Facebook: The Money Mule Farm

Scammers and phishers are continuing to adapt their recruitment tactics, now going so far as to create special Facebook groups for their work-at-home scams. Phishers have been using social networks such as Facebook, MySpace and Twitter for years now as fertile hunting grounds not only for new...

Mozilla Firefox出错处理信息泄露漏洞

BUGTRAQ ID: 40401 Firefox是非常流行的开源WEB浏览器。 Firefox的window.onerror处理器允许读取重新定向的目标URL。如果通过HTML script标签引用了重新定向站点的话，就可以读取目标URL中所包含的会话特定查询参数。 Mozilla Firefox 3.6.3 Mozilla Firefox 3.5.9 厂商补丁： Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/ XSUH Cross Site URL...

This Week In Security: Privacy, RedPhone and Adobe

In case you needed any reminders that privacy is one of the more pressing problems on the Web right now, this week’s news provided plenty of them. Along with stories of Facebook’s continued privacy missteps, this week gave us the gift of Google letting users install some Google code to opt out of...

Why Can't Johnny Have Privacy?

One of the more trite and oft-repeated maxims in the software industry goes something like this: We’re not focusing on security because our customers aren’t asking for it. They want features and functionality. When they ask for security, then we’ll worry about it. Not only is this philosophy doom...

Facebook Delete Friends Cross Site Request Forgery

Exploit Title: Facebook Delete Friends CSRF Date: 5/21/10 Author: Steven Abbagnaro Website: http://prominentsecurity.com Code: =============================================== + Facebook Delete Friends CSRF + Author: Steven Abbagnaro + Site: http://ProminentSecurity.com + Contact:...

Facebook Wall Post Joke Is a Worm

Shifty sorts have created a new worm which spread rapidly on Facebook. The malware, for now at least, does nothing more malicious than posting a message on an infected user’s Facebook wall that point to a site called fbhole.com. Nonetheless, the speed of its spread on the social networking site h...

Feasting on Twitter User Desire for Followers

The cybercriminals behind the intensifying phishing scam that has been plaguing Twitter since late last week are proving how easy it is to pervert the trust social networks like Twitter and Facebook along with search giant Google have made a cornerstone of their respective business models. The id...

Facebook Plagued By Sexiest Video Ruse

A huge attack by a rogue Facebook application last weekend infected users’ PCs with popup-spewing adware, said a researcher. Read the full article. Computerworld...

Facebook Makes Device, Identity Security Updates

Amid a controversy about privacy, Facebook unveiled new security features designed to protect user accounts. Read the full article. eWEEK...

Facebook Outs Hacker 'Kirllos'

Facebook has identified the hacker named Kirllos who tried to sell 1.5 million Facebook accounts recently in underground hacking forums. According to the investigators at the social networking site, he’s guilty of both hacking and hyperbole. Read the full article. Computerworld...

Facebook Now Trending As Phishing Target

Between January and March 2010, Facebook was the first social networking site to have made it into the list of top targets for phishing attacks. With 5.7% of all phishing attacks, Facebook took fourth place behind the traditional phishing targets PayPal, eBay and international bank HSBC, said...

Facebook, Yelp Instant Personalization Has Holes

A now-closed Facebook exploit took advantage of cross site scripting to inject malicious code into Yelp. Normally such an attack wouldn’t have particularly broad implications for Facebook users, but Yelp is one of the three sites that have been deemed fit for Facebook’s highly controversial Insta...

Facebook Photo Uploader 4 - ActiveX Control Buffer Overflow (Metasploit)

$Id: facebookextractiptc.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Consumer Advocates in Facebook's Face

This week, the Electronic Privacy Information Center filed a 38-page complaint against Facebook with the Federal Trade Commission, demanding it cancel new features introduced in mid-April that compel users to share more information than before. Read the full article. Computerworld...

Facebook Now Installing Undesired Adware

Already under fire for taking liberties with users’ privacy, Facebook was outted on Thursday as a distributor of unwanted applications, some of which install adware or are added to user profiles without permission. Read the full article. The Register...

Facebook Security Hole Exposes Live Chat, Private Data

The problems with security and privacy on Facebook hit a new gear today with news that a web site vulnerability exposed live chat sessions and other private user data. According to a TechCrunch Europe report, the gaping security security on the Facebook site allowed any user to view the live chat...

Trojan Disguised as Facebook Toolbar Email

A fake Facebook toolbar email hides a piece of Trojan Horse malware. Researchers warn to look at the file names for suspicious activity. Read the full article. Help Net Security...

i-Net Online Community XSS and Authentication Bypass

Exploit for php platform in category web applications ==================================================== i-Net Online Community XSS and Authentication Bypass ==================================================== XSS and Authentication bypass in i-Net Online Community site script...

i-Net Online Community - Cross-Site Scripting / Authentication Bypass

XSS and Authentication bypass in i-Net Online Community site script Vendor:http://www.i-netsolution.com/ Author:Sid3^effects aKa haRi Description : i-Net Online Community site script is an online social networking software that allows you to start your own site just like Myspace, Hi5 and Facebook...

1.5 Million Facebook Credentials For Sale

A hacker named Kirllos has a rare deal for anyone who wants to spam, steal or scam on Facebook: an unprecedented number of user accounts offered at rock-bottom prices. Read the full article. IDG News Service...