Alex Hutton on the 2011 Verizon Data Breach Investigations Report

Dennis Fisher talks with Alex Hutton of Verizon about the 2011 Data Breach Investigations Report, the massive decrease in the number of records breached, the increase in the number of incidents and the clues to the cover challenge that may or may not be embedded in the report. Podcast audio...

Calling All Hackers - Grand Prize in Sunshine State "Hacktacular" Challenge !

Calling All Hackers - Grand Prize in Sunshine State "Hacktacular" Challenge ! Calling all hackers: Data Analyzers, LLC www.datanalyzers.com in Orlando, Florida, is hosting the Sunshine State "Hacktacular" Challenge with a big prize for the top competitor – a full-time job with benefits and...

The Underground Cyber Hacking Challenge !

The Underground Cyber Hacking Challenge ! Menu of the day 0x00 - 0p3nH4x 1 2011 - Ezine 1 0x01 - The structure of 0p3nH4x 1 2011 0x02 - About the targets 0x03 - Goals 0x04 - Points system 0x05 - Reporting and Documentation 0x06 - Prizes, biatchez 0x07 - Rules 0x08 - Registrations and information...

Pwn2Own Winner Stephen Fewer

The annual Pwn2Own contest at the CanSecWest conference kicked off Wednesday and one of the winners this year was Stephen Fewer, who exploited Internet Explorer 8 on Windows 7. Dennis Fisher spoke with him about the contest, the challenge of attacking IE 8 and the utility of memory protections...

Why Pwn2Own Is What's Right With Security

VANCOUVER — When the Pwn2Own contest began in 2007, it was dismissed by some in the industry as nothing more than a publicity stunt meant to inflate the egos of researchers while embarrassing software vendors. But as the fifth edition of the hacker challenge gets underway at the CanSecWest...

US recruiting young cyber warriors !

The United States is attractive for the abutting bearing of cyber warriors. The US Cyber Challenge Cyber Foundations competition, kicked off this anniversary by the nonprofit Centermost for Internet Aegis , is out to acquisition 10,000 acceptance with the abeyant to become "top accoutrements in...

New Contest To Promote Cyber Security Skills In Teens

Cyber security has been at the forefront of American politics in recent months following high profile cyber security attacks like the Stuxnet worm and Aurora attacks. Those attacks underscored growing concern over the future of cyber security in the U.S. and the lack of native cybersecurity talen...

HTTP Client MS Credential Catcher

This module attempts to quietly catch NTLM/LM Challenge hashes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework NTLMCONST = Rex::Proto::NTLM::Constants NTLMCRYPT = Rex::Proto::NTLM::Crypt MESSAGE =...

Mandriva Update for krb5 MDVSA-2010:245 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2010:245 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for krb5 MDVSA-2010:245 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2010:245 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Linux Security Advisory : krb5 (MDVSA-2010:246)

Multiple vulnerabilities were discovered and corrected in krb5 : An unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of response sent to the KDC. Under some circumstances, this can negate the incremental security benefit of usin...

Mandriva Linux Security Advisory : krb5 (MDVSA-2010:245)

A vulnerability was discovered and corrected in krb5 : An unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of response sent to the KDC. Under some circumstances, this can negate the incremental security benefit of using a...

MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-2010-1324 CVE-2010-1323 CVE-2010-4020 CVE-2010-4021]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2010-007 MIT krb5 Security Advisory 2010-007 Original release: 2010-11-30 Last update: 2010-11-30 Topic: Multiple checksum handling vulnerabilities CVE-2010-1324 krb5 GSS-API applications may accept unkeyed checksums krb5 application servic...

Foxit Reader 4.1.1 - Local Stack Buffer Overflow

Exploit Title : Foxit 4.1.1 Date : 13/11/2010 Author : Sud0 Bug found by : dookie Original POC : https://www.exploit-db.com/exploits/15514/ Software Link : http://www.foxitsoftware.com/downloads/index.php Version : 4.1.1 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thank...

21-Year-Old Matt Bergin Shines in U.S. Cyber Challenge, Wins Second Place

Quick Summary Matt Bergin, a 21-year-old sales representative by day, spends his nights hacking into network systems. Recognized Talent: Bergin's skills led to an invitation to the U.S. Cyber Challenge, organized by the White House and U.S. Navy. Impressive Achievement: He secured 2nd place in th...

Verizon DBIR Challenge Clue #2

This year’s Verizon Data Breach Investigations Report DBIR challenge is well and truly underway. I see where the public contestants are stumped so, here’s a clue to nudge them along: “The “F+” is one of those things that seem like something important at first but turns out to be nothing.” Keep...

Verizon DBIR Cryptography Challenge: Here's The First Clue

So, according to a little birdie tweeting in the night, the 2010 Verizon Data Breach Investigations Report DBIR contains another encryption challenge that leads to actual cash prizes. Last year, after I dropped a big clue here, Grant Stavely, Chris Eng and others decoded the hidden message on the...

Facebook Employees Crack Admin Security

Senior engineers at Facebook responsible for SRE site reliability engineering challenged Facebook employees to try to compromise him and gain access to Facebook’s administrative system via information obtained from him. They succeeded. Read the full article. TechCrunch...

FreeBSD Security Advisory (FreeBSD-SA-10:05.opie.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:05.opie.asc SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cyber Challenge Tests Nation's Top Hackers

CNN reports on the U.S. Cyber Challenge, which is aimed at identifying young people with exceptional computer skills and inspiring them to join the country’s woefully understaffed ranks of cybersecurity specialists...