[SECURITY] [DSA 3207-1] shibboleth-sp2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3207-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 28, 2015 http://www.debian.org/security/faq -...

PT-2015-5836

Name of the Vulnerable Software and Affected Versions Shibboleth Service Provider SP versions prior to 2.5.4 Description The issue allows remote authenticated users to cause a denial of service, resulting in a crash, by sending a crafted SAML message. Recommendations For versions prior to 2.5.4,...

Optimizing encrypted video

Security Optimizing encrypted video Share February 25th, 2015 You might have seen our press release that Opera’s Rocket Optimizer can now optimize encrypted video streams. The attentive reader will already have halted and said, “wait, what?”. In this blog post, we’ll explain how this works. Rocke...

ManageEngine Desktop Central MSP Remote Code Execution Vulnerability

Manageengine desktop central is a complete windows client management software that enables remote management of desktop and mobile computers with its remote software installation and configuration options. A remote code execution vulnerability exists in ManageEngine Desktop Central MSP, which can...

Twitter Files Suit Over Government Restrictions on National Security Letter Data

Twitter has filed a lawsuit in federal court asking that the United States Department of Justice’s prohibitions on publishing the number and kind of government requests for data the company receives be declared unconstitutional. The suit claims that the rules infringe on Twitter’s right to free...

Multiple Cisco Wireless Gateways Vulnerable to Remote Attacks

Multiple Cisco Wireless Residential Gateway products have a security vulnerability in the web server that could allow a remote attacker to hijack the devices remotely. Cisco announced that a number of its Wireless Residential Gateway products are vulnerable to a remote-code execution attack, whic...

FakeNet - Windows Network Simulation tool for Malware Analysis

FakeNet is a tool that aids in the dynamic analysis of malicious software. The tool simulates a network so that malware interacting with a remote host continues to run allowing the analyst to observe the malware’s network activity from within a safe environment. The goal of the project is to: 1. ...

[Fing] Tool for Network Scan and Analysis for iPhone

Highlight of features: + Discovers all devices connected to a Wi-Fi network. No limitation! + Displays the MAC Address and up-to-date Vendor names. + Customize names, icons and notes. + Wake On LAN. Switch on your cable-connected devices. + History of all discovered networks. You can review...

How to Collect Logs for Veeam Backup & Replication

Purpose This article documents how to collect logs from Veeam Backup & Replication and additional information to include when submitting a Veeam Support case for technical assistance. Additional Logging Veeam Backup & Replication interoperates with other Veeam products. Please refer to the...

Google For First Time Reports FBI Non-Warrant Requests for User Data

Google today revealed – if in vague terms – it last year received less than 1,000 “national Security letters” from federal authorities seeking financial and communications data on up to almost 2,000 individuals. The disclosure of such government requests marks a first for a major Internet service...

VoipNow Service Provider Edition - Arbitrary Command Execution

VoipNow Service Provider Edition - Arbitrary Command Execution source: https://www.securityfocus.com/bid/57032/info VoipNow Service Provider Edition is prone to a remote arbitrary command-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit th...

VoipNow Service Provider Edition - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/57032/info VoipNow Service Provider Edition is prone to a remote arbitrary command-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to execute arbitrary commands within the context of th...

Google Adds Online Malware Scanner VirusTotal To Security Lineup

Google made a significant addition to its security lineup Friday with its acquisition of online malware scanning service VirusTotal. Experts say the malware intelligence Google will have at its disposal would enhance not only existing products and services, but will backbone site safety rankings...

SimpleSAMLphp Detection

The remote web server hosts SimpleSAMLphp, an implementation of SAML Security Assertion Markup Language for written in PHP. It acts as both a Service Provider, authenticating users to PHP applications, as well as an Identity Provider, storing information about them. C Tenable Network Security, In...

An Interview With Telex's J. Alex Halderman

A group of researchers from the University of Michigan and the University of Waterloo have developed a proxy system called Telex that provides a method for users to circumvent state-level censorship of the Web. It uses an architecture that includes a proxy at the ISP level and uses connections to...

UK Serious Organised Crime agency website down after LulzSec Ddos attack

UK Serious Organised Crime agency website down after LulzSec Ddos attack The UK Serious Organised Crime agency has taken its website offline after ddos attack by hacking group Lulz Security. Soca said it had taken its website offline to limit the impact attack on clients hosted by its service...

Common Admission Test (CAT) Site Hacked and this buzz makes IIMs website go offline !

The Indian Institutes of Management on Monday dismantled the web portal of their Common Admission Test CAT amid fears that some students managed to access their results in the 2010 CAT through the website ten days before schedule. The IIMs dismissed speculation that the CAT website "www.catiim.in...

Stuxnet Code Now Available to Hackers, Posing Major Threat to Infrastructure

According to a report from Sky News, the Stuxnet worm has already been traded on the black market. The report does not specify whether this refers to the source code or binary samples. British security specialists now fear that terrorists could use the worm to attack critical infrastructure. The...

Botnet Herder PROXIEZ Goes Offline

One of the internet’s most resilient and crimeware-friendly networks PROXIEZ-NET was knocked offline after the plug was pulled on its upstream service provider, security watchers said. Read the full article. The Register...

Net Solutions' Hack Heightens Role of ISP in App Layer Security

According to research, the malicious iframe used in the latest Network Solutions attack pointed to corpadsinc.com which then downloads Adobe exploits onto victims’ machines. The hacks raise an issue increasingly being faced by Website owners: what’s the responsibility of the ISP or service or clo...