Internet Explorer 9 Rated Tops in Blocking Malware

In a test designed to analyze various Web browsers’ abilities to protect European users against socially engineered malware attacks, researchers at NSS Labs determined that Internet Explorer 8 and 9 were significantly more effective at curbing malicious downloads than were the other major browser...

Robert X. Cringley (Security Expert) Credit Card Hacked !

Cringley's credit card was recently hacked. And if his card can be hacked, anyone's can. Like many cardholders, Cringley received a notification from his credit card company's fraud department, informing him that his card data was being used overseas, on an online dating website. A scammer used...

Facebook Security Update, Protection from Untrustworthy Websites With Web Of Trust (WOT)

Facebook Security Update, Protection from Untrustworthy Websites With Web Of Trust WOT Web of Trust WOT, the worlds leading crowd-sourced website reputation rating service, and Facebook, the Internets leading social platform, begin collaboration today to give Facebooks over 500 million users...

Trend WebReputation 10.5 API Circumvention

DCA-2011-0004 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - Trend WebReputation API Vendor Product Description - Secure any endpoint – physical or virtual – with the industry’s strongest, most reliable protection, while reducing the impact on you...

IE9 Adds Application Reputation Filter

The latest version of Microsoft’s Internet Explorer promises to make it harder for malicious hackers to push dodgy Web applications onto end user systems, with a new Application Reputation filter. In their latest post, the Internet Explorer Weblog, the company details the ways in which IE 9 and i...

HBGary Federal's Aaron Barr Resigns After being Exposed by Anonymous Hackers !

HBGary Federal's Aaron Barr Resigns After being Exposed by Anonymous Hackers ! Aaron Barr's time in the security industry's spotlight may have finally, mercifully ended. On Monday, the much-tormented chief executive of HBGary Federal announced that he has resigned from his position, three weeks...

Spam Botnets Are Declining, But Likely Not For Long

The size and volume of spam botnets are down over the last year, and much of this can be attributed to the effectiveness of IP-based blacklists. However, this defense method is no panacea as scammers have found new methods like reputation hijacking to circumvent these roadblocks, and bots continu...

School site hacked and replaced with porn webpages !

A LOCAL secondary school's website was allegedly hacked and replaced with a pornographic site according to a post in citizen journalism website Stomp. Stomper John, seeking a potential school for his son entering secondary school next year, visited the website of Junyuan Secondary School for more...

6) (Anti) social networking

Social networks like Facebook and Twitter are fabulous platforms for sharing information and news. Retailers of all stripes have tapped into this and are using them to get the word out – virally – about discounts, sales and in-store events. Unfortunately, mechanisms for vetting online reputation...

Cyber Criminal Underground: The Comics Edition

The criminal underworld is an insular community shrouded in secrecy. That’s helped lend an air of mystique to cyber crime. See also: Bruce Willis in “Die Hard 4: Live Free or Die Hard.”. But it turns out that, like so much else, real life cyber crime is… well… pretty dull. How dull? Comic artist...

XSS vulnerability in Office Connector

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence Office Connector. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An...

XSS vulnerability in Confluence Space Names

We have identified and fixed a cross-site scripting XSS vulnerability in Confluence Space Names. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An attacker's te...

XSS vulnerability in the Office Connector

We have identified and fixed a cross-site scripting XSS vulnerability which may affect Confluence instances in a public environment. The XSS vulnerability is exposed in the document import function of the Confluence Office Connector. An attacker might take advantage of the vulnerability to steal...

Paul Judge and David Maynor on Twitter Crime and Searching for Malware

Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most...

XSS vulnerability in Clickr theme

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence Clickr theme. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An attacker...

XSS vulnerability in Clickr theme

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence Clickr theme. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An attacker...

XSS vulnerability in Clickr theme

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence Clickr theme. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An attacker...

XSS vulnerability in Contributors macro

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence \contributors macro. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An...

XSS vulnerability in Contributors macro

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence \contributors macro. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An...

XSS vulnerability in Contributors macro

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence \contributors macro. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An...