IRS Releases Sixth Tax Security Tip

The Internal Revenue Service IRS has released the sixth in a series of tips intended to help the public protect personal and financial data online and at home. A new tip will be available each Monday through the start of the tax season in January. This tip describes the types of fraud alerts...

Hotel Chain Hilton Worldwide Investigating Potential POS Breach

Hilton Hotels and Resorts is reportedly looking into claims that some of its point-of-sale devices were compromised, some potentially as far back as November 2014. Security blogger Brian Krebs notes that Visa sent alerts to financial institutions warning of a breach from April 21 to July 27, but...

WordPress WP Symposium Plugin 15.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin wp-symposium Unauthenticated SQL Injection Vulnerability Date: 2015-07-30 Exploit Author: PizzaHatHacker Vendor Homepage: http://www.wpsymposium.com/ Version: ? = version = 15.5.1 Tested on: Apache / WordPress...

Facebook Security Checkup Tool Keeps Tabs on Security Settings

Large technology companies have long led their users to security and privacy features. Some security technologies are transparent and are on by default, while others require a little prodding of users to turn them on. Even in an age of enhanced scrutiny of exactly what privacy is and means, and...

Open-Source Host-Based Intrusion Detection System: OSSEC

OSSEC is a platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring, and Security Incident Management SIM/Security Information and Event Management SIEM together in a simple, powerful, and open source solution. Key...

[SECURITY] Fedora 20 Update: setroubleshoot-3.2.17-2.fc20

setroubleshoot GUI. Application that allows you to view setroubleshoot-serv er messages. Provides tools to help diagnose SELinux problems. When AVC messages are generated an alert can be generated that will give information about the problem and help track its resolution. Alerts can be configured...

[SECURITY] Fedora 22 Update: setroubleshoot-3.2.22-1.fc22

setroubleshoot GUI. Application that allows you to view setroubleshoot-serv er messages. Provides tools to help diagnose SELinux problems. When AVC messages are generated an alert can be generated that will give information about the problem and help track its resolution. Alerts can be configured...

Critical: Red Hat Security Advisory: java-1.6.0-ibm security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CIM Patch for Veeam MP v.7

Challenge After upgrading to v.7, an unreasonable number of the following alerts are visible in SCOM: "Veeam VMware Collector: Failed to gather Host hardware data via CIM" Cause To optimize CIM collection, asynchronous polling method was introduced in Veeam MP 7. If in response to Veeam query onl...

Grinder - System to Automate the Fuzzing of Web Browsers

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes. Grinder Nodes provide an automated way to fuzz a browser, and generate useful crash information such as call stacks with symbol information as well as logging information which can be used...

KeySweeper — Arduino-based Keylogger for Wireless Keyboards

Security researcher has developed a cheap USB wall charger that is capable to eavesdrop on almost any Microsoft wireless keyboard. MySpace mischief-maker Samy Kamkar has released a super-creepy keystroke logger for Microsoft wireless keyboards cunningly hidden in what appears to be a rather cheap...

BlueMaho - Bluetooth Security Testing Suite

BlueMaho is GUI-shell interface for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do - testing to find unknown vulns. Also it can form nice...

Oracle MySQL Server <= 5.5.38 / 5.6 <= 5.6.19 Security Update (cpuoct2014) - Windows

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apple to Add Security Alerts for iCloud Users after Celebrity Nude Photo Hack

In the wake of the biggest digital exposure of personal nude selfies belonging to as many as 100 high-profile celebrities, Apple said the company plans to add extra security measures to keep hackers out of user accounts. Not just this, the company also plans to extend its two-factor authenticatio...

LinkedIn Boosts Security With New Session Alert and Privacy Control Tools

With a need to give more controls in users’ hands, LinkedIn has introduced a few new security features that the company says will help users of the social network for professionals keep their accounts and data more secure. SESSION ALERTS Just like Google, Facebook, Yahoo and other online services...

CVE-2014-1510

creationtimestamp| type| source ---|---|--- 2014-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34448 2015-10-15 22:07:40+00:00| seen| MISP/56201e1d-f4dc-4ddd-8049-4f2e950d210b 2018-05-29 15:50:33+00:00| seen|...

Google Adds Warnings About Deceptive Software to Safe Browsing Service

The Google Safe Browsing service has become an integral part of most of the major browsers, integrating malware alerts, warnings about malicious Web sites and suspicious content. The company has been expanding the capabilities of the service steadily over the last few years, and now Google is...

Monitoring of vSphere 4.x fails with Veeam MP v7

Challenge Though everything is configured correctly and you have successfully added vCenter 4.x or standalone ESX 4.x to Veeam Extensions as a Monitoring target, no data is shown in SCOM and you can see "Veeam VMware Collector: VMware connection is unavailable" alerts . Additionally, the followin...

McAfee IntruShield Security Management System Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/14167/info McAfee IntruShield Security Management System is susceptible to multiple vulnerabilities. The first two issues are cross-site scripting vulnerabilities in the 'intruvert/jsp/systemHealth/SystemEvent.jsp' script...

Applied Watch Command Center 1.0 Authentication Bypass Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console. Successful exploitation of these...