Digital privacy, Internet Surveillance and The PRISM - Enemies of the Internet

If you have followed the startling revelations about the scope of the US government's surveillance efforts, you may have thought you were reading about the end of privacy, and about the Enemies of the Internet. "My computer was arrested before I was." a perceptive comment by an internet activist...

Suit Filed Against NSA, Obama Over Surveillance Program

A group of people, including a former federal prosecutor and the parents of a Navy SEAL sniper killed in action, have filed a class-action law suit against the National Security Agency, Verizon and President Obama over the NSA’s collection of cell phone data. The suit says the order that enabled...

Clappers Says NSA Programs Fully Authorized and Necessary

The top U.S. intelligence official addressed the recent revelations about the National Security Agency’s covert cell-phone and email data collection surveillance programs on Thursday, saying that the programs have been ongoing for years, are fully authorized under U.S. law and that the leaks...

NSA's PRISM spy program, mining data from nine biggest Internet companies

The National Security Agency, part of the U.S. military reportedly has a direct line into the systems of some of the world’s biggest Web and tech companies, i.e Microsoft, Google, Facebook, Skype. The NSA access is part of a previously undisclosed program called PRISM, 6-year-old program which...

Always Outmanned, Always Outgunned

We were warned. Over and over again. Not just by privacy advocates and by security experts and by civil liberties organizations and by the guy on the corner in the tin foil hat shouting about the government intercepting his brain waves. We were warned by some of the very people charged with...

NSA collecting phone records of millions of US citizens daily

The National Security Agency is collecting telephone records for millions of Americans without informing the individuals involved. The shocking news has been revealed by 'Guardian' whose journalists had access to a "Top Secret" court order, signed by Judge Roger Vinson, issued in April against...

NSA collecting phone records of millions of US citizens daily

The National Security Agency is collecting telephone records for millions of Americans without informing the individuals involved. The shocking news has been revealed by 'Guardian' whose journalists had access to a "Top Secret" court order, signed by Judge Roger Vinson, issued in April against...

Samsung Galaxy S4 Android Bootloader Unlocked

Those of you who like to tinker and jailbreak Android phones should take notice of some new research conducted on Samsung Galaxy S4 Android devices shipped by AT&T and Verizon. Both device makers ship the Galaxy S4 smartphones with a locked down bootloader that prevents users from uploading custo...

Obama Expands Surveillance to Critical Infrastructure

A little-known policy through which the Departments of Justice, Defense, and Homeland Security offered prosecutorial immunity to companies that helped the U.S. military monitor Internet traffic on the private networks of defense contractors has reportedly been expanded by Executive Order to inclu...

Verizon DBIR 2013: Months Pass Before Attacks Detected

It’s a familiar refrain: Attackers often have months of unfettered access to corporate networks; and security and network managers remain in the dark until they’re notified of serious breaches by third parties. Enterprises, regardless of industry, dread that fateful knock on the door by the FBI,...

Verizon DBIR 2013 Quantifies Cyberespionage Attacks

Targeted cyberespionage attacks have dominated discussions within the security community and outside of it from the mainstream media to the halls of the executive and legislative branches of government. But until now, discussions about attacks stemming from China that target intellectual property...

CVE-2013-0126

Multiple cross-site request forgery CSRF vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via the username and userlevel...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via the username and userlevel...

CVE-2013-0126

Multiple cross-site request forgery CSRF vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via the username and userlevel...

CVE-2013-0126

CVE-2013-0126 affects the Verizon FIOS Actiontec MI424WR-GEN3I router (firmware 40.19.36). The vulnerability is multiple CSRF flaws in index.cgi that allow a remote attacker to hijack administrator authentication by (1) adding administrative accounts via the username and user_level parameters or ...

Verizon Fios Router MI424WR-GEN3I CSRF Vulnerability

Verizon Fios Router version MI424WR-GEN3I suffers from a cross site request forgery vulnerability. Exploit Title: Verizon Fios Router CSRF Admin Shell Date: Discovered and reported January 2013 Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators Software: Verizon FIO...

Verizon Fios Router MI424WR-GEN3I - Cross-Site Request Forgery

Verizon Fios Router MI424WR-GEN3I - Cross-Site Request Forgery Exploit Title: Verizon Fios Router CSRF Admin Shell Date: Discovered and reported January 2013 Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators Software: Verizon FIOS Router - Firmware 40.19.36...

Verizon Fios Router MI424WR-GEN3I - Cross-Site Request Forgery

Exploit Title: Verizon Fios Router CSRF Admin Shell Date: Discovered and reported January 2013 Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators Software: Verizon FIOS Router - Firmware 40.19.36 http://verizon.com CVE: CVE-2013-0126 Advisory/Video:...

Verizon Fios Router MI424WR-GEN3I CSRF

Exploit Title: Verizon Fios Router CSRF Admin Shell Date: Discovered and reported January 2013 Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators Software: Verizon FIOS Router - Firmware 40.19.36 http://verizon.com CVE: CVE-2013-0126 Advisory/Video:...

Verizon Fios Router MI424WR-GEN3I - CSRF Vulnerability

Advisory/Video: http://infosec42.blogspot.com/2013/03/verizon-fios-router-csrf-cve-2013-0126.html US CERT Disclosure: http://www.kb.cert.org/vuls/id/278204 Exploit Code: HTML FILE 1 Cisco Verizon FIOS CSRF - Adding Administrator User Please sit tight while we upgrade your router function CSRF1...