McAfee SuperScan 4.0 - Cross-Site Scripting

Trustwave SpiderLabs Security Advisory TWSL2013-024: Cross Site Scripting XSS vulnerability in McAfee Superscan 4.0 Published: 08/02/2013 Version: 1.0 Vendor: McAfee http://www.mcafee.com/ Product: SuperScan Version affected: v4.0 Product description: SuperScan 4 is a Windows port scanning tool...

Stabuniq Trojan rapidly stealing data from US banks

--- Trojan.Stabuniq geographic distribution by unique IP address Security researchers from Symantec have identified a new Trojan that appears to be targeting financial institutions. Dubbed Trojan.Stabuniq, the malware has been collecting information from infected systems potentially for the...

Managing Your Nexpose Scan Engines through the API

Here's a walk-through of a Ruby script that uses the nexpose gem to add and configure your Nexpose Scan Engines. This script configures the Dynamic Scan Pool feature. A Scan Engine pool is a group of shared Scan Engines that can be bound to a site so that the load is distributed evenly across the...

Skimmers Hit Patrons of Wrigley Field, Chicago Restaurants

Six individuals were charged late last week with “skimming” more than $200,000 from victims who used their credit or debit cards at Wrigley Field and other Chicago restaurants. A press release from Illinois’ Attorney General Lisa Madigan on Friday alleged that Joseph Woods, 32, was the scheme’s...

Report: FEDS Arrest Top LulzSec Members

The FBI has arrested three suspected members of the hacker group LulzSec, according to published reports. Fox News broke the story of the arrests on Tuesday, citing unnamed FBI officials saying that law enforcement agents closed in on top members of the group LulzSec Tuesday morning using...

Chicago Tribune Cross Site Scripting

Title: Chicago Tribune reflected Cross Site Scripting vulnerability Vendor: Chicago Tribune http://www.chicagotribune.com/ Description: mobile.chicagotribune.com suffers from a reflected Cross-site Scripting XSS vulnerability. Advisory time-line:...

TWSL2011-014: Vulnerability in Pantech Web Browser SSL Implementation

Trustwave's SpiderLabs Security Advisory TWSL2011-014: Vulnerability in Pantech Web Browser SSL Implementation https://www.trustwave.com/spiderlabs/advisories/TWSL2011-014.txt Published: 2011-09-23 Version: 1.0 Vendor: Pantech http://www.pantechusa.com Product: Link P7040P, others may be vulnerab...

Lessons from Chicago: Bad Policy, Not Geopolitics, Enables IP Theft

One thing that CME Group, the company that runs the Chicago Mercantile Exchange, wants to make perfectly clear is that it places a “high value on protecting its intellectual property and trade secrets.” That was the clear message from CME following the arrest of an employee for stealing company...

FBI: Employee Passed Chicago Mercantile Exchange Secrets to China

A 10 year employee of CME Group in Chicago is alleged to have stolen trade secrets and proprietary source code used to run trading systems for the Chicago Mercantile Exchange, according to a criminal complaint filed in U.S. District Court in Illinois. The complaint, dated June 30, 2011 and signed...

Researchers Get Funding for New Secure Operating System

Researchers at the University of Illinois at Chicago have received a $1.15 million grant from the National Science Foundation to build a new computer operating system based on virtual machines and the concept of isolation. The new OS project, called Ethos, is the brainchild of UIC associate...

Another Small Town Loses $100K to Hackers

A rash of home foreclosures and abandoned dwellings had already taken its toll on the tax revenue for the Village of Summit, a town of 10,000 just outside Chicago. Then, in March, computer crooks broke into the town’s online bank account, making off with nearly $100,000. Read the full article...

Easy Chicago Avenue 1.0 Cross Site Scripting

? Note : PaLesTine r0x ! ============================================================================== ? East Chicago Avenue 1.0 XSS Multiple Remote Vulnerabilities ============================================================================== ?Love to: N0 L0ve ? Script: East Chicago Avenue 1.0 ...

Federal Wiretaps Busted by Researchers

Researchers at the University of Pennsylvania say they’ve discovered a way to circumvent the networking technology used by law enforcement to tap phone lines in the U.S.The flaws they’ve found “represent a serious threat to the accuracy and completeness of wiretap records used for both criminal...

Unfixed XSS vulnerability at gallery.chicagoindoorracing.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting gallery.chicagoindoorracing.com, which at the time of submission ranked 1818185 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...