Sony Hiring Information Security Engineers & Facebook Hire George Hotz

Sony Hiring Information Security Engineers After 14 Hacks, Finally Sony open job recruitment for "Sr Application Security Analyst ". Sony Estimates 171 Million Dollar Loss due to PSN Hack. Also Sony CEO sorry for PSN hack, offers data theft insurance. Social network Facebook has hired a computer...

U.S. Dept. Of Commerce Calls For Online Code Of Business Conduct

The Department of Commerce’s Internet Policy Task Force released a proposal Wednesday calling for a voluntary code of conduct for companies that do business online. The Report, titled Cybersecurity, Innovation and the Internet Economy, calls for a private-public partnership to promote best securi...

Sony Apologizes, Offers $1 Million Insurance After Hacking !

Sony Corp. 6758 Chairman Howard Stringer apologized and offered U.S. customers of PlayStation Network and Qriocity online entertainment services a year of free identity- theft protection after the system was crippled by hackers. Japan's biggest consumer-electronics exporter will offer a $1 millio...

Windows Servers Hacked at The Hartford Insurance Company !

Hackers have broken into The Hartford insurance company and installed password-stealing programs on several of the company's Windows servers. In a warning letter sent last month to about 300 employees, contractors, and a handful of customers, the company said it discovered the infection in late...

162 Websites Defaced by Urdu hack

162 Websites Defaced by Urdu hack Websites : BEST-DUI-DEFENSE-ATTORNEYS.INFO CAR-INJURY-CLAIM.INFO CHARTER-A-JET.INFO CHEAP-CARINSURANCEQUOTATION.INFO CHEAP-LIFEASSURANCE-QUOTE.INFO CHEAP-SECUREDLOANS.INFO CHEAPCARIBBEANPACKAGES.INFO CHEAPWEBCONFERENCING.INFO CHILDMOLESTATIONLAWYER.INFO...

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability (CVE-2010-2750)

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability CVE-2010-2750 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability t...

Zurich Insurance Fined Millions in UK

The UK operation of Zurich Insurance has been fined £2.27m by the Financial Services Authority FSA for losing personal details of 46,000 customers. It is the highest fine levied on a single firm for data security failings. Read the full article. BBC News...

VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities

VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Winamp is a proprietary media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is...

A Closer Look At Security Insurance

An inside look at a California-based engineering company defrauded by an online banking Trojan, automated clearing house transfers, East-coast based money mules, yet the company was holding a cybersecurity insurance policy and looks to recover all of its stolen funds. Read the full article...

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability CVE-2010-1392 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with...

Platnik SQL Injection

Exploit Title: PLATNIK - SQL Injection Vulnerability Discovered by: podatnik386 Description: PLATNIK is the official Polish program to support documents for the Social Insurance Company pl. ZUS. The application includes several fields that are vulnerable to sql injection. Vulnerable version:...

AVCON Buffer Overflow

Exploit for windows platform in category local exploits ===================== AVCON Buffer Overflow ===================== !/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE...

AVCON 4.6.8.7 Buffer Overflow

!/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE Code : exploit.pl Twitter: http://twitter.com/D1N Dork: site:gov.cn "AVCON" There are other bugs... This is just for fun ;-...

Zeus Botnet Steals $150K from Michigan Company

An insurance firm in Michigan lost nearly $150,000 this month as a result of a single computer virus infection. Read the full article. KrebsonSecurity...

More than 160,000 affected by data breach at UC Berkeley

Hackers had access to a database for about six months at the University of California at Berkeley and stole health-related data on more than 160,000 students and other people who used the school’s health services center. College officials said that the attack on the health center’s database was...

[Full-disclosure] HP Mercury Quality Center Any SQL execution

Vendor: HP Product: Mercury Quality Center Version: 9.0 build 9.1.0.4352 Vendor Informed: No HP Mercury Quality Center is test management product for companys to do software testing and quality insurance. HP Mercury Quality Center has additional guest command on server which allows any user who...

Security Advisory - MyTaxexpress 2003

Original Advisory: Tuesday, March 25, 2003 Severity: Medium - High Description: Unencrypted tax-return information saved in C:My Documents by default can pose security risks, and may disclose financial/personal information to the Internet via peer-to-peer P2P networks. Version: Tested on the...