What will 2012 bring? We can't know for sure

Stuxnet and the specter of sophisticated, state-sponsored attacks were still dominating the news a year ago, as 2010 ended and we welcomed the New Year. Soon enough, however, there would be a new phenomenon to contend with: hacktivists. As the attack on HBGary Federal and Sony showed, faceless...

Data Breaches for All

Sony’s online gaming platform, The PlayStation Network PSN, disappeared for more than a month starting in April, and no amount of double X and O-ing or right joysticking could save it. The reason? A massive attack on PSN’s network knocked the gaming giant offline and exposed the data of more than...

Unfixed XSS vulnerability at www.kino.ru

Security researcher Sony, has submitted on 14/12/2011 a cross-site-scripting XSS vulnerability affecting www.kino.ru, which at the time of submission ranked 100043 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently...

2 Buffer Overflows in Wireless Manager Sony VAIO

High-Tech Bridge SA Security Research Lab has discovered 2 buffer overflow vulnerabilities in Wireless Manager Sony VAIO which can be exploited to execute arbitrary code on vulnerable system. 1 Buffer Overflow in Wireless Manager Sony VAIO: CVE-2012-0985 1.1 The method SetTmpProfileOption in...

From Sony's DRM Rootkit to CarrierIQ: Why Commercial Rootkits Make Us So Mad

The half life of the CarrierIQ “rootkit” scandal proved to be a little more than a week. That’s about how long it took for Trevor Eckhart, a young, Connecticut-based Android developer to begin raising questions about some stealth software he discovered running on Android phones by HTC and...

Blekko.com Cross Site Scripting

Date: 24.11.2011 Author: Sony Site: http://blekko.com My blog and PoC: http://st2tea.blogspot.com/2011/11/blekkocom-web-search-engine-cross-site.html What is blekko.com? You can read here: http://en.wikipedia.org/wiki/Blekko So..our xss in the profile website link...

Unfixed XSS vulnerability at blekko.com

Security researcher Sony, has submitted on 24/11/2011 a cross-site-scripting XSS vulnerability affecting blekko.com, which at the time of submission ranked 4425 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed...

Sony Blu-Ray Player Detection

Binary data 6100.prm...

DHS Names Weatherford as Deputy Under Secretary for Cybersecurity

Department of Homeland Security DHS Secretary Janet Napolitano appointed Mark Weatherford today as the National Protection and Programs Directorate’s NPPD new Deputy Under Secretary for Cybersecurity, according to a press release on the DHS’ site. The role was created by the Directorate in...

Sony Detects Suspicious Behavior, Locks 93,000 Online Accounts

Sony locked the accounts of some 93,000 individuals on the Playstation Network PSN, the Sony Entertainment Network SEN, and Sony Online Entertainment SOE services following a mass log-in attempt using username-password combinations obtained from an unnamed source. The attack affected less than on...

Sony hacked again - 93,000 accounts compromised with brute-force attack

Sony hacked again - 93,000 accounts compromised with brute-force attack Sony has warned users against a massive bruteforce attack against PlayStation and Sony network accounts. The attack – which used password and user ID combinations from an unidentified third-party source – succeeded in...

Sony hacked again - 93,000 accounts compromised with brute-force attack

Sony hacked again - 93,000 accounts compromised with brute-force attack Sony has warned users against a massive bruteforce attack against PlayStation and Sony network accounts. The attack – which used password and user ID combinations from an unidentified third-party source – succeeded in...

Comm100 Forums Arbitrary Redirect

Date: 8.10.2011 Author: Sony Software Link: http://comm100.com/ Google Dorks: Forum Powered by Comm100 Blog : http://st2tea.blogspot.com .................................................................. Demo: http://hosted.comm100.com/Forum/Default.aspx?siteid=10000 Before:...

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison The FBI believes that the homeless man they arrested on Thursday was "Commander X", a member of the People's Liberation Front PLF associated with Anonymous hacktivism. The logs maintained by HideMyAss.com, in addition to other evidenc...

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison The FBI believes that the homeless man they arrested on Thursday was "Commander X", a member of the People's Liberation Front PLF associated with Anonymous hacktivism. The logs maintained by HideMyAss.com, in addition to other evidenc...

FBI Snags Lulzsec Member Involved in Sony Hack

The FBI continued its pursuit of members of the hacking group LulzSec on Thursday, arresting a 23 year old Phoenix, Arizona man believed to be part of an online hacking crew that attacked systems belonging to Sony Pictures, the Bureau said in a statement Thursday. The arrest, conducted by agents...

FBI Arrests two Suspected LulzSec and Anonymous Hackers

FBI Arrests Suspected LulzSec and Anonymous Hackers Search warrants were also being executed in New Jersey, Minnesota and Montana. The FBI arrested two alleged members of the hacking collectives LulzSec and Anonymous on Thursday morning in San Francisco and Phoenix, According to Fox news. The...

FBI Arrests two Suspected LulzSec and Anonymous Hackers

FBI Arrests Suspected LulzSec and Anonymous Hackers Search warrants were also being executed in New Jersey, Minnesota and Montana. The FBI arrested two alleged members of the hacking collectives LulzSec and Anonymous on Thursday morning in San Francisco and Phoenix, According to Fox news. The...

Its Fail 2011 - Year of Hacks !

Its Fail 2011 - Year of Hacks ! According to IT security experts Year 2011 have labeled as the "Year of the Hack" or "Fail 2011". Hacking has become much easier over the years allowing hackers to hack into systems easier then ever before, which is why 2011 had a lot of hacking happen so far...

Sony Hires Ex- Homeland Security Official after PlayStation Hack

Sony Hires Ex- Homeland Security Official after PlayStation Hack Sony has hired a former official at the US Department of Homeland Security for the new post of chief information security officer, months after a massive hacking attack leaked information on 100 million user accounts on its games...