CVE-2010-1424: Undefined Security Weakness

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government 2006 through 2010 allows user-assisted remote attackers to execute arbitrary code via a crafted font file...

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability

VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems. It is the underlying technology that powers...

Government Says IRS Systems Still Risky

With tax time rapidly approaching, the U.S. Internal Revenue Service still has not sealed up all of the holes that could allow insiders or external hackers to access taxpayer data, according to a new report. The Government Accountability Office states that the IRS has corrected less than one-thir...

Congress Under Constant Barrage of Malware

Congress and other government agencies are under a cyber attack an average of 1.8 billion times a month, a number that has been growing exponentially since President Barack Obama took office. In 2008, security events caused by vectors including worms, Trojan horses and spybots averaged 8 million...

RSA 2010: Howard Schmidt Lays Out U.S. Security

The nation’s new cybersecurity czar in a Town Hall meeting session here today mapped out his top priorities in the post and provided a glimpse at how the Obama administration may handle security issues with other countries. National cybersecurity coordinator Howard Schmidt also announced that the...

Why the U.S. Is an Easy Mark for Hackers

In the wake of the attacks against Google, Adobe and other major high-tech companies, there was a lot of public shock and outrage that this kind of attack happened. But it was really just a small part of what’s been going on for years. In a conversation with Dennis Fisher, Tom Kellermann of Core...

U.S. Gov to Simulate Cyber Attack Next Week

Security industry analysts and lawmakers will get an unprecedented chance next week to evaluate how the government might respond to a cyber-attack on critical infrastructure targets. Read the full article. Computerworld...

Mudge to Work For Uncle Sam at DARPA

Peiter Zatko — a respected hacker known as “Mudge” — has been tapped to be a program manager at DARPA, where he will be in charge of funding research designed to help give the U.S. government tools needed to protect against cyberattacks. Read the full article. cnet...

Zeus Trojan Attacking NSA, .gov Sites

Criminals are spamming the Zeus banking Trojan in a convincing e-mail that spoofs the National Security Agency. Initial reports indicate that a large number of government systems may have been compromised by the attack. Read the full article. KrebsonSecurity...

Sterlite SAM300AX ADSL Router Cross Site Scripting

Sterlite SAM300AX ADSL router is provided through MTNL, New Delhi, India, amongst other national / international locations www.sterlitetechnologies.com / http://sterlitetechnologies.com/sterlite.aspx. +About MTNL+ http://mtnldelhi.in/glance/index.htm MTNL was set up on 1st April, 1986 by the...

Anatomy of a Targeted, Persistent Attack

A new report published today sheds light on the steps ultra-sophisticated attackers take to gain a foothold inside governments and company networks and remain entrenched in order to steal intellectual property and other data. The bad news is these attacks — including the recent ones on Google,...

German Government Warns Against Using IE Browser

In response to the security hole in several versions of Internet Explorer IE, the German Federal Office for Information Security is recommending that Internet Explorer users should switch to an alternative browser until a patch for IE has been made available. Read the full story The H Security...

Malware Open Season on Taxpayers

As any reader of this site knows, cybercriminals can steal your money not just by putting malware on your machine, but by phishing attacks too. Phishing attacks don’t just target online banking and e-payment systems, but almost any site which asks the user to input sensitive data. Sites run by...

PBX Phone System v2.x - Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ PBX Phone System v2.x - Multiple Vulnerabilities ================================================ PenTest Information: ==================== Global-Evolution Security Team remove discover...

Can Howard Schmidt Make a Difference?

At first glance, the selection of Howard A. Schmidt as the White House Cybersecurity Coordinator looks like little more than a safe and easy choice designed to quiet the critics who for seven months have been howling for action from the Obama administration. But a closer look shows that Schmidt’s...

Q&A: Eugene Spafford on Cybercrime, Security Research

Threatpost editor Dennis Fisher talks with Eugene Spafford of Purdue’s CERIAS center about cybercrime, funding for long-term security research projects and whether the federal cybersecurity coordinator position matters. Fisher: Do you see any indications that there will be more funding coming fro...

79 Million Government, Military Records Breached

Although the combined number of reported data breaches in the government and the military has dropped in 2009 compared to last year, many more records were compromised in those breaches, according to recent figures compiled by the Identity Theft Resource Center. Read the full article. Government...

GAO Names Areas of Threat to U.S.

It’s not a very good day when a security report concludes: Disruptive cyber activities expected to become the norm in future political and military conflicts. But such was the case as the Government Accountability Office took yet another critical look at the US federal security systems and found...

FBI Reports Malware on Rise in Electronic Funds Fraud

The FBI reports it has seen a rise of malware over the past few months targeting small and medium businesses and municipal government entities and school districts. Once a malicious attachment or link is opened, keylogging tactics obtain bank account info where criminals then initiate wire...

Flawed USB Sticks Can Be Used to Download Whatever Desired

UK security researchers MWR InfoSecurity have found a flaw in the driver software of USB sticks that could allow the technology to “interrogate” and download the complete content of any system. The company believes the use of such devices is only months away, and has shared its research with the...