Modern Defenders Share, Visualize and Succeed

TENERIFE, Spain – Network defenders who rely solely on lists of assets to protect are running a fool’s errand. Instead, it’s crucial to think in graphs to not only visualize threats, but also to understand network edges, and dependencies between assets and accounts in order to be able to capture...

Adobe Reader/Acrobat Arbitrary File Deletion Vulnerability

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. Adobe Reader/Acrobat Arbitrary File Deletion vulnerability allows attackers to synchronize the deletion of arbitrary files through Adobe cooperation...

Model S has a security vulnerability? Tesla Fury dig Google head of security-vulnerability warning-the black bar safety net

Earlier today broke the Tesla Model S model electric car, there may be hackers exploit major security vulnerability through this vulnerability hackers can remotely control cars, and even let the car flameout, the media reported this message and of the electric car's safety questioned. Tesla in...

Soreco AG Xpert.Line 3.0 Authentication Bypass

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Xpert.Line Vendor: Soreco AG 1 CVE ID: CVE-2015-3442 Subject: Authentication Bypass Risk: Critical Effect: Remotely exploitable Author: Alessandro Zala [email protected] Andreas Hunkeler...

49 Arrested in "Operation Triangle" Phishing Campaign

Authorities from six nations worked in tandem on Tuesday to apprehend 49 suspects connected with allegedly carrying out a complex phishing scheme dubbed Operation Triangle that saw cybercriminals make off with more than $6 million. Police in Italy, Spain, and Poland coordinated the arrests, while...

U.S. and Japan to Cooperate on Cybersecurity, Information Sharing

The United States and Japan have agreed to cooperate more closely on cybersecurity and information sharing initiatives as a way to help both countries defend against future threats and attacks. The new initiative will include a variety of components, most notably cooperation during serious...

Beebone Botnet Takedown Carried Out

A relatively small yet troublesome botnet has been shut down in a joint operation between U.S. and European law enforcement and a number of private security companies, including Kaspersky Lab. The takedown of Beebone was carried out on Wednesday by the FBI, the Department of Homeland Security,...

Obama's Executive Order urges Companies to Share CyberSecurity Threat Data

President Barack Obama signed an executive order on Friday that encourages and promotes sharing of information on cybersecurity threats within the private sector and between the private sector companies and the government agencies as well. AREAS TO IMPROVE During his speech at the White House...

Humhub 0.10.0-rc.1 - XSS / SQL Injection vulnerabilities

Exploit for php platform in category web applications Exploit Author: Jos Wetzels, Emiel Florijn Vendor Homepage: https://www.humhub.org Software Link: https://github.com/humhub/humhub/releases Version: test Will insert the corresponding HTML elements into the post/comment body. 2...

Michael Chertoff Risk Management ACSC Keynote

BOSTON – Former Homeland Security secretary Michael Chertoff gave enterprises a pep talk Wednesday during his keynote address at the Advanced Cyber Security Center’s annual conference. In a climate where massive financial services organizations such as JP Morgan Chase have been breached, the Whit...

用友软件协作办公平台多处漏洞（SQL注入漏洞、越权查看敏感信息）

简要描述： RT 详细说明： 谷歌关键字： intitle:"fe协作" 注入点： witapprovemanage\report\staffleaveana.jsp?userid= 漏洞证明： 1.http://220.168.210.109:9090/witapprovemanage/report/staffleaveana.jsp?userid=1 2.http://fsd2014.f3322.org:9090/witapprovemanage/report/staffleaveana.jsp?userid= img...

Microsoft Exec Says Company Has Never Been Asked to Backdoor a Product

One of Microsoft’s top security executives said the company has never been asked by the United States government to build a backdoor into any of its products, and if the company was asked, it would fight the order in the courts. Since the Edward Snowden revelations began last summer, there have...

International Authorities Take Down Shylock Banking Malware

Like most profitable criminal enterprises, the Shylock banking malware thrived because it was supported by a nimble infrastructure that allowed it to stay one step ahead of network and security monitoring capabilities, and the authorities. That race ended this week. Europol announced today that i...

Facebook Carries Out Lecpetex Botnet Takedown

Facebook has moved slowly and deliberately into the realm of botnet takedowns by disrupting a relatively small operation in Greece that was using the social platform to spread spam and malware. Two arrests were made in connection with the Lecpetex botnet in Greece on July 3. The alleged botmaster...

FBI, NYPD Form Financial Cybercrime Task Force

The FBI has formed a new cybercrime task force with the New York Police Department and the Metropolitan Transit Authority whose job will be to go after high-level financial cyber crimes, employing a model of interagency cooperation that the bureau and other federal law enforcement agencies have...

LulzSec Hacker Sabu Sentenced to Time Served

The LulzSec hacker-turned-informant known as Sabu avoided any more jail time and was sentenced to time served on Tuesday for his part in leading several of the group’s attacks on high-profile targets. Hector Monsegur walked out of court in New York a free man, thanks to his cooperation with the F...

HVAC Vendor: Data Connection to Target was Billing System

The heating, ventilation and air conditioning contractor linked to the Target breach said its data connection to the giant retailer was “exclusively for electronic billing, contract submission and project management,” the company’s president and owner said yesterday. Ross E. Fazio said in a...

CBI arrests Indian mastermind behind Hire-a-Hacker service on FBI tip-off

For the first time in history, Indian Law Enforcement Agency 'Central Bureau of Investigation' CBI has arrested a Cyber criminal after getting a tip-off from the US Federal Bureau of Investigation FBI. 33-Year-old Amit Vikram Tiwari, son of an Indian Army colonel and an engineering dropout, who...

China: 'We are ready for International cooperation to deal with cyber security Challenges'

Yesterday at Stanford University in the United States, Cyber Security Experts and Leaders from more than 40 countries gathered to talk about the cyberspace security problems and cooperation among countries. The need for international cooperation in cybersecurity is evident, due to the nature of...

China: 'We are ready for International cooperation to deal with cyber security Challenges'

Yesterday at Stanford University in the United States, Cyber Security Experts and Leaders from more than 40 countries gathered to talk about the cyberspace security problems and cooperation among countries. The need for international cooperation in cybersecurity is evident, due to the nature of...