Vodafone Network Seized by Egyptian Authorities to Spread Propaganda Via Text Message

Vodafone released a statement yesterday confirming that the authorities in Egypt seized their network to send propaganda text messages to the Egyptian people. Such text messages have been sent since the start of the protests in an attempt to cool tensions among the protestors who are demanding th...

Amid Protests, Egypt Severs Ties to Internet

Amidst growing popular protests, Egypt has been severed from the Internet, according to reports from Intenet monitors and reporters within the country. The Associated Press and Reuters both confirmed reports of widespread outtages within Egypt affecting customers of all of the country’s main ISPs...

ASP.NET Hack

There were a lot of excellent talks at conferences this year, but perhaps the most interesting and far-reaching presentation was one given by researchers Thai Duong and Juliano Rizzo at Ekoparty on a crypto attack against ASP.NET applications. The “padding oracle” attack that the pair implemented...

India Orders Security Certification for Government Websites After CBI Hack

India has mandated that all government ministries and departments secure their websites with proper certification. This directive follows the hacking of the Central Bureau of Investigation CBI website by a group calling themselves the "Pakistani Cyber Army." The National Informatics Centre has be...

CVE-2010-4012

Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button...

Adobe Releases Emergency Fix for Critical Reader Flaws

Adobe on Tuesday released an emergency patch for several critical vulnerabilities in Adobe Reader, including the recent Adobe Flash bug and a separate flaw that was disclosed earlier this month. The patch released Tuesday is outside of the company’s normal quarterly update schedule for Reader and...

Adobe Readies Patch for Critical Reader, Acrobat Flaws

Adobe Inc. said on Friday that it is planning to release an out-of-cycle update to fix critical security holes in its Reader and Acrobat products, including a fix for a newly disclosed hole that is already being exploited in the wild. In a post on the company’s Product Security Incident Response...

Apple iPhone 锁屏安全绕过漏洞

Bugtraq ID: 44419 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS新版中的一个严重漏洞，iPhone在处理紧急呼叫时再次出现可绕过锁屏PIN Apple iOS 4.0.1 Apple iOS 4.2 beta Apple iOS 4.1 厂商补丁： Apple ------- 目前没有详细解决方案提供： http://www.apple.com/iphone/ 实现方法如下： 1.在PIN输入屏幕点击紧急呼叫按钮。 2.随意输入一些号码，例如1337并拨打。...

Key Combos Bust iPhone Password Protection

A flaw in the iOS software that runs Apple’s iPhone allows any user to bypass the password entry screen by manipulating the emergency call feature, essentially rendering iPhone passwords useless. The flaw, first disclosed in a discussion on the forums site macrumors.com on October 22, requires...

Most soil buy the program vulnerabilities and fixes-vulnerability warning-the black bar safety net

This vulnerability is very serious, will directly affect the website, the order information found in the commercial version CV1. 6. 1 4 9 to 0. Problem cause: The user enters the place an order page/team/buy. php? id=xxx, the page exists in a hidden fieldinput type="hidden" name="id"...

Most soil buy the program commercial version CV1. 6. 1 4 9 0 vulnerability-vulnerability warning-the black bar safety net

This vulnerability is very serious, will directly affect the website, the order information found in the commercial version CV1. 6. 1 4 9 to 0. Problem cause: The user enters the place an order page/team/buy. php? id=xxx, the page exists in a hidden fieldinput type="hidden" name="id"...

Microsoft Pushes Emergency Patch For ASP.NET Flaw

Microsoft has released the emergency out-of-band patch for the ASP.NET padding oracle attack, less than two weeks after a pair of researchers discussed the flaw and a reliable attack against it at a security conference in Argentina. The patch for the ASP.NET bug is only available through...

Microsoft to Release Emergency Patch For ASP.NET Bug

Microsoft on Tuesday will release an emergency out-of-band patch for the ASP.NET padding oracle attack that was disclosed earlier this month. The patch will only be available on the company’s Download Center for the time being, however. The company is taking the step of releasing an emergency fix...

Workarounds Not Enough to Protect Against ASP.NET Attacks

Microsoft has released updated workaround guidance for the ASP.NET padding oracle vulnerability, suggesting that customers use a technique to block requests that specify an application error. However, the researchers who developed the attack on ASP.NET have said that the workaround is not...

Unofficial Patch Released for Adobe Reader Bug

As users await the Oct. 4 release of a patch for the CoolType.dll vulnerability in Adobe Reader, a software and security company has published an unofficial patch for the bug that essentially replaces the vulnerable DLL with a patched one. The patch was published Wednesday by RamzAfzar, a softwar...

CVE-2010-2944

The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote attackers to gain privileges...

Adobe Pushes Out Emergency Patches for Reader, Acrobat Flaw

Adobe has released security updates to fix critical flaws in its Reader and Acrobat applications for both Windows and Macintosh. The updates are emergency fixes for a vulnerability disclosed last month at Black Hat. Adobe pushed the patches out roughly three weeks after the vulnerability was...

Adobe to Issue Emergency Fixes for Reader and Acrobat

Adobe on Thursday will release a fix for a recently publicized critical flaw in its Reader and Acrobat applications. The patches are emergency, out-of-cycle fixes. The vulnerability in Reader and Acrobat was disclosed at the Black Hat conference last month by researcher Charlie Miller during his...

Adobe Plans Emergency PDF Reader Patch

On the heels of a Black Hat conference presentation where researcher Charlie Miller provided details of an exploitable vulnerability in Adobe’s PDF Reader software, the company plans to ship an out-of-band patch to ward off malicious hacker attacks. Miller’s presentation did not include technical...

As Attacks Escalate, Microsoft Ships Emergency Windows Patch

Microsoft has rushed out and emergency patch for all supported versions of Windows to cover a gaping — and under attack — security flaw in the way shortcuts are displayed by the operating system. The out-of-band update, rated “critical,” comes less than 20 days after the discovery of a...