SecurID Attack Was the Work of 'Very Experienced' Attackers

MALAGA, SPAIN–An RSA official on Friday offered more details of the attack the company suffered earlier this year in which thieves made off with key data related to the RSA SecurID two-factor authentication system. The attack, he said, targeted just four employees and was executed by a group he...

HTB23004: Multiple Vulnerabilities in e107

Vulnerability ID: HTB23004 Reference: http://www.htbridge.ch/advisory/multiplevulnerabilitiesine1071.html Product: e107 website system Vendor: e107 http://e107.org/ Vulnerable Version: 0.7.25 and probably prior Tested on: 0.7.25 Vendor Notification: 25 May 2011 Vulnerability Type: Multiple...

Citigroup Attackers Used Simple, Clever Entry Point

The technique hackers used to break into Citigroup’s network last month was at once clever and simpler than security researchers expected, a report from the New York Times says. According to the article, hackers were able to log onto a site used by the credit card company’s customers to gain acce...

CitiBank hacked & large number of customer data stolen

CitiBank hacked & large number of customer data stolen Security breaches happen, they're going to continue to happen … the mission of the banking industry is to keep the customer base safe and customers feeling secure about their financial transactions and payments Citigroup said today that hacke...

What is Zeus - Technical paper Zeus by SophosLabs !

What is Zeus - Technical paper Zeus by SophosLabs ! Zeus or Zbot is one of the most notorious and widely-spread information stealing Trojans in existence. Zeus is primarily targeted at financial data theft; its effectiveness has lead to the loss of millions worldwide. The spectrum of those...

Malware In Mass Breach Observed Stealing 200 MB A Day During Infection

An analysis of the Qakbot worm finds the malware is more prevalent than ever and outfitted with an arsenal of data theft tools. That’s bad news for unemployed workers in Massachusetts, where the Department of Labor network is still recovering from a rampant Qakbot infection. Less than a week afte...

Anonymous leaks PSN SSH Logs, Sony is responsible for Data Theft ?

Anonymous leaks PSN SSH Logs, Sony is responsible for Data Theft ? 1. On the Sony servers running the highly outdated Open SSH version 4.4. 2. Current version is 5.7. For those of Sony for encrypted version are used for more than five years several known security holes. 3. Sony server running in...

SpyEye Trojan Targeted Verizon's Online Billing Site

Attackers used the infamous SpyEye Trojan to target Verizon’s online billing page for nearly a week earlier this month, trying to nab users’ sensitive personal and financial information, researchers say. The Trojan used a method of attack known as HTML injection to modify the pages presented in a...

Sony PlayStation Network hacked again, user passwords compromised !

Sony PlayStation Network hacked again, user passwords compromised ! With Sony's PlayStation Network freshly back online, attackers have once again breached the system, this time going for a vulnerability with the system's password reset. This is getting more ridiculous. Not even two days after So...

SAP NetWeaver EPS - Multiple missing auth check

Application: SAP NetWeaver ABAP Versions Affected: SAP NetWeaver ABAP Vendor URL: http://www.sap.com Bugs:Auth bypass, directory traversal, smbrelay Exploits: YES Reported: 13.05.2011 Vendor response: 15.05.2011 Date of Public Advisory: 17.06.2012 Author: Alexey Tyurin ERPScan Description A...

[THN] The Hacker News Exclusive Report on Sony 3rd Attack Issue !

THN The Hacker News Exclusive Report on Sony 3rd Attack Issue ! On May 5th 2011 THN received an email that Hackers once again attacked Sony for the 3rd Time. The Hacker News is a responsible an online Hacker News Organisation. We propagate news specifically related to security threats. Also,...

VCalendar 1.1.5 - Cross-Site Request Forgery

VCalendar 1.1.5 - Cross-Site Request Forgery Vulnerability ID: HTB22969 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinvcalendar.html Product: VCalendar Vendor: UltraApps http://ultraapps.com Vulnerable Version: 1.1.5 Vendor Notification: 21 April 2011 Vulnerability Type:...

Sony Says Additional 25m Customers Exposed in Breach

A breach that started with the PlayStation Network has also affected Sony Online Entertainment’s 25 million customers, the company acknowledged on Tuesday. The electronics giant posted a press release on the Website of its Sony Online Entertainment division that provided additional details behind...

HTB22965: Multiple XSS vulnerabilities in BackupPC

Vulnerability ID: HTB22965 Reference: http://www.htbridge.ch/advisory/multiplexssvulnerabilitiesinbackuppc.html Product: BackupPC Vendor: Craig Barratt http://backuppc.sourceforge.net/ Vulnerable Version: 3.1.0, perhaps 3.2.0 also vulnerable Vendor Notification: 14 April 2011 Vulnerability Type:...

PSN Breach: Sony Says Credit Card Data Was Encrypted

Sony officials are now saying that while they’re still unsure whether the attackers behind the recent breach of the PlayStation Network stole customers’ credit-card data, the data itself was indeed encrypted n the database. In its initial communications about the PSN attack, Sony did not make any...

Trojans Shifting Focus to Less Widely Used Browsers

Current versions of the SpyEye Trojan now include functionality designed to steal sensitive data from individuals surfing the Web with Chrome and Opera browsers according to a Brian Krebs report. SpyEye and similar Trojans are capable of recording and logging all their victims’ keystrokes...

U.S. federal lab linked to Stuxnet breached !

A federally funded U.S. lab that is suspected to have been involved in finding the vulnerabilities in Siemens SCADA systems used by the Stuxnet worm has shut down the Internet connection for its employees following the discovery of a breach into the facility's systems. The Oak Ridge National...

The Oak Ridge National Laboratory Hacked !

A top United States federal lab was the victim of a "silent" cyberattack earlier this month, news outlets are reporting The Oak Ridge National Laboratory in Tennessee was the victim, according to Nextgov.com. The lab is an energy department laboratory that studies nuclear fusion, supercomputing,...

WordPress Plugin Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities

============================= Vulnerability ID: HTB22946 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectioninajaxcategorydropdownwordpressplugin.html Product: Ajax Category Dropdown wordpress plugin Vendor: http://www.dyasonhat.com/ http://www.dyasonhat.com/ Vulnerable Version: 0.1.5...

Weird Science: Verizon Finds Stunning Drop in Data Theft

If there’s one thing that scientists and statisticians both hate, its weird data. And that’s what the folks at Verizon were dealing with when they tallied the results of their 2011 Data Breach Report which found a stunning 97% drop in the number of lost records, even as the number of reported...