system vulnerabilities to cause is the station point all getshell(involving government, schools, businesses and other large sites)-vulnerability warning-the black bar safety net

Brief description: A background 2 0 plurality of the gov,all of the scored Shell Detailed description: IP address: 124.133.2.2 Background address: http://124.133.2.2/siteserver/login.aspx Use the Cookie trick to login Cookie read: BAIRONG. VC. ADMINLOGIN=6 8 8 7; SITESERVER. ADMINISTRATOR...

September 2014 Yahoo Transparency Report

There was less clamor from governments and law enforcement around the world for data collected and stored by Yahoo, but nonetheless, the technology giant still fielded more than 18,000 data requests over the first six months of the year. Yahoo yesterday released its third Transparency Report, and...

某政府行政cmssql注入漏洞

简要描述： rt 详细说明： 问题厂商：深圳太极软件有限公司 问题cms：jsp+sqlserver 注入全为sa权限 谷歌关键字：inurl:application/zwdt 问题出在 全局搜索 application/zwdt/query.jsp post:keyword= 选取五例： 1.http://www.lzxzsp.gov.cn sqlmap -u "http://www.lzxzsp.gov.cn/application/zwdt/query.jsp" --data "keyword=1&Submit3=%B2%E9%D1%AF" --dbs sqlmap -u...

As Bug Bounties Become the Norm, Challenges Remain

SEATTLE–For many years, Microsoft and other large software vendors resisted the idea of providing bug bounties or other financial incentives for researchers to report vulnerabilities. That changed when the landscape began to shift and more researchers began reporting vulnerabilities through broke...