Government's Cloud Audit Program Falls Behind Schedule

In a speech on Wednesday, Federal Chief Information Officer Steven VanRoekel said that a federal plan for qualifying and providing security audits on private sector cloud providers will become mandatory for any agency that wanted to contact with third party cloud providers, according to a report ...

Pentagon to Obama: icanhasbilliondollars plz?

Capitol Hill may be awash in tough talk on cuts to domestic programs, but that’s not stopping the Pentagon from seeking an additional billion dollars in funding for cyber security, according to a report from Nextgov.com. The Department of Defense is requesting $3.2 billion, almost $1 billion more...

Anonymous Press Release for Journalists !

Anonymous Press Release for Journalists ! Today Anonymous Hackers Release a new Press Note for all those Journalists, who writing a story, and have come to their website to do research, or pull a quote. AnonNews uses an open-posting concept. Anyone can post to the site, and moderators will approv...

Canadian Prime Minister Stephen Harper promises action on cyber attacks !

OTTAWA Federal security agencies are working to deal with cyber threats, Prime Minister Stephen Harper said Thursday. He wouldn't speak directly to what the government calls an "unauthorized attempt" to access computer networks at the Treasury Board. The attack left civil servants in key...

WikiLeaks Prompts Federal Agencies to Assess Infosec Programs for Sensitive Data

In response to the embarrassment and perceived threat resulting from the WikiLeaks disclosures in recent months, the Office of Management and Budget has issued a hefty memo with pages of questions that federal agencies must use to conduct an initial assessment of their programs to handle and...

Security Worth Buying

I’m a dirty vendor. That may not be the best way to start a serious dialogue about security product effectiveness, but I hate to read a post on security theory by some insincere tie-wearing wonk only to discover afterwards that he or she is Lord High Poobah of Marketing at “Scaring You For Profit...

Online Crime Easier, More Budget Friendly

Mainstream attention to Operation Aurora and the Kneber Zeus botnet are welcome. It underscores how the Internet underground has advanced to the point where a plethora of powerful hacking tools and services is readily available to novice hackers and elite crime gangs alike – with prices to fit...

Gartner Sees Better Days Ahead For Security Budgets

From SearchSecurity.com Robert Westervelt The dismal economy has put the brakes on a lot of security projects, but the need to maintain the basics and automate some security functions has fueled interest in managed security services and some specific security areas, according to analysts at Gartn...

The most important questions to ask your MSSP

From SearchMidmarketSecurity Mike Chapple Many SMB IT administrators face a serious challenge when it comes to delivering serious security to their users. They may not have the budget or expertise they need and outsourcing can be expensive and troublesome if it’s not approached in the right way. ...

Vulnerability showboating is for amateurs

It’s like one of those magic candles people place on birthday cakes that sparkle and relight themselves each time you think they’ve been blown out. That’s how I’d define the most recent ignition of the “bugs for cash” debate. By now you’ll have probably heard that Dino Dai Zovi, Charlie Miller an...

ClearBudget 0.6.1 Insecure Cookie Handling / LFI Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ ClearBudget 0.6.1 Insecure Cookie Handling / LFI Vulnerabilities ================================================================ + Dork : ClearBudget v0.6.1 + Homepage :...

Unfixed XSS vulnerability at www.budgetwebhosting.nl

Security researcher FayHatti, has submitted on 27/01/2009 a cross-site-scripting XSS vulnerability affecting www.budgetwebhosting.nl, which at the time of submission ranked 1495651 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It ...