2577 matches found
TrueType Font Flaws in July 2013 Microsoft Patch Tuesday
Going all the way back to the Duqu attacks, font-parsing vulnerabilities and exploits have been symptomatic of some high-end espionage attacks targeting the Windows kernel. As a result, with hackers paying more attention to the core of the Windows OS, this year Microsoft has had to address a numb...
Two-Factor Authentication Options for Web Services
LinkedIn is the latest in a long line of high profile Internet services companies to offer two-factor authentication to its user base, joining Twitter, Evernote, Gmail and myriad others. And much like those other services, the move to a stronger form authentication is a reactionary one, coming on...
NASA Compromised
And then there was NASA. Poor NASA. This was a tough year for the formerly high-flying and universally beloved U.S. space agency. Not only has their budget seen deep cuts as the US Government tries to balance its books, but they also celebrated the bitter-sweet final mission of their once marquee...
Report: Strategic Web Compromises Behind Recent Hack of Amnesty, Others
A recent string of Web site hacks at Amnesty International and other NGOs are evidence of a campaign of cyber espionage directed against human rights orgnaizations, according to a report from The Shadowserver Foundation. In a report on Tuesday, the Foundation said that its members had witnessed a...
Google Warns 20,000 Webmasters About 'Weird Redirects'
The head of Google’s Web spam team says that the company has pushed warning messages to some 20,000 Web site owners that their sites may be compromised and are performing “weird” redirections, possibly to malicious Web sites. Matt Cutts used a Twitter message on Tuesday to announce that the compa...
Mozilla Proposes Change to Handling of Subordinate CA Certificates
Mozilla is considering a change to the way that it handles certificates issued by externally operated sub-CAs in an effort to gain more control of how these CAs issue certificates and what those certificates can do. The proposal would involve some new controls to help verify that certificates are...
Report: Phishing Domain Registrations Way Down
Online criminals registered far fewer Web domains for use in phishing attacks in the first half of 2011, in what may signal a decrease in phishing scams, according to a global phishing survey released this month by the Anti-Phishing Working Group APWG. In all, the group observed phishing attacks...
Nmap NSE net: http-malware-host
Looks for signature of known server compromises. Currently, the only signature it looks for is the one discussed here: http://blog.unmaskparasites.com/2009/09/11/dynamic-dns-and-botnet-of-zombie-web-servers/. This is done by requesting the page '/ts/in.cgi?open2' and looking for an errant 302 it...
Common Security Mistakes Can Lead to Major Compromises
SAN FRANCISCO–Security is hard and getting it right all the time is nearly impossible. But many of the mistakes that people make are simple, avoidable ones that can lead to serious intrusions and major network compromises. “Maintaining network defenses by hand is difficult,” Mike Lloyd, chief...
http-malware-host NSE Script
Looks for signature of known server compromises. Currently, the only signature it looks for is the one discussed here: . This is done by requesting the page /ts/in.cgi?open2 and looking for an errant 302 it attempts to detect servers that always return 302. Thanks to Denis from the above link for...
FreeBSD : Several remotely exploitable buffer overflows in gaim (6fd02439-5d70-11d8-80e3-0020ed76ef5a)
Stefan Esser of e-matters found almost a dozen remotely exploitable vulnerabilities in Gaim. From the e-matters advisory : While developing a custom add-on, an integer overflow in the handling of AIM DirectIM packets was revealed that could lead to a remote compromise of the IM client. After...
What keeps security pros awake at night?
By Tim Wilson, DarkReading/InformationWeek We polled more than 400 business technology professionals to determine which threats they consider the most serious, how they prioritize their defensive efforts, and what plans they’ve put in place to keep their organizations’ data safe in 2009 and beyon...
CVE-2008-1056
Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv0 string when executing 1 pbrun, 2 pbsh, or 3 pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote...
Stack overflow
Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv0 string when executing 1 pbrun, 2 pbsh, or 3 pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote...
CVE-2008-1056
Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv0 string when executing 1 pbrun, 2 pbsh, or 3 pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote...
