nn.jobinmoscow.ru XSS vulnerability

Vulnerable URL: http://nn.jobinmoscow.ru/searchv.php?srprofecy=" XSS+by+xany =27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

ВТБ Банк Москвы - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application ВТБ Банк Москвы published at the 'play' market has multiple vulnerabilities...

GozNym Trojan Attackers Set Sights on Europe, Poland

The banking malware GozNym has legs; only a few weeks after the hybrid Trojan was discovered, it has reportedly spread into Europe and begun plaguing banking customers in Poland with redirection attacks. The malware has started targeting corporate, SMB, investment banking and consumer accounts at...

gisvid.ru XSS vulnerability

Vulnerable URL: http://gisvid.ru/moscow/search?query= Details: Description| Value ---|--- Patched:| Yes, at 18.10.2017 Latest check for patch:| 18.10.2017 02:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 51273 Google Pagerank| 0 VIP website status:| No Chec...

Hackers behind Dyre Malware Busted in Police Raid

The world's most notorious financial hacking operation disrupted by Russian authorities in November, when they raided the offices associated with a Moscow-based film and production company named 25th Floor. According to the Russian authorities, 25th Floor was allegedly involved in distributing th...

New Versions of Carbanak Banking Malware Seen Hitting Targets in U.S. and Europe

New variants of the notorious Carbanak Trojan have surfaced in Europe and the United States, and researchers say that the malware now has its own proprietary communications protocol and the samples seen so far have been digitally signed. Carbanak has been in use for several years, and researchers...

Fake EFF Site Used in Spear Phishing Campaign

Attackers, possibly associated with the Russian government, registered a phony Electronic Frontier Foundation domain earlier this month in an attempt to dupe users into thinking correspondence from the site was coming from the well-known privacy watchdog. The scheme, largely carried out via spear...

WordPress Hacks Behind Spike in Neutrino EK Traffic

Unsurprisingly, a rash of compromised WordPress websites is behind this week’s surge in Neutrino Exploit Kit traffic, researchers at Zscaler said. In a report published yesterday, Zscaler said it spotted attacks against sites running older versions of the content management system, 4.2 and earlie...

Встреча Defcon Moscow #9

3 июля, в пятницу, в офисе Mail.Ru Group состоится девятая встреча Defcon Moscow, которую организует группа DC7499. Defcon Moscow — это открытое и независимое сообщество технических энтузиастов, приближенных к области высоких технологий, а также информационной и технической безопасности. Программ...

APT28 — State Sponsored Russian Hacker Group

Nearly a decade-long cyber espionage group that targeted a variety of Eastern European governments and security-related organizations including the North Atlantic Treaty Organization NATO has been exposed by a security research firm. The US intelligence firm FireEye released its latest Advanced...

CVE-2014-6803

The Bank of Moscow EIRTS Rent aka ru.bm.rbs.android application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Bank of Moscow EIRTS Rent aka ru.bm.rbs.android application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6803

The Bank of Moscow EIRTS Rent (ru.bm.rbs.android) Android app version 1.0.0 fails to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. The CVE entry provides the vulnerability description; ...

CVE-2014-6803

The Bank of Moscow EIRTS Rent aka ru.bm.rbs.android application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Hackers behind iPhone Ransom Attacks Arrested in Russia

A cyber campaign that was targeting iPhone and iPad owners with a sophisticated Ransomware in Australia and New Zealand last month, drawn special attention of online media and security analysts. Russian Authorities have arrested two young hackers from Moscow for their alleged involvement in...

NSA: Snowden Email Refutes Protests of Agency Surveillance

The National Security Agency has released an email from Edward Snowden sent last April to the Office of General Counsel that refutes the whistleblower’s contention that he notified authorities about the NSA’s surveillance reach. In an accompanying statement, the NSA said the message is the only o...

Edward Snowden files has blueprint of NSA surveillance programs

Edward Snowden has enough information to cause more damage to the US government in a minute alone than anyone else has ever had in the history of the United States, but he has insisted that they not be made public, including the blueprints of NSA surveillance program. Glenn Greenwald, the Guardia...

Edward Snowden files has blueprint of NSA surveillance programs

Edward Snowden has enough information to cause more damage to the US government in a minute alone than anyone else has ever had in the history of the United States, but he has insisted that they not be made public, including the blueprints of NSA surveillance program. Glenn Greenwald, the Guardia...

Edward Snowden made public appearance at Moscow's Sheremetyevo Airport

Whistleblower Edward Snowden made a public appearance yesterday at a Moscow airport, beside a staff member of the Wikileaks organization, met with representatives of a half-dozen or so human rights groups. Snowden has not been seen in public and was stuck in the transit area of Moscow’s...

Hidden microphone found in Ecuador's embassy in UK

A hidden microphone was found in Ecuador's embassy in London, where WikiLeaks founder Julian Assange is sheltering from extradition to Sweden, The Ecuadorean Foreign Minister Ricardo Patino claimed. The microphone was found in the office of the ambassador Ana Alban and was discovered last month...