US-CERT Warns of More CryptoLocker Ransomware Infections

CryptoLocker is a devious evolution of now-familiar ransomware schemes in which the malware encrypts files it finds on a number of network resources and demands a ransom for the decryption key. US-CERT issued an advisory today warning businesses and consumers of the risks presented by CryptoLocke...

Are you in danger of missing the HIPAA Omnibus?

On September 23, 2013, many companies will be required by law to comply with HIPAA…and they dont even know it. Specifically, the final HIPAA Omnibus Rule pulls all companies under the law if they store, process, or transmit PHI data as part of their business processes. While the Omnibus Rule was...

Google Chrome Inbuilt Flash player allows Webcam Hacking

No longer limited to Hollywood movies about cybercrime, webcam hacking has stealthily and aggressively broken into average households "I've heard a hacker could access my webcam and watch me in front of my computer. Could this really happen?" YES, other than using a Remote administration tools, i...

Google Advocates 7 Days to Go Public with Critical Vulnerabilities

Two security engineers for Google say the company will now support researchers publicizing details of critical vulnerabilities under active exploitation just seven days after they’ve alerted a company. That new grace period leaves vendors dramatically less time to create and test a patch than the...

Apple Sets May 1 End Date for Apps that Want UDIDs

Apple has implemented a deadline for when it will reject apps that access devices’ unique device identifier numbers, or UDIDs. Apple has been phasing out the 40-character string of letters and numbers over the last year, yet according to a post on Apple’s Developers site yesterday, this appears t...

kernel: xen: VCPU timer overflow leads to PCPU deadlock and host death-by-watchdog

Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service Xen infinite loop and physical CPU consumption by setting a VCPU with an "inappropriate deadline."...

Fedora 17 : xen-4.1.3-6.fc17 (2012-18242)

A guest can block a cpu by setting a bad VCPU deadline XSA 20, CVE-2012-4535 876198 HVM guest can use invalid pirq values to crash xen XSA 21, CVE-2012-4536 876200 HVM guest can exhaust p2m table crashing xen XSA 22, CVE-2012-4537 876203 PAE HVM guest can crash hypervisor XSA-23, CVE-2012-4538...

DEBIAN-CVE-2012-4535

Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service Xen infinite loop and physical CPU consumption by setting a VCPU with an "inappropriate deadline."...

Timer overflow DoS vulnerability

ISSUE DESCRIPTION A guest which sets a VCPU with an inappropriate deadline can cause an infinite loop in Xen, blocking the affected physical CPU indefinitely. IMPACT A malicious guest administrator can trigger the bug. If the Xen watchdog is enabled, the whole system will crash. Otherwise the gue...

Group Claims to Have Stolen Romney Tax Records from Tennessee Offices

A group claiming to have stolen tax returns belonging to Republican presidential candidate Mitt Romney say they want $1 million in Bitcoins by September 28 or they’ll publicly release the records worldwide. News agencies report the U.S. Secret Service is investigating the alleged data theft at th...

Apple Pushes Back Deadline for Sandboxing OS X Apps

Apple has pushed back the deadline for developers to include a sandbox in all of the apps on the Mac App Store, giving them a reprieve until June 1. The deadline was set for March 1, but Apple has changed it in order to give developers more time to work with the new requirements. Apple originally...

Syrian president's e-mail hacked by Saudi hackers

Syrian president's e-mail hacked by Saudi hackers According to report received to THN editorial, A hacker based out of Saudi Arabia, identified as Salman Al Anzi, claims to have hacked the private email account of Syrian president Bashar Al Assad. He also hack a number of Syrian ministries, the...

Giveaway : Win a Backtrack or iPhone book

Giveaway: Win a Backtrack or iPhone book After the huge success of our earlier giveaway we have again teamed up with Packt Publishing and we are organizing a giveaway where Three lucky winners stand a chance to win a copy of their choice between two great selling books i.e iPhone Applications...

ICIMP 2012 Call For Papers

INVITATION: ================= Please, consider to contribute to and/or forward to the appropriate groups the following opportunity to submit and publish original scientific results to ICIMP 2012. The submission deadline is set to January 5, 2012. In addition, authors of selected papers will be...

Vulnerability Broker Draws Line in Disclosure Sand

Looking to put pressure on software vendors who procrastinate on fixing security flaws, the world’s biggest broker of vulnerability data is drawing a line in the sand. Starting August 4, TippingPoint’s Zero Day Initiative ZDI will enforce a six-month deadline for patches on all vulnerabilities...

SSNs Staying on U.S. Military IDs For Now

The Defense Department will not meet its end-of-the-year deadline for removing Social Security numbers from military ID cards as they are issued or renewed, the Pentagon has confirmed. Read the full article. Stars & Stripes...