Howard Schmidt

Howard Schmidt, former White House cybersecurity coordinator and Microsoft CSO, said executives need to be aware of the threats their companies face. “We have to understand that theft of intellectual property is different from trying to turn the lights out,” he said...

Fedora Update for corosync FEDORA-2013-1083

Check for the Version of corosync OpenVAS Vulnerability Test Fedora Update for corosync FEDORA-2013-1083 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for corosync FEDORA-2013-1001

Check for the Version of corosync OpenVAS Vulnerability Test Fedora Update for corosync FEDORA-2013-1001 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: corosync-2.3.0-1.fc17

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

[SECURITY] Fedora 18 Update: corosync-2.3.0-1.fc18

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

Shift May Be Coming for Information Sharing on Attacks

ANAHEIM, CALIF.–The sharing of information on threats and attacks between government agencies and companies in the private sector has been tried numerous times and in many different ways over the last decade, with varying degrees of success. The need for information flowing in both directions...

New Center, Council Aims to Foster Cybersecurity Discussion at a State Level

Hoping to better address the cause and concerns of cyber attacks on a state level, last week the National Governors Association NGA announced the creation of the Resource Center for State Cybersecurity, an initiative set into motion by Governor Martin O’Malley D-Md. and Governor Rick Snyder R-Mic...

We Are Being Held in Cyber Handcuffs

Hello my Princes of Peace, Warriors of the Revolution, Princesses of the cause, I want you to take two minutes and watch this video: This video is the epitome of the ignorance and arrogance of governments all over the world in response to our cyber war revolution. As you will see, the power peopl...

Obama will control internet, signs Emergency Internet Control

Barack Obama has signed an executive order that could hand control of the internet to the U.S. Government, in the event of a natural disaster or terrorist attack. "The federal government must have the ability to communicate at all times and under all circumstances to carry out its most critical a...

Moving to the Cloud: Considerations for Implementing Cloud Migration Plans

Over 60 executive level attendees came to the Omni Interlocken Resort in Broomfield, Colorado for the National Council of Higer Education Loan Programs NCHELP Spring convention and to hear from a panel of cloud experts on how the migration to cloud IT services could impact their business in the...

Microsoft Office 2003 .doc Buffer Overflow

No description provided by source. Title : Microsoft Office 2003 .doc Command Exec and local BOF msf Author : KedAns-Dz E-mail : [email protected] [email protected] | [email protected] | [email protected] Home : Hassi.Messaoud 30500 - Algeria -00213555248701 Web Site : www.1337day.com Facebo...

CVE-2012-0696

Multiple cross-site scripting XSS vulnerabilities in the Executive Viewer EV in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to 1 aspnetclient or 2 evserver/createcontrol.js...

CVE-2012-0696: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Executive Viewer EV in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to 1 aspnetclient or 2 evserver/createcontrol.js...

PT-2012-2800

Name of the Vulnerable Software and Affected Versions IBM Cognos TM1 versions prior to 9.5 FP1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Executive Viewer EV component. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...

Former DHS Cybersecurity Chief Reitinger Named Sony CISO

Former Department of Homeland Security cyber-security chief Philip Reitinger has been named as the new executive vice president and Chief Information Security Officer of Sony Corporation. In his new position, Reitinger will be in charge of global information security and privacy at the electronic...

Making An Application Security Program Succeed

After winning the attention, and hopefully the backing of executives, as we covered in The Challenge of Starting an Application Security Program, it becomes much more straightforward to win the funding needed for the right tools, services, and training needed for secure application development. N...

The Challenge of Starting an Application Security Program

Since organizations started opening their internal applications to the Web, a little more than a decade ago, it became clear that the security of those connected applications would be more complex – and critical to get right – than before. Unfortunately, through complacency, perhaps a feeling tha...

Jose Ignacio Lopez (GM)

Lopez was the head of General Motors’ Global Purchasing division when he defected for GM competitor VW to head that company’s purchasing operation in 1993. According to a lawsuit filed by GM, Lopez and other company executives brought with them more than two million pages of top-secret GM...

Unfixed XSS vulnerability at hec-executive.ch

Security researcher ShamilBasayev, has submitted on 11/02/2010 a cross-site-scripting XSS vulnerability affecting hec-executive.ch, which at the time of submission ranked 2132061 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Security Metrics Are Useless Without a Plan

WASHINGTON–There has been a big push in recent years in the security community toward metrics, and measurements of all types have become a hot topic in certain corners of the industry. But measurement for measurement’s sake is useless-and perhaps even counterproductive–if the security team in an...