Israeli Think Tank Compromised to Serve Sweet Orange Exploit Kit

The official website of a prominent Israel-based, Middle East foreign policy-focused think tank, the Jerusalem Center for Public Affairs JCPA, has been compromised and abused by attackers to distribute malware. The Israeli think tank website JCPA – an independent research institute focusing on...

openSUSE Security Update : apache2 (openSUSE-SU-2014:1045-1)

This apache2 update fixes the following security issues : - CRIME types of attack, based on size and timing analysis of compressed content, are now mitigated by the new SSLCompression directive, set to 'no' in /etc/apache2/ssl-global.conf - ssl-global.conf: SSLHonorCipherOrder set to on -...

FBI — Botnets Infecting 18 Computers per Second. But How Many of Them NSA Holds?

Botnets - a secretly compromised networks of ordinary home and office computers with rogue software or "malware" that are controlled by an individual criminal or a group - has dramatically increased over the past several years and are considered to pose the biggest threat to the Internet. Cyber...

Tinba Banker Trojan Source Code Posted

The source code for Tinba, known as the smallest banker Trojan in circulation, has been posted on an underground forum. Researchers say that the files turned out to be the source code for version one of Tinba, which was identified in 2012, and is the original, privately sold version of the...

How do cyber insurer's assess cyber risk?

Last week I presented on risk transfer as a viable risk management option to compliance and security professionals at the Financial Crime Compliance Professionals Conference in London. As mentioned in one of Ricks earlier blog entries analyzing the Target kill chain, the communication between...

openSUSE Security Update : libqt4 (openSUSE-SU-2012:1420-1)

This update of libqt4 disabled compression to mitigate the CRIME attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-751. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : openssl (openSUSE-SU-2013:1630-1)

This update disables compression in openssl by default, as the varying sizes resulting from compression can be used to retrieve plaintext in various cases. CRIME attack CVE-2012-4929. This update introduces a environment variable OPENSSLNODEFAULTZLIB which can be set to 'no' to reenable compressi...

X (Formerly Twitter): uclfinal.twitter.com and euro2012.twitter.com are vulnerable to CRIME attack

hi, i hope this one is not dup : https://www.ssllabs.com/ssltest/analyze.html?d=uclfinal.twitter.com&hideResults=on https://www.ssllabs.com/ssltest/analyze.html?d=euro2012.twitter.com&hideResults=on mohameds-iMac:Downloads mohaab007$ java -jar TestSSLServer.jar uclfinal.twitter.com Supported...

To Tackle Cyber Crime, FBI Could Hire Hackers Who Smoke Weed

Federal Bureau of Investigation FBI has been authorized by U.S Congress to hire 2,000 new employees this year, and many of those will be young hackers and Programmers in order to built-up its cyber crime division, but FBI’s Director ‘James B. Comey’ is facing some difficulties. Apparently, FBI’s...

Threat Outbreak Alert: Fake Crime Report Notification Email Messages on May 15, 2014

Medium Alert ID: 34241 First Published: 2014 May 15 14:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a crime report notification for the recipient. The text in the email message attempts to convince the recipient to...

Russian Hacker Charged in Biggest U.S Hacking Case Doesn't Want Extradition to U.S

A Russian Hacker who was arrested in year 2012 by the authorities of the Netherlands and accused for allegedly hacking into the computer networks of more than a dozen major American corporations and stole over 160 million Credit and Debit Card Numbers. Earlier we reported, 33-year-old Russian...

Pakistani Hacker Arrested for Hacking Telecom Company Database

Pakistan’s Federal Investigation Agency FIA has arrested a Pakistani Hacker allegedly involved in hacking into a telecom company and uploading their database on his website. With the help of the National Response Center for Cyber Crime NR3C of Pakistan’s Federal Investigation Agency, the local...

Popular Remote access Trojan njRAT fuels Middle East Cyber Crime

Again the sophisticated piece of malware, "njRAT" has come to picture targeting the government agencies and organizations in the Middle East, according to the research carried out by Symantec security researchers. The researchers analyzed 721 samples of malicious code ‘njRAT’ and revealed that a...

Threat Outbreak Alert: Fake Crime Report Notification Email Messages on March 27, 2014

Medium Alert ID: 33538 First Published: 2014 March 27 14:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a crime report notification for the recipient. The text in the email message attempts to convince the recipient ...

Infamous Hacker 'Diabl0' arrested in Bangkok, responsible for $4 Billion Damage to Swiss Banks

27-year-old Infamous Moroccan-Russian hacker arrested by Thailand's Department of Special Investigation DSI in Bangkok, accused of cracking Switzerland Bank Computers and websites. Farid Essebar, went by the online screen name "Diabl0", has been wanted from last three years, and finally arrested ...

CBI arrests Indian mastermind behind Hire-a-Hacker service on FBI tip-off

For the first time in history, Indian Law Enforcement Agency 'Central Bureau of Investigation' CBI has arrested a Cyber criminal after getting a tip-off from the US Federal Bureau of Investigation FBI. 33-Year-old Amit Vikram Tiwari, son of an Indian Army colonel and an engineering dropout, who...

U.S. based Cloud Hosting providers contribute 44% of Malware distribution

U.S. has the top Security Agencies like NSA, FBI to tackle cyber crime and terrorism with their high profile surveillance technologies, but even after that U.S is proudly hosting 44% of the entire cloud based malware distribution. With the enhancement in Internet technology, Cloud computing has...

The Ponemon Institute 2013 Cost of Cyber Crime Study is out

Before anyone else conjures up the image of Steve Martin in the Jerk running down the street with the new phone book and declaring the obvious to all around him, lets put this study in perspective. There is nothing new or unexpected in the 2013 study. We have had it confirmed that cybercrime is...

CryptoLocker Spam Campaign Targets Millions in UK

Tens of millions of online banking customers in the U.K. are the targets of a dangerous spam campaign enticing users to open an attachment containing the CryptoLocker ransomware. The U.K.’s National Crime Agency’s National Cyber Crime Unit posted an advisory late last week warning people to be...

12-year-old Boy admits to hacking major Government sites for aiding Anonymous Hackers

12-year-old Canadian has pleaded guilty to breaking into multiple major government and police websites in the name of the hacker collective Anonymous. Surprisingly, this Fifth Grade student wreaked computer havoc during the Quebec student uprising in 2012, traded pirated information to Anonymous...