On the Twitter DDoS Attacks, Apple and Microsoft Patches

Threatpost editors Ryan Naraine and Dennis Fisher discuss the DDoS attacks against Twitter, Facebook and LiveJournal and delve into Apple’s Mac OS X patch and Microsoft’s Patch Tuesday plans. SHOW NOTES: UPDATE: Twitter Suffers DoS Attack Apple Warns of Mac Attack Risk via Image Files Microsoft...

UPDATE: Twitter Suffers DoS Attack

Twitter was the target of a sustained denial-of-service attack Thursday morning, an attack that took the site offline for several hours. Twitter’s service went down around 9 a.m. EDT and was back up around noon, while Facebook’s site also experienced problems that may have been the result of a Do...

More Privacy Controls Coming to Facebook

From The New York Times Riva Richmond Facebook launched a beta test today that foreshadows new privacy controls coming to “Publisher” – the box at the top of your home and profile pages where you add content. The changes will let you easily specify who among your friends gets to see that specific...

Facebook Scam: I'm Stranded In London. Send Money!

From DarkReading Gadi Evron Facebook users are facing a new threat, 419 scams in chat form, masquerading as friends. I know because it just happened to me think: 419 scam. An “acquaintance” sent me a message using Facebook chat that said, “Hi.” Easy enough. I replied in kind. Then she told me a...

Simplistic Facebook phishing attack seeks userIDs and passwords only

From The Last Watchdog Byron Acohido There’s power in simplicity. That’s the upshot of the phishing attack now bombarding Facebook users. Many FB’ers are receiving messages titled, simply, “Hello.” The body of the text contains a brief imperative sentence: “Check areps.at” or “Check bests.at”...

Identity thieves attack Facebook users

Identity thieves are currently launching a massive attack on Facebook techcrunch.com, using fake log-in pages to hijack usernames and passwords. The attackers are using Facebook’s mail system to send a one-line message luring users to “fbaction.net,” a site that clones the social networking site’...

Public search engines mine private Facebook details

From DarkReading Kelly Jackson Higgins Another reason to be careful what you post on Facebook: All it takes is a simple Google search, and phishers and marketers can glean a treasure trove of private information darkreading.com based on relationships among Facebook “friends,” according to new...

Microsoft teams with Facebook to halt Koobface worm

From Facebook, by Jeff Williams, Microsoft When the Koobface worm hit Facebook users last year, the company’s security team scrambled to help affected users reset their accounts and avoid new infections. But the worm has continued to crop up periodically since then, and so the anti-malware team a...

Facebook doesn't believe it's really Kevin Mitnick

In an ironic twist, Kevin Mitnick, a social engineering master who went to jail for impersonating others to get information to access computer networks without authorization, couldn’t access his own Facebook account for weeks because administrators at the social networking site didn’t believe he...

Koobface worm makes a triumphant return

A new version of the Koobface worm is making the rounds of Facebook this week, this time in the guise of an invitation to view a fake YouTube video. The link takes users to a page asking them to install an updated version of the Flash player, which is instead a piece of malware. As Brian Krebs at...

Beware these Facebook scams

Facebook and other social networks can be downright unfriendly when it comes to scam attempts. PC World‘s JR Raphael has put together five attack scenarios and information on how to protect yourself and your Facebook friends...

Details Facebook the latest high-risk XSS security vulnerability-vulnerability warning-the black bar safety net

Recently, Facebook discovered high-riskXSSto security vulnerabilities, causing its users to suffer huge threat. This article will for these vulnerabilities are published in detail. Facebook in 2 0 0 8 year 1 2 on 1 5 December 2 0 0 9 years 1 months 4 days was traced to a series of high-riskXSSa...

CVE-2008-5711

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value...

Heap overflow

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value...

CVE-2008-5711

CVE-2008-5711 is a heap-based buffer overflow in the Facebook Photo Uploader ActiveX control (ImageUploader4.ocx) prior to 5.0.14.0, with remote code execution possible via overly long input to properties such as FileMask or ExtractIptc/ExtractExif. Public references indicate multiple buffer over...

CVE-2008-5711

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value...

Facebook Cross Site Scripting

Found in August, I tried to alert facebook as quickly as was possible - however I received no further correspondence to my communications. At time of writing, it was possible to exploit both Firefox 3 and IE 7 - by simply using an IFRAME or even an object tag. Dependant on the browser target This...

Facebook Newsroom 'includes/home.php'远程文件包含漏洞

BUGTRAQ ID: 30185 CNCAN ID：CNCAN-2008071405 Facebook Newsroom CMS是一款内容管理程序。 Facebook Newsroom CMS不正确处理用户提交的WEB参数，远程攻击者可以利用漏洞以应用程序权限执行任意PHP代码。 问题是'home.php'脚本对用户提交给'path'参数缺少过滤，构建特殊的文件作为包含参数，可导致以应用程序权限执行任意PHP代码。 NewsCloud Facebook Newsroom CMS 0.5.0 Beta 1 目前没有解决方案提供：...

Facebook Newsroom CMS 0.5.0 Beta 1 Remote File Inclusion Vulnerability

No description provided by source. Facebook Newsroom Application Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download :...

Facebook Newsroom CMS 0.5.0 Beta 1 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Facebook Newsroom CMS 0.5.0 Beta 1 Remote File Inclusion Vulnerability ====================================================================== Facebook Newsroom...