CVE-2014-8352

Cross-site scripting XSS vulnerability in json.php in French National Commission on Informatics and Liberty aka CNIL CookieViz allows remote we servers to inject arbitrary web script or HTML via the maxdate parameter...

Cybersecurity and the Financial Services Industry

2014 is the year that the US Securities and Exchange Commissions Office of Compliance Inspections and Examinations OCIE is turning its focus to cybersecurity, a looming threat to any and all companies that utilize the internet. In case you missed my last post, back in March the OCIE hosted a...

Patched Code-Execution Bug Affects Most Android Users

A serious code-execution vulnerability in Android 4.3 and earlier was patched in KitKat, the latest version of the operating system. Researchers at IBM this week disclosed the nature of the vulnerability, which was privately disclosed to the Android Security Team in September and patched last...

FTC Asks Data Brokers, Congress for Transparency, Regulation

The Federal Trade Commission called on data brokers to be more transparent and give users more control over their personal information in a comprehensive report issued yesterday. The 100-plus page document, “Data Brokers: A Call for Transparency and Acccountability,” .PDF criticizes the industry...

Oversight Board Calls NSA Metadata Collection Illegal

Another independent review board investigating the National Security Agency’s collection of phone records metadata has come down hard on the program, calling it illegal, recommending the government end the program, and questioning its effectiveness in ferreting out terrorists. The Privacy and Civ...

European Commission Urges U.S to Reform Surveillance Methods

The European Commission is urging the United States government to make some changes to the way it handles surveillance to help restore the trust in the relationship between the EU and the U.S. The commission is asking for the U.S. to promote privacy rights internationally, adopt the EU’s data...

Threat Outbreak Alert: Fake Commissions Invoice Email Messages on October 7, 2013

Medium Alert ID: 31153 First Published: 2013 October 7 18:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a commissions invoice for the recipient. The text in the email message attempts to convince the recipient to op...

NASDAQ Patches Reported XSS Vulnerability

A NASDAQ representative confirmed this morning that a cross-site scripting vulnerability on the exchange’s website discovered by an ethical hacker has been patched. The issue was reported on Sept. 2 by Ilia Kolochenko, chief executive of High-Tech Bridge, a Swiss penetration testing company...

Federal Reserve Admits It was Briefly Hacked During Super Bowl

Two days after the group Anonymous boasted it had broken into a government Web site and had the data dump to prove it, the U.S. Federal Reserve admitted it was hacked. “The Federal Reserve system is aware that information was obtained by exploiting a temporary vulnerability in a website vendor...

Anonymous hackers deface United States Sentencing Commission website

Anonymous hackers deface the official website of U.S. Sentencing Commission website ussc.gov on Friday under a new campaign called "Operation Last Resort" in memory of Reddit co-founder Aaron Swartz and also threatening to release a massive WikiLeaks-style exposure of sensitive U.S. government...

Anonymous hackers deface United States Sentencing Commission website

Anonymous hackers deface the official website of U.S. Sentencing Commission website ussc.gov on Friday under a new campaign called "Operation Last Resort" in memory of Reddit co-founder Aaron Swartz and also threatening to release a massive WikiLeaks-style exposure of sensitive U.S. government...

Phony Browser Updates Redirect Victims to Malware Sites, Scareware

Hackers are using malicious ads promising browser updates to drop malware on users’ machines. Using a mix of social engineering and a variation on scareware, attackers have been taking advantage of recent legitimate Firefox and Chrome updates to infect hundreds of machines in Europe and the Unite...

Microsoft Agrees to Modify Windows 8 Following EU Complaint

Microsoft announced Wednesday it will tweak the release of its forthcoming Windows 8 operating system to comply with the European Commission, which argues that in its current state, the software fails to offer customers a browser choice screen to let them “easily choose their preferred web...

EU Fights Back, Hints It May Fine Google Over Privacy Policy

As expected, a group of European data privacy advocates have asked for search giant Google to clarify what and how much information the company extracts from its customers. In a letter to Google’s CEO Larry Page today .PDF, the National Commission for Computing and Civil Liberties, or CNIL, argue...

FTC Takes On Scareware Marketers, Court Imposes $163M Judgment

The United States District Court of Maryland ruled in favor of the Federal Trade Commission on Sept. 24, imposing a judgment of more than $163 million against the managers and directors of an enterprise whose sole function the FTC alleges was to defraud its customers with scareware. Kristi Ross w...

Federal Commission Phished, Employees' Information Leaked

The U.S. Commodity Futures Trading Commission CFTC, an independent federal agency that helps regulate futures and option markets, was hit with a data breach last month according to an e-mail statement from the Commission that circulated online late last week. The e-mail confirmed an attacker was...

FTC Bares Teeth, Levies $800k Fine Against Data Brokerage Firm

In a first-of-its-kind ruling, the Federal Trade Commission FTC told data brokerage firm Spokeo it has until tomorrow to hand over $800,000 to the Treasurer of the United States. The ruling came in a case addressing the sale of personal Internet information for the purpose of job applicant...

In Face of Advertisers, Microsoft To Make Do Not Track Feature Default on IE10

Microsoft yesterday announced its intent to implement its “Do Not Track” DNT functionality by default in the next iteration of its web browser, Internet Explorer 10, a shift that has already begun to ruffle the feathers of online advertisers. In a post to its TechNet blog, the company’s Chief...

国内优秀的JAVA(JSP)内容网站管理系统.FCK上传漏洞

简要描述： 国内优秀的JAVAJSP内容网站管理系统.FCK上传漏洞 详细说明： 漏洞地址: www.域名/thirdparty/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/jsp/connector.jsp 漏洞证明： 使用JEECMS系统的网站FCK漏洞地址： 1、中国物流信息中心：http://www.clic.org.cn/...

Google, Advertising Companies, Found Bypassing Safari Privacy Settings

Google and several other advertising companies have allegedly been evading the privacy controls of Apple’s Safari browser by placing a special kind of tracking code on a handful of sites, according to new research done by Stanford grad student Jonathan Mayer. To follow up on Mayer’s work,...