Report: French Ministry of Finance Confirms Hack

The French Ministry of Finance has confirmed a report in a French Magazine on Monday that a widespread hack of computers on its networks occurred. The hack, of over 150 MOF machines has been traced to computers in China and appears to have targeted documents that outline France and the G20’s...

As Tension Mounts, LinkedIn Knocked Offline in China

Business social-networking site LinkedIn has been unavailable in some parts of China since Thursday, suggesting it may have fallen victim to the country’s increased crackdown on online discussion sites. Pings sent to LinkedIn.com from the Chinese cities of Shanghai and Beijing weren’t returned wh...

The Lesson of Stuxnet and Aurora: Get Back to Basics or Get Owned

SAN FRANCISCO–It’s often said that after decades of work and technological advances, the security industry hasn’t actually solved any problems or made things any better. But that’s not entirely true. The industry has in fact perfected the art of exploiting the scare ’em and snare ’em,...

Of Night Dragons and Silver Bullets

Reading the headlines today one could not help but notice the latest installment of “scary Chinese hacker press” making the headlines. And who can blame the news media for latching on to this story as it has all the right ingredients: foreign governments targeting U.S. interests, catchy nicknames...

U.S. Needs Cybersecurity Skunk Works, Expert Says

ARLINGTON, VA–In order to address the fundamental questions surrounding the concept of cyberwar and what it might mean for both the government and the enterprise, the United States should develop a skunk works-type think tank comprising highly skilled private-sector security experts as well as...

China Sleeps On A Stuxnet-Like SCADA Bug

One of the most widely used SCADA supervisory control and data acquisition applications in China may be harboring a critical security vulnerability that could allow an attacker to exploit the bug and execute arbitrary code. The hole was discovered in an application produced by Wellintech, a Beiji...

PandaLabs Releases : Annual Report 2010 (Must Read) !

In 2010, cyber-criminals have created and distributed a third of all existing viruses. That is, in just 12 months, they have created 34 percent of all malware that has ever existed and has been classified by the company. Furthermore, the Collective Intelligence system, which automatically detects...

Week in Security: Wikileaks Extravaganza, New Ransomware and Open-Source Attacks

It was difficult to go anywhere this week without hearing about the flurry of activity surrounding the Wikileaks data dump. A slew of denial-of-service attacks followed soon after, while new ransomware and attacks on open-source software filled out the rest of the week’s news. Read on for the wee...

WikiLeaks Confirms China's Responsibility for Aurora Attacks

It is being reported that WikiLeaks latest release of 250,000 diplomatic cables confirms the suspicion that China was responsible for the Aurora attacks on Google’s computer systems in January. Both Google and the State Department initially believed China was responsible for the attacks, but the...

Expert Warns: Cyber Crime Now Operates Like Legitimate Businesses

Today's cybercrime has far-reaching implications for security professionals. Corporate environments are increasingly targeted, with intellectual property becoming a primary focus for criminal activity. According to Uri Rivner, head of new technologies, identity protection, and verification at RSA...

Researchers: Google Aurora Attackers Back in Business?

Just when you thought it was safe to go back in your e-mail…Researchers say a new round of targeted attacks appear to come from the same group responsible for attacks against Google and other top U.S. firms. Writing on the Symantec Security blog...

Old and Insecure, IE6 Still Popular in the Enterprise

Conventional wisdom has it that Microsoft’s Internet Explorer Web browser is on the way out: succumbing to the death of thousand cuts administered by plucky rivals like Mozilla’s Firefox, Google’s Chrome and even Opera. But data from Web security firm zScaler shows that the Old Blue Lady of the W...

Talk on Chinese Cyber Army Pulled From Black Hat

A talk on China’s state-sponsored offensive security efforts scheduled for the Black Hat conference later this month has been pulled from the conference after concerns were raised by some people within the Chinese and Taiwanese government about the talk’s content. The presentation was to be...

Microsoft Internet Explorer - 'Aurora' Memory Corruption (MS10-002) (Metasploit)

$Id: ms10002aurora.rb 9787 2010-07-12 02:51:50Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Google Ditching Windows Over Security Makes Little Sense

The Financial Times is reporting that Google is phasing out the internal use of Microsoft’s Windows operating system because of security concerns. The report, which is short on solid sourcing, quotes Google’s employees as saying the company is steering people towards using Apple’s Mac or the Linu...

Reproducing the Aurora IE Exploit With Metasploit

This video features a detailed demonstration of a technique for reproducing the Aurora Internet Explorer exploit using the Metasploit Framework...

Remember Aurora–and Other Botnets

Last night my attention was drawn to a couple of blog entries relating to Google and the attacks they fell victim to earlier this year. These attacks were eventually labeled as “Operation Aurora” by McAfee based upon the presence of the “aurora” keyword embedded within some of the malware. First...

Marc Maiffret at RSA 2010

Dennis Fisher talks with Marc Maiffret of FireEye at RSA Conference 2010 about the lack of sophistication in the Aurora attack and the state of malware attacks on the Web...

MS10-002 Microsoft Internet Explorer "Aurora" Memory Corruption

This module exploits a memory corruption flaw in Internet Explorer. This flaw was found in the wild and was a key component of the "Operation Aurora" attacks that lead to the compromise of a number of high profile companies. The exploit code is a direct port of the public sample published to the...

Internet Explorer "Aurora" Memory Corruption

$Id: ms10002aurora.rb 8780 2010-03-11 05:49:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...