Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.2 security update

Updated Grid component packages that fix several security issues, add various enhancements and fix multiple bugs are now available for Red Hat Enterprise MRG 2 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common...

Grum Botnet Attempts Another Comeback, Fails Again

The Grum botnet, which Dutch authorities and security researchers knocked offline earlier this summer, made a second, unsuccessful attempt at a comeback over the weekend when the bot herders stood up two new command-and-control servers in Turkey. The revival was short-lived however, and both C&Cs...

AIX NFSv4 vulnerability

IBM SECURITY ADVISORY First Issued: Thu Sept 13 13:43:29 CDT 2012 | Updated: Wed Sept 26 13:25:50 CDT 2012 | Updated: Removed the cve.mitre.org reference | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved to OpenSSL signature The most recent version of...

Ezylog Photovoltaic Management Server - Multiple Vulnerabilities

Ezylog Photovoltaic Management Server - Multiple Vulnerabilities Multiple vulnerabilities in Ezylog photovoltaic management server ================================================================= ADVISORY INFORMATION Title: Multiple vulnerabilities in Ezylog photovoltaic management server...

CVE-2012-4737

channels/chaniax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certa...

Team GhostShell leak One Million Records

TeamGhostShell a team linked with the Activist group Anonymous, is claiming that they have hacked some major U.S. institutions including major banking institutions, accounts of politicians and has posted those details online. The dumps comprising of millions of accounts has been let loose on the...

ocPortal CMS 8.x Session Hijacking

OVERVIEW ocPoral CMS 8.x and lower versions are vulnerable to Session Hijacking flaw which could allow attackers to compromise administrator session. 2. PRODUCT DESCRIPTION ocPortal is the website Content Management System a CMS for building and maintaining a dynamic website. ocPortal's powerful...

Your Friend can help Investigators to Access your Facebook Profile

If you're not already particularly picky about who you friend on Facebook, you might want to think about rejiggering those privacy settings. It's not the backdoor access that the FBI has been pushing for, but US District Judge William Pauley III has now ruled that it and other law enforcement...

Cyber Security Alliance Launches Trend Spotting Project

A new international cyber security alliance announced plans to put the Continents best heads together to try to envision future cyber security trends. The International Cyber Security Protection Alliance ICSPA, a British organization that helps support law enforcement cyber crime units, announced...

Wireless Carriers See Spike in Cell Phone Records Requests

Some of the nation’s largest wireless carriers say they last year collectively received some 1.3 million requests from law enforcement for customers’ phone records – a number that continues to rise. The information shared with police includes geolocation information, content of text messages,...

Twitter Transparency Report Shows Huge Interest From U.S. Law Enforcement

Privacy advocates and security experts often warn users about the consequences of handing over so much of their personal data to Web sites or social networks, saying that they never know how it’s going to be used or sold. But it’s rare that users ever see examples of that in action. Twitter is...

Citadel Malware Crew May Be Taking Its Wares Off the Market

It turns out that malware authors–at least some of them–may have an interest in economics. Perhaps worried about market saturation or commoditization, the distributors of the Citadel malware, which has been used to deliver ransomware in the past, are apparently about to take their creation off th...

CarderProfit Case Shows Maturation of FBI Anti-Cybercrime Operations

The FBI is the country’s top police unit, charged with tackling the biggest problems facing its citizens. Cybercrime, by just about any measure, would fall somewhere near the top of that list of problems.The FBI historically has been ineffective and at times indifferent to all of this. However,...

Operation Card Shop : FBI Arrested 24 Credit Card Cyber Criminals

Operation Card Shop : FBI Arrested 24 Credit Card Cyber Criminals The FBI has arrested 24 cybercriminals part of an international law enforcement operation aiming to arrest and prosecute the users of a sting operation called "Carder Profit". The suspects, collared after a two-year investigation...

Assange's Asylum In The Balance, Researcher Warns Ecuador's Deliberations Are Vulnerable To Online Snooping

With Wikileaks founder Julian Assange anxiously awaiting word from the government of Ecuador on his request for political asylum, a security researcher warns that the country’s Ministry of Foreign Affairs, which is handling the Assange asylum request, is using a video conferencing system that is...

Anonymous Again Crusading Against Child Pornography

Members of the hacktivist collective Anonymous resurfaced this week with a new campaign to expose suspected pedophiles on Twitter and get the site and its users to help root out other accounts linked to child pornography. In a Pastebin post, someone using the hashtag Anonymous posted the Twitter...

Why Google Won't Protect You From Big Brother

In this talk from the TEDx San Jose conference, security and privacy researcher Chris Soghoian explains the way that surveillance works these days, why it’s so easy for law enforcement to watch private citizens and why companies such as Facebook, Twitter, Google and others won’t protect their use...

Senator Seeks More Info On DOJ Location Tracking Practices

Senator Al Franken D-MN is demanding answers to questions about the U.S. Department of Justice DOJ practice of gathering data from wireless providers in order to monitor individuals’ movements using mobile phone location data. Franken released a copy of a letter to Attorney General Eric Holder on...

FBI Concerned About Bitcoin Usage Among Cybercriminals

The Federal Bureau of Investigation has become increasingly concerned over the usage of the mostly-anonymous payment network Bitcoin by hackers and cybercriminals, according to an unclassified report obtained by Wired this week. The report, “Bitcoin Virtual Currency: Unique Features Present...

UK Ministry of Defence: Hackers Have Breached Top Secret Systems

The UK’s military’s head of cyber security warned that hackers have breached computer systems containing top secret data, The Guardian reported. Major General Jonathan Shaw told the paper that the number of known breaches to top secret systems was small, but that attacks were “hard to quantify” a...