Huawei and Cyber Espionage, a question of trust ?

Chinese telecoms equipment suppliers have previously been criticized for allegedly being security risks. Huawei is working with British spooks to prove that it has no backdoors in its products which would allow Chinese agents to snuffle Her Majesty's secrets. The U.S. and Australia have made clea...

Key Stuxnet LNK Spreading Mechanism Stops Working

One of the key infection methods for the Stuxnet worm was hard-coded to stop working on June 24, removing one of its techniques for propagation. Researchers say that the date, which is found in coded form in the worm’s instructions, is nearly three years to the day from the date that the first...

UK Teen, TeaMp0isoN Member, Arrested For 'Phone Bomb' Attack

A British teenager believed to be the hacker TriCk, a founding member of TeaMp0isoN has reportedly been arrested after launching a denial of service attack against an anti-terrorism hotline in the UK. The 17 year-old, a resident of Birmingham in the UK, was arrested on April 12 in connection with...

Yuku Forums Cross Site Scripting

Exploit Title: Yuku Forums Cross Site Scripting Date: 24.01.2012 Author: Sony Software Link: http://www.yuku.com/ Google Dorks: inurl:.yuku.com intext:forum Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/yuku-forums-cross-site-scripting.htm...

Anonymous expose email addresses of British military staff & Nato officials

Anonymous expose email addresses of British military staff & Nato officials Anonymous Hackers expose email addresses of 221 British military staff with encrypted passwords, including those of defence, intelligence and police officials as well as politicians and 242 Nato advisers. "Civil servants...

Promiscuous Facebookers More Likely To Fall For Fake Friend Scams

Having more friends on Facebook might not mean you’re popular, but it does make you more likely to accept an invitation from a fake friend, according to research from the University of British Columbia. In a paper to be presented in December at the Annual Computer Security Application Conference ...

British VPN Service Defends Role in Lulzsec Bust

British virtual private network VPN company Hide My Ass has taken a stand about their involvement in the arrest of an alleged Lulzsec member last week. In a blog post published on Friday, the company reiterated that they keep logs of their users’ history for 30 days and they will cooperate with l...

Two Suspected Anonymous/LulzSec hackers arrested by British police

Two Suspected Anonymous/LulzSec hackers arrested by British police Officers from the Metropolitan Police Service's Central e-Crime Unit PCeU have today, 1 September, arrested two men for conspiring to commit offences under the Computer Misuse Act 1990. Two men, aged 20 and 24, have been arrested ...

British police issue warning to Anonymous, Lulzsec and other internet hacktivists

British police issue warning to Anonymous , Lulzsec and other internet hacktivists The Metropolitan Police have taken the unusual step of using Twitter to send a message to anyone considering supporting internet attacks against companies and governments.A message posted on the Met Police's offici...

British police issue warning to Anonymous, Lulzsec and other internet hacktivists

British police issue warning to Anonymous, Lulzsec and other internet hacktivists The Metropolitan Police have taken the unusual step of using Twitter to send a message to anyone considering supporting internet attacks against companies and governments.A message posted on the Met Police's officia...

Easy to the British Crown Cheng travel Agency website system 0day and fix-vulnerability warning-the black bar safety net

Transferred from: t00ls Search inurl:way/show. asp? id= /htmleditor/file. asp directly on the shell After the success of the view source to find the SHELL address Fix: General problems...

Former British Labour cabinet minister says her phone was hacked !

LONDON: Former British cabinet minister confirmed that his work phone was cut 28 times - and now seek a court order to see if it happened again later that week. Tessa Jowell, the former Olympics minister, is the oldest politician so far to be sure that his phone message was kidnapped and has join...

Unfixed XSS vulnerability at www.britishcycling.org.uk

Security researcher .., has submitted on 21/10/2010 a cross-site-scripting XSS vulnerability affecting www.britishcycling.org.uk, which at the time of submission ranked 164966 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

Identity Theft Used By Hamas Assassin Suspects

An Israel-resident British IT worker has reacted with horror to news that a suspected member of an alleged hit squad used a passport with his details to enter Dubai, before allegedly participating in the assassination of a prominent Hamas official. He’s not alone. Read the full article. The Regis...

Flawed USB Sticks Can Be Used to Download Whatever Desired

UK security researchers MWR InfoSecurity have found a flaw in the driver software of USB sticks that could allow the technology to “interrogate” and download the complete content of any system. The company believes the use of such devices is only months away, and has shared its research with the...

Unfixed XSS vulnerability at www.britishpathe.com

Security researcher NeX, has submitted on 18/05/2009 a cross-site-scripting XSS vulnerability affecting www.britishpathe.com, which at the time of submission ranked 806634 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

BT Home Hub管理员口令泄露漏洞

BUGTRAQ ID: 29387 BT Home Hub是家用的无线Internet路由器。 BT Home Hub的最新固件版本添加了一个新的安全功能，允许将默认的管理员口令从admin更改为路由器的序列号，但只要向路由器所在的网络发送MDAP多播请求就可以得到Home Hub的序列号。 如果要利用这个漏洞，攻击者必须通过ethernet或Wi-Fi加入到Home Hub所在的LAN。有两种方式可以入侵到BT Home Hub Wi-Fi网络： - arp回放注入和弱IV破解 - 通过SSID暴力猜测Home Hub的默认WEP密钥列表 British...

Thomson SpeedTouch和BT Home Hub路由器默认WEP/WPA密钥算法漏洞

BUGTRAQ ID: 28893 BT Home Hub和Speedtouch都是家用的无线Internet路由器。 BT Home Hub和Speedtouch路由器所使用的默认WEP/WPA密钥算法是可预测的，远程攻击者可以基于一些公开信息（如MAC地址或SSID）预测出密钥，这样就可以完全入侵路由器。 对于Speedtouch路由器路由器： S/N：CP0615JT109 53 删除CC和PP值：CP0615109 将XXX值转换为16进制：CP0615313039 通过SHA-1处理：742da831d2b657fa53d347301ec610e1ebf8a3d0...

Unfixed XSS vulnerability at www.great-british-pages.co.uk

Security researcher cueballr, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.great-british-pages.co.uk, which at the time of submission ranked 347869 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/04/2008...

Buffer overflow

Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors...