GlobalSign Investigation Continues, Some CA Services to Return Monday

UPDATE: A day after suspending the issuance of SSL certificates while it investigates claims that its certificate authority infrastructure was compromised, GlobalSign said that the investigation is still ongoing but that it planned to begin bringing some of its services back online on Monday...

GlobalSign Stops Issuing Certs As It Investigates Claims of Compromise

GlobalSign, a major certificate authority that was named by the hacker who has claimed credit for the DigiNotar hack as another CA he has compromised, has stopped issuing certificates for the time being while it investigates the claims and determines whether its network has in fact been...

Evidence of Infected SCADA Systems Washes Up in Support Forums

While security experts and lawmakers debate the seriousness of cyber threats to critical infrastructure, one security researcher says that evidence that viruses and spyware already have access to industrial control systems is hiding in plain sight: on Web based user support forums. Close to a doz...

Report: Web Applications Attacked Every Two Minutes

Web applications are attacked every two minutes and at some times can experience upwards to 25,000 attacks an hour according to a report published by security firm Imperva today. As part of its continuing Hacker Intelligence initiative, Imperva’s Application Defense Center ADC released their Web...

Wired Unpacks Stuxnet Mystery

You might think that everything that needs to be written on Stuxnet already has. After all, Threatpost has spilled virtual column inches on the stealthy worm, which targeted Siemens Simatic S7 programmable logic controllers. That’s in addition to posts by the likes of Symantec, McAfee and the...

Barr Unbowed: Former HBGary Federal CEO says We Need to Learn from LulzSec

This is the first in a two-part interview with Aaron Barr, the former CEO of HBGary Federal Each of us has made mistakes in our lives – woeful errors that we’ve been forced to learn from at great personal cost. Blessedly, those painful experiences are typically private affairs. Tears are spilled...

Company Offers Tool To Break iPhone Encryption

ElcomSoft, a Russian security firm, claims that a new encryption cracking tool can decode data encrypted on mobile devices running Apple’s iOS operating system. Elcomsoft says it has developed the first ever commercially available password and encryption cracking tool. The company has made a phon...

SMS Trojan Found in Several Android Apps

Google has removed a group of mobile phone applications from its Android Market after it was discovered that the applications contained code that could be used to send SMS Short Message Service spam. Google’s action came after a security firm in Taiwan published a security alert about the apps on...

Report: RSA Hack Part Of Larger Operation

A sophisticated attack against RSA, the security division of EMC, shares characteristics with similar attacks against Western firms, according to the security blog Krebsonsecurity. Despite RSA’s claims that it was the victim of a unique and targeted attack, research into the incident by reporter...

Sony: Hackers Nabbed Info Of 70 Million Members

Sony admitted that hackers broke into its PlayStation Network online gaming network made off with the personal information of more than 77 million members in what would be one of the largest reported data breaches in history. A message posted on the PlayStation Network Web site informed customers...

Phisher Hooks Condé Nast, Reels in $8 Million

Condé Nast was baited in a phishing scam that netted a Texas man nearly $8 million in company funds, according to published reports. According to a complaint filed in Manhattan District Court by the U.S. Attorney’s Office last week, the publishing giant was fooled by a single phishing e-mail sent...

Google Buys Security Firm Zynamics

Google has acquired a small German security start-up called Zynamics, which is well-known in the security industry for its reverse-engineering and analysis tools. Zynamics announced the deal on its corporate blog on Tuesday, saying little other than that the company had been acquired by Google. T...

HBGary Federal's Aaron Barr Resigns After being Exposed by Anonymous Hackers !

HBGary Federal's Aaron Barr Resigns After being Exposed by Anonymous Hackers ! Aaron Barr's time in the security industry's spotlight may have finally, mercifully ended. On Monday, the much-tormented chief executive of HBGary Federal announced that he has resigned from his position, three weeks...

OddJob Trojan Piggybacks On Legitimate eBanking Sessions

A new Trojan leads online banking customer into thinking they have logged out of their sessions when in fact they remain logged in. Discovered by Trusteer researchers, this completely new piece of malware represents the evolution of online attacks in the ways in which it integrates new and old...

XYCMS law firm built Station system V1. 0 multi-flaw-vulnerability warning-the black bar safety net

XYCMS law firm built Station system V1. 0 http://down.admin5.com/asp/71909.html B0mbErM@n ; 2011-2-18 eWebEditor http://127.0.0.1:99/system/xyeWebEditor/admin/login.asp User=XY2010 Pass=XY2010 XSS http://127.0.0.1:99/online.asp Qq:XSS Mail:XSS Photo:XSS Contents:XSS Eval...

Lessons to learn from the HBGary Federal hack !

The Anonymous attack on HBGary may have amused some who enjoyed the sight of a security firm left embarrassed and exposed, but it should send a shiver down the spine of any IT administrator responsible for securing their own company. Because can you honestly put your hand on your heart and say a...

The inside story of the HBGary hack by Anonymous Hackers !

It has been an embarrassing week for security firm HBGary and its HBGary Federal offshoot. HBGary Federal CEO Aaron Barr thought he had unmasked the hacker hordes of Anonymous and was preparing to name and shame those responsible for co-ordinating the group's actions, including the...

Huwshimi.com's Fail Ninja

It’s always so easy to blame the ninjas, isn’t it? Still, we’ve gotta give props to the anime-inspired custom 404 error page for this Sydney, Australia based Web design firm, which claims that “A ninja stole this page.” Visitors are encouraged to “return when the moon has friends and the fox is...

Spammers Moving to Social Networks

Its not just Wall Street giants like Goldman Sachs that see dollar signs hovering over Facebook. Spammers are hopping on the social networking giant to fool users, according to a report from security firm Cloudmark. Spammers are using botnets to send a barrage of malicious e-mail spam that mimic...

Kerala cyber police closing in on software theft culprits !

Thiruvananthapuram, Jan 5 IANS The cyber wing of the Kerala Police Wednesday claimed it had got vital clues about the theft of software source codes and intellectual property data from a Kochi-based IT company. The investigation is progressing on the right track, V.K. Ajith Mohan of the police...