Rethinking Black Hat: Building, Rather Than Breaking, Security

No doubt breaking things is fun. I remember back when I was 10 years old when I took apart a squirrel cage fan, flipped some wires and so forth, and then attempted to plug it back in. Good thing my mom stopped me seconds before I was about to get a literal jolt of reality. These days, I still kee...

UNITED Security Summit 2011, 19-20 September - San Francisco

UNITED Security Summit 2011, 19-20 September - San Francisco The UNITED Security Summit is focused on innovation and collaboration in the security community. Bringing together security decision makers, practitioners, commercial vendors, open source projects and academia, the Summit highlights...

UNITED Security Summit 2011, 19-20 September - San Francisco

UNITED Security Summit 2011 , 19-20 September - San Francisco The UNITED Security Summit is focused on innovation and collaboration in the security community. Bringing together security decision makers, practitioners, commercial vendors, open source projects and academia, the Summit highlights...

Pentagon launches "Cyber Fast Track" program to fund hacker innovation

Pentagon launches "Cyber Fast Track" program to fund hacker innovation Peiter Zatko, a hacker known as Mudge who is now at the Defense Advanced Research Projects Agency, said he joined the Pentagon's research arm to try and build bridges between the government's cybersecurity needs and hackers...

Pentagon launches "Cyber Fast Track" program to fund hacker innovation

Pentagon launches "Cyber Fast Track " program to fund hacker innovation Peiter Zatko, a hacker known as Mudge who is now at the Defense Advanced Research Projects Agency, said he joined the Pentagon's research arm to try and build bridges between the government's cybersecurity needs and hackers...

DOD Launches New Cyber Strategy Website

DOD Launches New Cyber Strategy Website The Department of Defense today launched a new website to highlight DoD's first unified strategy for cyberspace announced on July 14. The website is a tool to help explain and consolidate DoD's cybersecurity accomplishments and new way forward for military,...

DOD Launches New Cyber Strategy Website

DOD Launches New Cyber Strategy Website The Department of Defense today launched a new website to highlight DoD's first unified strategy for cyberspace announced on July 14. The website is a tool to help explain and consolidate DoD's cybersecurity accomplishments and new way forward for military,...

Anup Ghosh on Targeted Attacks and the Need for Security Innovation

Dennis Fisher talks with Anup Ghosh of Invincea about the current wave of targeted attacks against high-profile companies such as RSA, the IMF and Citigroup and how the lack of innovation on the defensive side of the fence has made life easier for the attackers. Podcast audio courtesy of sykboy65...

ICE Innovation => SQL injection vulnerability

Exploit for php platform in category web applications ============================================================ Title: ICE Innovation =SQL injection vulnerability Date:10/6/11 Author: Sideswipe Home: www.pro2leet.net or www.alboraaq.com or www.indishell.in Category: Web apps Dork: intext:"Desi...

Hackito Ergo Sum 2011 slides available for Download !

Hackito Ergo Sum 2011 slides available for Download ! HES aims at anticipating the challenges of the security world and gathers together underground or amateur security researchers together with professional security expert researchers and technical decision makers. During three days, HES will...

Pentagon to Obama: icanhasbilliondollars plz?

Capitol Hill may be awash in tough talk on cuts to domestic programs, but that’s not stopping the Pentagon from seeking an additional billion dollars in funding for cyber security, according to a report from Nextgov.com. The Department of Defense is requesting $3.2 billion, almost $1 billion more...

Yahoo India R&D to Host 'HACK U' for IIT Kharagpur Students !

Yahoo! India R&D will be hosting 'HACK U'– the University Hack Day event for IIT Kharagpur students on campus between 17 and 20 March. Close to 250 students are expected to participate in this four day event of learning, hacking and fun, which is part of Yahoo!'s on-going commitment to nurture...

New Windows 8 Rumors Highlight Advanced Features and Enhanced Security

Just as you were getting comfortable with Windows 7, Windows 8 seems to be on the horizon for the next two years. Celebrating the one-year anniversary of Windows 7— the fastest-selling OS in history—Microsoft’s Dutch website briefly mentioned its successor: “Microsoft is on course for the next...

1CLICK DVD Converter 2.1.7.1 - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

1CLICK DVD Converter 2.1.7.1 - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities // source: https://www.securityfocus.com/bid/44163/info // 1CLICK DVD Converter is prone to multiple vulnerabilities that let attackers execute arbitrary code. // An attacker can exploit these issues by...

1CLICK DVD Converter 2.1.7.1 - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

// source: https://www.securityfocus.com/bid/44163/info // 1CLICK DVD Converter is prone to multiple vulnerabilities that let attackers execute arbitrary code. // An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a file from a network sha...

New Controls Needed to Improve Privacy

WASHINGTON, D.C.– As the speed of technological innovation has continued to increase in recent years, it has completely outpaced the ability of companies, consumers and regulators to keep up with the ways in which those changes affect online privacy, experts say, and in order to make real...

TinyPug Cross Site Request Forgery

============================================================================== » Note : Default Username Of Admin : Administrator ============================================================================== » Tinypug Remote Change Password Exploit...

Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)

Tinypug 0.9.5 - Cross-Site Request Forgery Password Change www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation...

CVE-2006-6404

INNOVATION Data Processing FDR/UPSTREAM 3.3.0 GA Oct 2003 allows remote attackers to cause a denial of service service outage via a sequence of TCP SYN packets to many ports, as demonstrated using nmap. NOTE: the vendor's testing reportedly found that no denial of service occurred...

CVE-2006-6404

INNOVATION Data Processing FDR/UPSTREAM 3.3.0 GA Oct 2003 allows remote attackers to cause a denial of service service outage via a sequence of TCP SYN packets to many ports, as demonstrated using nmap. NOTE: the vendor's testing reportedly found that no denial of service occurred...