Climategate 2.0? Popular Climate Blog Hacked, E-mails, Passwords Leaked

The website of Skeptical Science, a blog that is critical of climate change skeptics, was hacked over the weekend, and users’ e-mails, passwords and IP addresses were taken, according to a post on the site Sunday. The bulk of the site’s database was taken, uploaded to a Russian website and linked...

Slideshow: Ten Weird Biometrics In Your Future

VIEW SLIDESHOW: Weird Science: 10 Forms of Biometric Authentication In the past twenty years, we’ve gone from using amber-tinted dumb terminals connected to refrigerator-sized mainframe computers to sleek tablet computers and smart phones tucked into our pockets. Despite those changes, one...

Typing Test

Researchers at the American University of Beirut in Lebanon have been working on software that doesn’t analyze what passwords are typed, but rather how words are typed. Researchers Ravel Jabbour, Wes Mastri and Ali El-Hajj have found that examining the speed and rhythm of the user’s keystrokes...

Hackers disclose secret Ankara police files password '123456'

Hackers disclose secret Ankara police files password '123456' Hackers from the "RedHack" group who brought down the Ankara Police Department's website and acquired secret information last week said one of the passwords of the secret police files was "123456." A member of the hacking group named...

#THN Monthly ( February ) News Archive, If you miss Something !

THN Monthly February News Archive,If you miss Something ! Censorship - Global Concern, THN Magazine March Edition : Forget terrorists attacks here are 2012's Most Vulnerable Cities At Risk for Cyber Crime Idiots : Slum Dog India demands Real time monitoring on Indian Gmail & Yahoo Emails. Do they...

Analysis of STRATFOR Passwords Reveals Shoddy Security

A partial analysis of another massive leak of user passwords has again shone a light on the scourge of weak passwords used to protect sensitive data in online accounts, according to a report by The Tech Herald. Using the leaked password list from STRATFOR, the open source intelligence service tha...

China Software Developer Network (CSDN) 6 Million user data Leaked

China Software Developer Network CSDN 6 Million user data Leaked The "Chinese Software Developer Network" CSDN, operated by Bailian Midami Digital Technology Co., Ltd., is one of the biggest networks of software developers in China. A text file with 6 Million CSDN user info including user name,...

CVE-2011-4739

CVE-2011-4739 affects Parallels Plesk Panel Control Panel version 10.2.0 build 20110407.20. The underlying issue is that the password form field is generated without disabling autocomplete, which can allow remote attackers to bypass authentication by exploiting an unattended workstation. Demonstr...

UseBB 1.0.14 Cross Site Request Forgery

UseBB 1.0.14 CSRF Vulnerability Author : Muhammet Cagri Tepebasili Date : 11.12.2011 Script & Demo : UseBB http://demo.opensourcecms.com/usebb/index.php Version : 1.0.14 Tested On : Linux Mint 11 Exploit : UseBB 1.0.14 CSRF Vulnerability | Author : Muhammet Cagri Tepebasili Note : Your Password...

crypt_blowfish: 8-bit character mishandling allows different password pairs to produce the same hash

cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash...

Miley Cyrus Needs A Lecture on Cyber Security

Miley Cyrus Needs A Lecture on Cyber Security The man, who is currently facing up to 121 years behind bars, has been charged with 26 counts of identity theft, wire-tapping and unauthorised access to protected computer.Chaney, who has been in contact with TMZ for the last two years, has contacted...

CVE-2011-3245

The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent use of a keyboard, which allows physically proximate attackers to obtain sensitive information by reading this character...

Linux.com down again due to Security Breach

Linux.com down again due to Security Breach Linux Foundation infrastructure including LinuxFoundation.org, Linux.com, and their subdomains are again down for maintenance due to a security breach that was discovered on September 8, 2011. Investigators yet can't elaborate the source of attack...

CVE-2011-2483

cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash...

CVE-2011-0197

CVE-2011-0197 affects Apple Mac OS X (App Store) prior to 10.6.8, where App Store could log a user’s AppleID password to a local file with insufficient permissions, enabling local users to read the password. The root cause is credentials being written to a log entry; an improved handling of crede...

Chinese Hacker Cracks Hundreds of Gmail Accounts of U.S. & Asia

Chinese Hacker Cracks Hundreds of Gmail Accounts of U.S. & Asia Hackers around the world are gaining more attention than usual in the last few months. Now Google has added another announcement to the pile that hundreds of Gmail accounts have been hacked recently. Now, Google affirms that the...

CVE-2011-2076

MediaCAST 8 and earlier store passwords in cleartext, exposing sensitive credentials to attackers who can read the password data store. The description ties this to CVE-2011-2076 and distinguishes it from CVE-2010-0216. The documents do not specify the exact vulnerable component, root cause detai...

Password Security Do's and Don'ts

We write a lot about sophisticated, targeted attacks and zero day vulnerabilities aside. But the fact is that most security breaches hinge on easy to prevent security holes – such as insecure passwords. Indeed, even as headlines blare about data breaches and hacks at prominent firms, password...

Hydra v6.3 Released with oracle & snmp-enum modules !

Hydra v6.3 Released with oracle & snmp-enum modules ! A very fast network logon cracker which support many different services. Have a look at the feature sets and services coverage page - including a speed comparison against ncrack and medusa! Number one of the biggest security holes are password...

QQ the auction system ewebeditor exploit bulk take Station-vulnerability warning-the black bar safety net

Batch keyword: inurl:QQsales. asp Background address: http://www.xxx.com/editer/adminlogin.asp Default account: admin admin If the password is wrong, you can download: http://www.xxxx.com/editer/db/ewebeditor.mdb, and then read the password...