CVE-2013-1835

Moodle 2.x (2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, 2.4.x before 2.4.2) is affected by CVE-2013-1835. The issue allows remote authenticated administrators to obtain sensitive information from the external repositories of arbitrary users by abusing the login_as feature. The core vulnerabil...

HP LaserJet Pro Printers Unauthorized Data Access

Binary data hplaserjetprodataaccess.nbin...

AT&T Hacker Andrew Auernheimer sentenced to 3.5 Years in prison

Self-described troll and Grey hat AT&T Hacker Andrew "Weev" Auernheimer, 26, has been sentenced to 41 months in prison for exploiting an AT&T security hole three years ago, and releasing thousands of iPad owners email addresses. According to authorities, they obtained the ICC-ID and e-mail addres...

Chinese hackers infiltrate Indian Defence Research Organisation

According to an exclusive report published today by DNA news, the computers of highly sensitive Defence Research and Development Organisation DRDO have reportedly been hacked by Chinese hackers as biggest security breach in the Indian Defence ever. Infiltrate leading to the leak of thousands of t...

Apparel Company Files Landmark Lawsuit Against Visa in PCI Dispute

A Tennessee-based footwear and apparel company has filed a $13 million lawsuit against Visa for what it considers random, subjective penalties for being out of compliance with the Payment Card Industry PCI standard the credit card company regulates. Last week Nashville-based Genesco, which operat...

Retailer Challenges Visa $13.2M PCI Fine in Court

Genesco Inc., a Tennessee-based shoe retailer, is taking Visa to court in what is being reported as the first case challenging fines and penalties levied by the Payment Card Industry Data Security Standard PCI DSS under which Genesco was fined $13.3 million. In late 2010, attackers compromised...

Whether you are a large or small business, beware of these 5 common security problems

Every January, the trade press if full of new years resolution-like advice… things to do in the coming year, even Coalfire made a few predictions for 2013. I work at Coalfire Labs, and since our business is IT security and testing, we want to share some advice on how to avoid your systems and...

Apple Finally Fixes App Store Vulnerabilities

Apple has fixed several App Store security issues that first arose last summer, but it hasn’t explained why it took so long to start encrypting communications using public Wi-Fi networks. A Google researcher working on his own time discovered in July 2012 that Apple was serving up data over an...

LinkedIn Data Breach Lawsuit Dismissed

The professional networking site LinkedIn won a class-action lawsuit before it even went to trial after a judge this week dismissed claims from two premium users who maintained the company failed to provide the level of data security outlined in its privacy policy. Northern California U.S. Distri...

World's largest platinum producer 'Anglo American' hacked by Anonymous

Anonymous, the Internet hacktivist hacked into 'Anglo American' and dump their complete database online. The dump includes the Personal details of 122 investors, and more than 400 registered share holders details and other database also. Anglo American is a British multinational mining company...

Evernote hacked, reset your password Now !

Cloud note-taking service Evernote has been hacked and now you have to reset your password imminently. According to a post on the official Evernote blog, an unidentified attacker compromise the servers and extracted usernames, email addresses, and passwords. "Evernote's Operations & Security team...

ABC hacked after anti-Islam politician Interview

The Australian Broadcasting Corporation ABC is investigating data breach after Lateline interviewed Dutch anti-Islam politician Geert Wilders. A hacker going by the handle "Phr0zenMyst" has claimed to have hacked a web site associated with the ABC television program Making Australia Happy, leakin...

ABC hacked after anti-Islam politician Interview

The Australian Broadcasting Corporation ABC is investigating data breach after Lateline interviewed Dutch anti-Islam politician Geert Wilders. A hacker going by the handle "Phr0zenMyst" has claimed to have hacked a web site associated with the ABC television program Making Australia Happy, leakin...

Microsoft becomes latest victim of Cyber attack

Microsoft has become the latest victim of to Cyber attack and confirm that small number of its computers, including some in its Mac software business unit, were infected with malware. Microsoft added, malicious software used in a cyber attack is very similar to those experienced by Facebook and...

Zendesk Compromised, Twitter, Tumblr and Pinterest Users Affected

In the wake of high-profile compromises of companies such as Facebook, the New York Times, Apple and others, officials at Zendesk, an online customer support provider, said that the company also had been compromised and the attackers had made off with the email addresses of customers of Twitter,...

Study Shows One in Four Who Receive Data Breach Letter Become Fraud Victims

A study released Wednesday shows one in four consumers who receive a data breach letter become the victim of identity fraud. That statistic represented 12.6 million victims last year — one million more than the year before, according to the 2013 Identity Fraud Report released by Javelin Strategy ...

Malware attack on Apple employees by hackers who targeted Facebook

The same ring of hackers that are responsible for hacking into at least 40 companies including Facebook and Twitter are reportedly also infected the computers of some Apple employees, the company acknowledged Tuesday. The purpose of hack considered an effort to steal company secrets, research and...

Educause Server Hit With Security Breach

A non-profit association for IT professionals in higher education announced Tuesday its server had been breached. Educause, which has 1,800 college and 300 corporate members, issued a warning that it had discovered a security breach sometime in February that may have compromised the hashed...

Apple Breached by Facebook Hackers Using Java Exploit

Apple is the latest major American company to enter the security confessional and disclose it has been breached. The company told Reuters today it was attacked by the same crew that hit Facebook, which disclosed its breach last Friday, and that like the social media giant, no data had been stolen...

ECShop payment plug-ins exposed 0day vulnerabilities 3 6 0 to assist in the repair-bug warning-the black bar safety net

Recently, the 3 6 0 Web sitessecurity testingplatform exclusive discover the online store system ECShop Alipay plug-in the presence of high-risk 0day vulnerability. Hackers can use aSQL injectionto bypass the system to limit access to the web data, and then implement the“drag library”steal site...