Weaknesses in CFAA language exposed at Black Hat

The Computer Fraud and Abuse Act CFAA can be unsettling even to the most stalwart security researcher. The law, enacted in 1986 and revisited several times since, is still littered with loopholes and nuances that can be leveraged by a prosecutor in a criminal case, or turned against a white hat i...

Threat Outbreak Alert: Fake Account Credential Information Email Messages on July 23, 2013

Medium Alert ID: 30182 First Published: 2013 July 23 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account credential information for the recipient. The text in the email message attempts to convince the...

College Student Gets Year in Prison for Wire Fraud in Tampering With Student Election

A former Cal State San Marcos student was sentenced to a year in prison this week for wire fraud and other charges related to election tampering by using keystroke loggers to grab student credentials and then vote for himself. Matthew Weaver, 22, of Huntington Beach, Calif., stole almost 750...

Threat Outbreak Alert: Fake Tax Documentation Email Messages on August 27, 2013

Medium Alert ID: 30103 First Published: 2013 July 16 17:42 GMT Last Updated: 2013 August 27 13:05 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain tax documentation for the recipient. The text in the email message attempt...

Threat Outbreak Alert: Fake Billing Statement Email Messages on July 12, 2013

Medium Alert ID: 30065 First Published: 2013 July 15 12:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an electronic billing statement for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Fraud Complaint Information Email Messages on July 3, 2013

Medium Alert ID: 29937 First Published: 2013 July 3 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a complaint case claim notification for the recipient. The text in the email message attempts to convince the...

Taobao fraud and a module XSS vulnerabilities can steal user cookies-vulnerability warning-the black bar safety net

First let's look at TaobaoXSSvulnerability ! Taobao decoration can invoke a third-party module, this means that this third party template if there is a vulnerability even being invaded are likely implicated in Taobao shop! Edit the third party Module, added toXSScode, and then the shop calls ! Op...

Citadel Banking Malaware Variant Delivers Localized Content

With builders for the Citadel Trojan freely available on any number of underground criminal forums, it’s no surprise to see some legs left in the malware despite a takedown of more than 1,400 Citadel botnets less than a month ago by U.S. law enforcement and Microsoft. A new variant has popped up ...

CareerBuilder man in the browser attack

No one can say that hackers don’t have a sense of irony. In search of money mules, attackers behind a variant of the Zeus Trojan have configured the malware to activate when users visit careerbuilder.com with code that redirects victims to an advertisement for a mule-recruitment website...

FBI seized Citadel banking Trojan servers

Microsoft and the FBI have taken down a botnet that controlled millions of infected PCs, which was responsible for massive bank fraud. Botnets are networks of computers infected with viruses that let them be controlled by hackers. The outfit runs the Citadel Botnets and is believed to have stolen...

FBI seized Citadel banking Trojan servers

Microsoft and the FBI have taken down a botnet that controlled millions of infected PCs, which was responsible for massive bank fraud. Botnets are networks of computers infected with viruses that let them be controlled by hackers. The outfit runs the Citadel Botnets and is believed to have stolen...

26 Million Veterans data breached by eight state sponsored organizations

Since 2010, foreign state sponsored organizations have repeatedly compromised an unencrypted database maintained by the Veterans Affairs Department that contains personally identifiable information on roughly 26 million veterans. Including at least eight foreign-sponsored organizations, mostly...

26 Million Veterans data breached by eight state sponsored organizations

Since 2010, foreign state sponsored organizations have repeatedly compromised an unencrypted database maintained by the Veterans Affairs Department that contains personally identifiable information on roughly 26 million veterans. Including at least eight foreign-sponsored organizations, mostly...

Peer-to-Peer Botnet Takedowns a Challenge

The FBI, Justice Department and technology companies have had success shutting down botnets that rely on a centralized infrastructure and command and control servers to communicate with bots, steal data or send malicious commands. Peer-to-peer botnets, however, have proven more difficult to take...

LulzSec hacker Jeremy Hammond pleads guilty to Stratfor attack, could face 10 years in prison

A computer hacker linked to the group known as Anonymous and LulzSec pleaded guilty on Tuesday to breaking into Stratfor, a global intelligence company. Hammond, 28, was arrested last March and charged with hacking into the computers of Stratfor. Jeremy Hammond and other members of AntiSec, stole...

LulzSec hacker Jeremy Hammond pleads guilty to Stratfor attack, could face 10 years in prison

A computer hacker linked to the group known as Anonymous and LulzSec pleaded guilty on Tuesday to breaking into Stratfor, a global intelligence company. Hammond, 28, was arrested last March and charged with hacking into the computers of Stratfor. Jeremy Hammond and other members of AntiSec, stole...

Thousands of DHS Personnel Notified of Data Breach

The Department of Homeland Security this week began notifying up to tens of thousands of employees, contractors and others with a DHS security clearance that their personal data may be at risk. The notifications began on Monday, according to an online statement, after officials learned of a...

Reporters legally threatened after revealing vulnerability that exposes sensitive data of 170,000 customers

For millions of low income families, the federal government's Lifeline program offers affordable phone service. But an online security lapse has exposed tens of thousands of them to an increased risk of identity theft, after their Social Security numbers, birth dates and other pieces of highly...

Click-Fraud Falls as Microsoft Fights ZeroAccess Malware

Microsoft said actions it has taken to stymie the ZeroAccess malware have resulted in a drop off in click-fraud traffic. Microsoft Malware Protection Center researchers Tommy Blizard and Nikola Livic made the observation based on a precipitous drop-off in click-traffic on Microsoft’s extended...

Hacker jailed for ATM skimming invented ATM security scheme

A Romanian man serving a five-year jail sentence in Romania for his involvement in an ATM skimming scheme, has developed a device designed to protect ATMs from such attacks. 33-year-old Valentin Boanta who is being detained in a prison from Vaslui, Romania, after he was convicted on charges of ba...