4164 matches found
Caleb Sima on Armorize's Black Hat Talk Being Pulled
Dennis Fisher talks with Caleb Sima of Armorize about the company’s scheduled talk at Black Hat on China’s cyber army being canceled under pressure from the governments of China and Taiwan. Talk on Chinese Cyber Army Pulled From Black Hat Podcast audio courtesy of sykboy65 Subscribe to the Digita...
Talk on Chinese Cyber Army Pulled From Black Hat
A talk on China’s state-sponsored offensive security efforts scheduled for the Black Hat conference later this month has been pulled from the conference after concerns were raised by some people within the Chinese and Taiwanese government about the talk’s content. The presentation was to be...
VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities
VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Winamp is a proprietary media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is...
Saint Corporation Cross Site Scripting / HTML Injection
SAINT Corporation XSS Defacement Vulnerability Management, Assessment, Penetration Testing SAINT Corporation provides network security tools to financial, government and educational institutions around the world SAINT customers. The SAINT® vulnerability assessment tools are recognized as industry...
'Perfect Citizen' is an Imperfect Solution
Few phrases in the English language are as terrifying as, “We’re from the government and we’re here to help.” And that’s essentially what the Obama administration, in the form of the National Security Agency, is saying to the companies that run the country’s utilities and other privately owned...
Government Details Vision of Trusted Identities
The White House has published a draft of a strategy designed to make the concept of trusted identities and authentication more of a reality in the digital world. Read the full article. eWEEK...
Fake Government Email Spam Hides Zbot
Attention-piquing malicious spam emails purportedly coming from the DHS, the Pentagon or the Transportation Security Administration have recently been spotted by researchers. Read the full article. Help Net Security...
Researchers Find Government Site Hosting Phishing Data
Phishing gangs have been getting bolder of late, and there’s no clearer evidence than the cache of phishing data that researchers at Sunbelt found on a site owned by the Paraguayan government.The researchers discovered that a site belonging to the federal government in Paraguay is currently hosti...
Offensive Attacks And The World Cup 2010
The World Cup 2010 is the most popular event running right now. The cyber criminals are already taking advantage by sending spam leading to phishing sites, to spread malware and ID theft attacks. Today we found an interesting attack apparently not related to money. The attack was on the Indonesia...
VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)
VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability CVE-2010-1392 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with...
Code injection
Unspecified vulnerability in JustSystems Ichitaro 2004 through 2009, Ichitaro Government 2006 through 2009, and Just School 2008 and 2009 allows remote attackers to execute arbitrary code via unknown vectors related to "product character attribute processing" for a document...
CVE-2010-2152: Undefined Security Weakness
Unspecified vulnerability in JustSystems Ichitaro 2004 through 2009, Ichitaro Government 2006 through 2009, and Just School 2008 and 2009 allows remote attackers to execute arbitrary code via unknown vectors related to "product character attribute processing" for a document...
JVN#17293765 Ichitaro series vulnerable to arbitrary code execution
The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. Impact When opening a specially crafted file locally or through a website, an attacker may be able to execute arbitrary code. Solution Update the software...
It's Time For a New Privacy Model
The current raft of stories about privacy problems on Facebook and other high-profile sites is leading to a renewed consideration in some circles of whether there’s a need for tighter government regulation of sites’ privacy policies and user notifications. Regulation, experts say, may be the only...
Microsoft to Share Vulnerability Details with Governments
Microsoft today announced plans to share pre-patch details on software vulnerabilities with governments around the world under a new program aimed at securing critical infrastructure and government assets from hacker attacks. The program, codenamed Omega, features a Defensive Information Sharing...
Public-Private Partnerships Form at Cybercrime Summit
A who’s who confab of government, corporate and civic leaders from the around the world has convened in Dallas this week at the East West Institute’s Worldwide Cybersecurity Summit to discuss the need for wider public-private partnerships to make the Internet safer. Read the full article. The Las...
Code injection
Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government 2006 through 2010 allows user-assisted remote attackers to execute arbitrary code via a crafted font file...
CVE-2010-1424
Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government 2006 through 2010 allows user-assisted remote attackers to execute arbitrary code via a crafted font file...
CVE-2010-1424
CVE-2010-1424 affects JustSystems Ichitaro and Ichitaro Government (2006–2010). A vulnerability in a crafted font file could allow a user-assisted remote attacker to execute arbitrary code. The issue is described as unspecified in some sources, but multiple connected documents confirm the softwar...
