Analysis: Duqu Targets Certificate Authorities

With virus researchers scrambling to decode a new piece of malware that is based on the code of the Stuxnet worm, an analyst at McAfee is speculating that the new worm, Duqu, may have been created to target certificate authorities. Writing on McAfee’s research blog, Guilherme Venere and Peter Szo...

Interview: Crypto Legend Ron Rivest On Fixing SSL, APTs and The Future Of Security

One of the biggest talks at this year’s Black Hat Briefings was a presentation on the structural problem with digital certificate authorities by Moxie Marlinspike. The subsequent hack of Dutch certificate authority DigiNotar and a damning report on that attack only weeks later, and more recent...

Are Some Certificate Authorities Too Big To Fail?

In the wake of this weekend’s revelations of the seriousness of the attack on certificate authority DigiNotar, security experts have renewed criticism of the Internet’s digital certificate infrastructure, with some wondering if larger certificate authorities CAs might be too big to fail...

ComodoHacker responsible for DigiNotar Attack

ComodoHacker responsible for DigiNotar Attack The hacker warns the Internet community that he has access to 4 other high-profile CAs, among them being GlobalSign, a certification authority from the U.S. He threatens that he will use his power over the companies to issue false certificates, which...

Comodo, DigiNotar Attacks Expose Crumbling Foundation of CA System

There are a lot of things in the security world that are broken and there isn’t room to list them all, even on the Internet. But if the events of the last few days have shown us anything, it’s that the certificate authority infrastructure is beyond broken and there’s no quick fix looming on the...

Rethinking Black Hat: Building, Rather Than Breaking, Security

No doubt breaking things is fun. I remember back when I was 10 years old when I took apart a squirrel cage fan, flipped some wires and so forth, and then attempted to plug it back in. Good thing my mom stopped me seconds before I was about to get a literal jolt of reality. These days, I still kee...

UK Authorities Charge Suspected LulzSec Member for DDoS Attacks

A 19 year-old UK man was charged on Wednesday for the role he played in attacks on the UK’s Serious Organized Crime Agency SOCA as well as UK’s British Phonographic Industry BPI and International Federation of the Phonographic Industry IFPI, according to a statement released by the Metropolitan...

Lady Gaga's Twitter Account Hacked !

Lady Gaga's Twitter Account Hacked ! Oh snap! Lady Gaga's Twitter account was hacked on Wednesday and as a result, the Mother Monster has threatened to involve the authorities in the matter. Don't fuck with Gaga's digital rights. And come to think of it…to hack the Twitter account of the world's...

SSL and the Future of Authenticity

In the early 90’s, at the dawn of the World Wide Web, some engineers at Netscape developed a protocol for making secure HTTP requests, and what they came up with was called SSL. Given the relatively scarce body of knowledge concerning secure protocols at the time, as well the intense pressure...

DDoS Attacks On LiveJournal Target Russian Anti Corruption Blogger

Unknown attackers have launched distributed denial of service attacks on a long list of blogs hosted on the social media site LiveJournal, including the blog of a prominent anti-corruption blogger in Russia. The attacks, which began on March 24, initially targeted the LiveJournal addresses...

Microsoft Builds Legal Weapon to Take Apart Botnets

The take-down of the Rustock botnet in March gave Microsoft another head for its mantle: two in just the last year. That’s an impressive take for any private firm, and one of a string of actions against bot networks in recent years. But security experts say that the company’s success in building ...

The Problem of Issuing Certs For Unqualified Names

The recent attack on Comodo and several of its associated registration authorities has spurred quite a bit of re-examination of the way that the Web’s certificate authority infrastructure works–or doesn’t. One interesting result of this work is that the folks at the Electronic Frontier Foundation...

Comodo Says Two More Registration Authorities Compromised

Officials at Comodo have acknowledged that an additional two registration authorities affiliated with the company have been compromised in the wake of the high-profile attack on the company that was disclosed last week. However, no forged certificates were issued as a result of the new attacks. I...

Phony SSL Certificates issued for Google, Yahoo, Skype, Others

UPDATED: A major issuer of secure socket layer SSL certificates acknowledged on Wednesday that it had issued 9 fraudulent SSL certificates to seven Web domains, including those for Google.com, Yahoo.com and Skype.com following a security compromise at an affiliate firm. The attack originated from...

Nasdaq systems were hacked last year !

Federal authorities are investigating a computer advance at the aggregation that runs the Nasdaq banal exchange, the Wall Street Journal arise Friday. According to the report, which cites bearding sources, Nasdaq OMX Group computers were compromised ancient over the accomplished year, but the...

PMB Services <= 3.4.3 SQL Injection Vunerability

Exploit for php platform in category web applications ---------------------------------------------------------------------------- Exploit Title: PMB Services = 3.4.3 Remote SQL Injection Author : Luchador Date : 29-01-2011 Location : Algeria Site : http://vbspiders.com Critical Lvl : Dangerous...

Beware : Google illegally collected private info !

Police confirmed Thursday that Google, the world's largest online search engine operator, illegally collected and stored personal data sent over unsecured Wi-Fi wireless networks here while creating the localized version of its online mapping service. Korea and 15 other countries, including the...

Julian Assange: The Man Behind WikiLeaks

Who is Julian Paul Assange? Julian Paul Assange is the lean, tall, and pale 39-year-old Australian hacker at the heart of WikiLeaks. This whistle-blowing website gained attention after revealing thousands of secret Afghan battlefield reports, making Assange a target for U.S. authorities. The Enig...

Pakistan Cyber Army Opts One Sided Cease Fire, Invites Indians for the Same !!

Pakistan Cyber Army has shown the grace with one sided cease fire. In return they hope that their Indian counterparts will act the same way, said an email sent to News Channels. However, PCA warned the Indians that Pakistan Cyber Army has all the capabilities to retaliate and hack-back their...

Indishell.in Locked By Domain Provider on complaint of Government Authorities !

Indishell.in Locked By Domain Provider on complaint of Government Authorities ! Email Send Via Domain Provider to Indishell Owner : On Mon, Dec 6, 2010 at 4:44 PM, [email protected] [email protected] wrote: Hello, Dear Customer . We have Received a Complaint From The Government...