Google WiFi Privacy Probe Widens

Any penance Google could ultimately pay for violating privacy sentiments across the planet has become a bit more unpredictable. Canada became the latest nation to launch a formal investigation into Google’s practice of harvesting personal Wi-Fi data from open wireless networks all across the...

Beta Users Refute MS Click Fraud Claims

Beta customers named in two click fraud lawsuits Microsoft filed this week maintain their innocence, and both say they assisted the software company in investigating the source of the problem. Read the full article. IDG News Service...

Windows 7 Hit by Display Driver Security Hole

A serious security vulnerability in Microsoft’s newest operating system could expose users to code execution and denial-of-service attacks, the company warned in an advisory issued late Tuesday. The vulnerability, which only affects Windows 7 and Windows Server 2008 R2, was publicly discussed ahe...

Cisco Hardware Counterfeiters Caught By Feds

A joint investigation by federal agencies leads to the conviction of several individuals trading in counterfeit Cisco network hardware. Read the full article. eWEEK...

Microsoft Releases Security Advisory 983438

Microsoft has released security advisory 983438 to notify users of a vulnerability in Microsoft Windows SharePoint Services 3.0 and Microsoft Office SharePoint Server 2007. The advisory states that Microsoft is investigating public reports of exploitation of the vulnerability that may allow the...

As Many as 3,000 Vodafone Memory Cards Infected by Malware

The malware that was found on a pair of Vodafone memory cards installed in HTC Magic handsets recently has in fact affected an entire batch of 3,000 memory cards, the company said. Vodafone Spain said that the company’s investigation into the incident found that a much larger number of cards was...

419 Scams Expanded in 2009

People around the world continue to be duped by advance-fee frauds, with one Dutch private investigation company estimating the highest ever annual losses occurred in 2009. Read the full article. Computerworld...

Infiltrating the Pushdo Botnet

It’s very rare that we researchers get a chance to explore the inner workings of a botnet command and control server. Detailed insight into the botnet server or command component can give us valuable information about the motives of the botnet and possibly the bad guys behind it. But granting...

Attacks Continuing Against IE Flaw as Microsoft Preps Patch

Microsoft officials said on Sunday that they are continuing to investigate the attacks that are exploiting the unpatched flaw in Internet Explorer, but that the attacks right now are limited to specifically targeted activity against enterprise networks. The company said that it doesn’t look like...

Google Attackers Used Internet Explorer Zero Day

Several of the companies victimized in the attack that hit Google and dozens of other companies recently were compromised through the use of a new, unpatched vulnerability in Internet Explorer, experts say. The flaw was used in a sophisticated attack that included victims receiving targeted email...

Black Energy Tool Used in Citigroup Hack

The Federal Bureau of Investigation is probing a computer-security breach targeting Citigroup Inc. that resulted in a theft of tens of millions of dollars by computer hackers who appear linked to a Russian cyber gang, according to government officials. Read the full article. Wall Street Journal...

Microsoft Acknowledges IE7 Flaw

Microsoft has acknowledged a new unpatched vulnerability in Internet Explorer 6 and 7, and said that the company is investigating methods for fixing the flaw. The company said that although there is public exploit code available for the vulnerability, it has not seen any evidence of ongoing attac...

HealthNet Data Breach Affects 1.5 Mil Customers

Health Net Inc. announced Wednesday that it is investigating a healthcare data security breach that resulted in the loss of patient data, affecting 1.5 million customers. The healthcare provider said the lost files, a mixture of medical data, Social Security numbers and other personally...

Nebraska's Worker Comp Database Hacked

A hacker has broken into the Nebraska Worker’s Compensation database, prompting an FBI investigation and an effort to contact those who may be affected. Several thousand people could be affected by the breach, which was discovered last week when the state’s chief information officer noticed an...

Federal Wiretaps Busted by Researchers

Researchers at the University of Pennsylvania say they’ve discovered a way to circumvent the networking technology used by law enforcement to tap phone lines in the U.S.The flaws they’ve found “represent a serious threat to the accuracy and completeness of wiretap records used for both criminal...

U.S. Takes Down $9 Million RBS WorldPay Hacking Ring

U.S. and international prosecutors have taken down a criminal ring that they allege was responsible for an ATM scam last year that stole about $9 million from RBS WorldPay. The criminals were able to evade the company’s encryption system used on payroll debit cards and withdraw money from ATMs in...

Congress Calls for Internal Security Review

After a former Congressional staffer exposed some sensitive data on a file-sharing network recently, some lawmakers are calling for the Congress to start an internal review of its own data security policies immediately. The situation, which is linked to an ethics investigation in the House of...

Operation Phish Phry Nets 100 Cyber Criminals

The largest number of defendants ever charged in a cyber-crime case have been indicted in a multinational investigation conducted in the United States and Egypt that uncovered a sophisticated “phishing” operation that fraudulently collected personal information from thousands of victims that was...

Re: [Full-disclosure] Oops! About xscreensaver 5.01

Hmmm, sorry for flooding the list but it seems it doesnt even affect xscreensaver 5.01. I will investigate when the vuln when I have time and keep you informed. There has to be some strange conf on my Opensolaris : Best Regards, kcope 2009/7/6 Kingcope [email protected]: Hello list, Just to...

Sourcefire 3D Sensor & Defense Center 4.8.x Privilege Escalation Vuln

No description provided by source. Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details ---------------------...