Lean Times Demand Smart Security Spending

When it comes to security, it’s planning and execution – not the size of the budget – that matter. With the U.S. economy showing the barest signs of recovering from the recession, the consensus among economists is for a very flat recovery to continue through 2011. For IT security staff, that mean...

Verizon Debuts New App to Gather Anonymous Attack Data

As part of its continuing focus on collecting information on data breaches and thefts, Verizon Business has released VERIS Community application, a new application that enables security professionals to enter anonymous information about an incident and receive a detailed report in return. The...

156 Sites Hacked By "Root Localhost"

156 Sites Hacked By "Root Localhost" Sites List : ishaaninc.com/w00t.html kalavastu.in/w00t.html infoways.in/w00t.html icbioinformatics.com/w00t.html greenshaadi.com/w00t.html graffitidna.com/w00t.html eloknayak.com/w00t.html futurefloorings.in/w00t.html fredtravels.com/w00t.html...

Privacy Crackdown Rattles Facebook Developers

Following an embarrassing expose in the Wall Street Journal, Facebook has tightened its controls over the ways in which applications that use the social networking platform can share unique user identity information or UIDs. The company also banned several applications accused of improperly...

Cryptome Outs Identities of Hackers Behind Breach

Less than a week after the Cryptome.org archive was hacked and defaced, the site has posted the names, addresses and phone numbers of two individuals it accuses of being involved in the attack. In an update on Friday, Cryptome founder John Young posted contact information for three individuals he...

Senate Listens to Data Breach Testimony

The Senate Subcommittee on Consumer Protection, Product Safety, and Insurance heard testimony on from several witnesses yesterday regarding the proposed national data breach legislation, including Maneesha Mithal of the Federal Trade Commission FTC and Mark Bregman, CTO of Symantec. Read the full...

HEI Hospitality Warns on Data Breach

HEI Hospitality, owner and operator of upscale hotels operating under the Marriott, Sheraton, Westin and other monikers, has sent letters informing some 3,400 customers that their credit card data may have been compromised. Read the full article. IDG News Service...

Micronetsoft RV Dealer SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Micronetsoft RV Dealer Website SQLi Vulnerability Vendor url:http://www.micronetsoft.com Version:1 Price:199$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, M4n0j,NoCare,...

Discover Will Receive $5 Mil from Heartland Breach

Heartland Payment Systems has agreed to pay $5 million to Discover to settle claims arising from the massive data breach disclosed by the payment processor last year. Read the full article. Computerworld...

Alex Hutton on the Verizon Data Breach Investigations Report

Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses. Podcast audio courtesy of sykboy65 Subscrib...

Verizon DBIR Challenge Clue #2

This year’s Verizon Data Breach Investigations Report DBIR challenge is well and truly underway. I see where the public contestants are stumped so, here’s a clue to nudge them along: “The “F+” is one of those things that seem like something important at first but turns out to be nothing.” Keep...

Liferay JSON Service Information Leakage

Minded Security Labs: Advisory MSA251009 Liferay Json Service Multiple Information Leakage Tested Versions: Liferay Portal 4.x and 5.x Minded Security ReferenceID: MSA251009 Credits: Discovery by Stefano Di Paola of Minded Security stefano.dipaola at mindedsecurity.com Reference:...

Verizon DBIR Cryptography Challenge: Here's The First Clue

So, according to a little birdie tweeting in the night, the 2010 Verizon Data Breach Investigations Report DBIR contains another encryption challenge that leads to actual cash prizes. Last year, after I dropped a big clue here, Grant Stavely, Chris Eng and others decoded the hidden message on the...

Insomnia : ISVA-100730.1 - CMS Multiple SQL injection Vulnerabilities

Insomnia Security Vulnerability Advisory: ISVA-100730.1 Name: EasyManage CMS Multiple SQL injection Vulnerabilities Released: 30 July 2010 Vendor Link: http://www.face.co.nz/easymanage Affected Products: Easy Manage CMS Original Advisory: http://www.insomniasec.com/advisories/ISVA-100730.1.htm...

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published:...

Данные из взломанного процессинга Хронопэй

Ровно неделя прошла с момента опубликования заявления группы хакеров о взломе платежной системы «Chronopay», краже массива кредитных карт http://chronoplay.livejournal.com/586.html и личных данных миллионов россиян. Поскольку официальные лица компании продолжают делать вид, что ничего не произошл...

Иинформация о 100 миллионах пользователей Facebook

Некий Ron Bowes сграбил всю инфу и выложил на пиратской бухте, которая не была закрыта настройками приватности. Пост на его бложеке: http://www.skullsecurity.org/blog/?p=887 BBC быстренько подсуетились раскрутили это как громадную новость Линк на торрент:...

Хакеры получили доступ к базе данных пользователей The Pirate Bay

Аргентинский хакер Ch Russo сообщил, что он с двумя партнёрами обнаружил многочисленные уязвимости на thepiratebay.org, связанные с возможностью внедрения SQL-кода. С помощью этих уязвимостей они получили доступ к базе данных пользователей сайта и тем самым получили возможность создавать, удалять...

Data Hack at Univ. of Hawaii Affects 53,000

More than 53,000 people, who did business with the University of Hawaii at Manoa parking office’s data base from 1998-2009, are being notified by mail that they may be affected by a computer security breach. Read the full article. Honolulu Star Advertiser...

Joomla com_neorecruit Blind Sql injection Vulnerability

Exploit for php platform in category web applications ======================================================= Joomla comneorecruit Blind Sql injection Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1...