June 23, 2017 – Morning Cyber Coffee Headlines – “Grizzly Bear” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! June 23, 2017 - Headlines Carbon Black in the News: Top 10 Endpoint Detection a...

depts.washington.edu XSS vulnerability

Vulnerable URL: https://depts.washington.edu/vehfire/flashDetector.swf?flashContentURL=javascript:alert'openbugbounty'// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

AWS Public Sector Summit 2017: Cloud Super Powers and Security

Coalfire recently returned from the Amazon Web Services AWS Public Sector Summit, held in Washington, D.C., which addresses some of the most pressing issues todays leaders face around security, governance and compliance, and more. While Coalfire has attended the show in the past, we were especial...

menu.labmed.washington.edu XSS vulnerability

Open Bug Bounty ID: OBB-246042 Description| Value ---|--- Affected Website:| menu.labmed.washington.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Researchers Use Ridesharing Cars to Sniff Out a Secret Spying Tool

University of Washington researchers put sensors in 15 ridesharing cars, and uncovered new evidence of how stingrays are being used and how to detect them. The post Researchers Use Ridesharing Cars to Sniff Out a Secret Spying Tool appeared first on WIRED...

washington.edu XSS vulnerability

Vulnerable URL: https://www.washington.edu/search%22'--!%3E%3CHtml%20Onmouseenter=confirm%60OPENBUGBOUNTY%60%20%3C!--//%3E// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1535 VIP website status:| Yes Coordinat...

Trump Fires FBI Director Over Clinton Probe, Amid Russia Investigation

President Donald Trump has abruptly fired James Comey, the director of the Federal Bureau of Investigation FBI who was leading an investigation into alleged links between Trump and Russia. The White House announced on Tuesday that Comey was fired on the "clear recommendation" of Deputy Attorney...

commerce.washingtonpost.com XSS vulnerability

Vulnerable URL: http://commerce.washingtonpost.com/cgi-bin/WPclass/shopping/shopSearchUsed?CLASSES=%5B265%5D=Home%20and%20Garden"--!"===home%20gardenPRICE=PRICE==pricehlRESULTS=10COUNT=17COUNT=630COUNT=8COUNT=30 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

biology.burke.washington.edu XSS vulnerability

Vulnerable URL: http://biology.burke.washington.edu/conus/videos/MovieWindow.php?ID=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

In the picture, the added noise will be able to fool Google's best image recognition AI-vulnerability warning-the black bar safety net

! Recently, a group from the University of Washington, network security lab NSL's computer experts found that a malicious attacker can trick Google's CloudVision API, this will cause the API to the user-submitted images were incorrectly classified. In recent years, based on the AI of the image...

Tracing Spam: Diet Pills from Beltway Bandits

Reading junk spam messages isn't exactly my idea of a good time, but sometimes fun can be had when you take a moment to check who really sent the email. Here's the simple story of how a recent spam email advertising celebrity "diet pills" was traced back to a Washington, D.C.-area defense...

com.washington.edu XSS vulnerability

Vulnerable URL: http://www.com.washington.edu/grads/public/searchbynamesubmit.castle Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check com.washington.edu SSL...

stats.washingtonpost.com XSS vulnerability

Vulnerable URL: http://stats.washingtonpost.com/nhl/teamstats.asp?email=1=1=1%22%27--!%3E%u003CSvg%20/%u3008Svg%20/%uFF1CSvg%20/Onload=confirmOPENBUGBOUNTY%20// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

washington.edu XSS vulnerability

Vulnerable URL: http://www.washington.edu/research/index.php/!%22%3E%3Cmarquee%20onstart=confirm%28/OPENBUGBOUNTY/%29%3E/?page=facultyAwards Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2065 VIP website status...

Boeing Notifies 36,000 Employees Following Breach

A Boeing employee inadvertently leaked the personal information of 36,000 of his co-workers late last year when he emailed a company spreadsheet to his non-Boeing spouse. News of the breach surfaced earlier this month after a letter .PDF from Boeing’s Deputy Chief Privacy Officer Marie Olson, to...

washington.thedelimagazine.com XSS vulnerability

Open Bug Bounty ID: OBB-212833 Description| Value ---|--- Affected Website:| washington.thedelimagazine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

depts.washington.edu XSS vulnerability

Vulnerable URL: https://depts.washington.edu/pmedic/sites/all/modules/flowplayer/flowplayer/flowplayer.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Two Arrested for Hacking Washington CCTV Cameras Before Trump Inauguration

Two suspected hackers have reportedly been arrested in London on suspicion of hacking 70 percent of the CCTV cameras in Washington with ransomware ahead of President Donald Trump's inauguration last month. The arrest took place on 20th January by the officers from the National Crime Agency NCA of...

Over 70% of Washington DC's CCTV Were Hacked Before Trump Inauguration

Just days before the inauguration of President Donald Trump, cyber criminals infected 70 percent of storage devices that record data from feds surveillance cameras in Washington D.C. in a cyber attack. Any guess, What kind of virus could have hit the storage devices? Once again, the culprit is...

f2.washington.edu XSS vulnerability

Vulnerable URL: http://f2.washington.edu/fm/recmgt/login%27"--!confirmOPENBUGBOUNTY%3C/script /K//pc/' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...