WordPress Sites Targeted by Mass Brute-force Botnet Attack

US-CERT is aware of an ongoing campaign targeting the content management software WordPress, a free and open source blogging tool and web publishing platform based on PHP and MySQL. All hosting providers offering WordPress for web content management are potentially targets. Hackers reportedly are...

World's biggest DDoS attack that Almost Broke the Internet

The last week has seen probably the largest distributed denial-of-service DDoS attack ever. A massive 300Gbps was thrown against Internet blacklist maintainer Spamhaus' website but the anti-spam organisation , CloudFlare was able to recover from the attack and get its core services back up and...

World's biggest DDoS attack that Almost Broke the Internet

The last week has seen probably the largest distributed denial-of-service DDoS attack ever. A massive 300Gbps was thrown against Internet blacklist maintainer Spamhaus' website but the anti-spam organisation , CloudFlare was able to recover from the attack and get its core services back up and...

Spamhaus DDoS Attacks Triple Size of Attacks on US Banks

So you thought the 100 Gbps distributed denial-of-service attacks against U.S. banks were big? Ongoing attacks against Spamhaus have three times the fury and have affected unrelated online services as collateral damage. Attackers from Dutch webhost Cyberbunker are turning on a firehose of bad...

Alert : Phishing scam targeting CloudFlare Customers

.jpg From Yesterday CloudFlare Security team receiving various reports of a Phishing Scam, which is targeting customers by saying that "you have exceeded bandwidth". In a blog post, CloudFlare said, "Some CloudFlare customers are currently being targeted with a phishing email that was not sent by...

Cloudflare CEO: AT&T Voicemail Hack Key To Compromise

Loose security protecting voice mailboxes at mobile carrier AT&T provided a key element necessary to successfully hack the Google Enterprise Apps account of tech firm CloudFlare, according to an account of the hack posted by CEO Matthew Prince. Writing on the company’s blog on Monday, Prince said...

UGNazi hackers attack on CloudFlare via a flaw in Google

UGNazi hackers attack on CloudFlare via a flaw in Google After the FBI arrested Cosmo, the alleged leader of the UGNazi hacking group, the hackers attacked CloudFlare via a flaw in Google's two-factor authentication system. The CloudFlare hack allowed UGNazi to change the DNS for 4chan, so visito...

Tender Knowledge Base Cross Site Scripting

Exploit Title: Tender Knowledge Base Cross Site Scripting Date: 3.03.2012 Author: Sony Software Link: http://tenderapp.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/03/tender-knowledge-base-cross-site.html...

Anti-Virus Cloudfare Cross Site Scripting

0×1 Site : http://anti-virus.cloudflare.com 0×3 Author : Sandeep Kamble 0×4 Reported : October 12, 2011 0×6 Public Release : October 17 2011 0×7 Status: Fixed Description : Anti-virus.cloudflare.com is a service for avoiding spams . This project to stop attacks and educate visitors with infected...

Chris Hoff, HacKid.org Leads UNITED Security Summit Award Winners

Chris Hoff, HacKid.org Leads UNITED Security Summit Award Winners Awards Recognize Outstanding Contributions to Propel the Information Security Industry Forward to Meet Future Challenges San Francisco, CA at the UNITED Security Summit – September 20, 2011 – The first annual UNITED Security Summit...

Chris Hoff, HacKid.org Leads UNITED Security Summit Award Winners

Chris Hoff, HacKid.org Leads UNITED Security Summit Award Winners Awards Recognize Outstanding Contributions to Propel the Information Security Industry Forward to Meet Future Challenges San Francisco, CA at the UNITED Security Summit – September 20, 2011 – The first annual UNITED Security Summit...