More Apps Pulled From Android Market Over Hidden SMS Functionality

There has been another round of malicious apps discovered in the official Android Market, with this wave containing hidden functionality to send SMS messages to premium-rate numbers. The apps, which Google has pulled from the Market already, are counterfeit versions of popular games, including...

Authorities Shut Down Carder Lab in Dominican Republic

Authorities in the Dominican Republic have shut down a carder lab in the city of Santo Domingo, and have arrested a 62-year-old man who they say is one of the alleged leaders of the group. Law enforcement officials had been investigating the group for several months, according to local reports, a...

Microsoft Windows Fraudulent Digital Certificates Spoofing Vulnerability (2641690)

Microsoft Windows operating system is prone to a spoofing vulnerability. This VT has been superseded by KB2718704 which is addressed in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Fraudulent Digital Certificates Could Allow Spoofing

US-CERT is aware of public reports that DigiCert Sdn. Bhd has issued 22 certificates with weak encryption keys. This could allow an attacker to use these certificates to impersonate legitimate site owners. DigiCert Sdn. Bhd has revoked all the weak certificates that they issued. Entrust, the pare...

Another Dutch CA, KPN, Stops Issuing Certificates After Finding DDoS Tool On Server

Another Dutch certificate authority, KPN, has stopped issuing digital certificates after finding attack tools on a server in its Web infrastructures. The CA said that while it doesn’t have evidence right now that it’s CA infrastructure was compromised, it is taking the actions as a precaution. Th...

XBox Security Chief Says Account Hacks Linked To Phishing, Resale Schemes

In a pattern that is becoming more common, hackers are hijacking XBox Live accounts, then tricking them out with expansion modules and other add-ons before trying to resell them to unwitting third parties. Recent XBox Live account hijacks are most likely the product of phishing and identity theft...

Analysis: Duqu Targets Certificate Authorities

With virus researchers scrambling to decode a new piece of malware that is based on the code of the Stuxnet worm, an analyst at McAfee is speculating that the new worm, Duqu, may have been created to target certificate authorities. Writing on McAfee’s research blog, Guilherme Venere and Peter Szo...

Apple Releases iOS 5, Removes DigiNotar Certs From iPhones, iPads

Apple has released iOS 5, which includes a significant number of security updates, most notably the removal of the DigiNotar root certificates from the iOS trusted root list. The new operating system for iPhones, iPads and iPods also includes support for newer versions of the TLS protocol and...

111 Arrested for biggest identity theft and credit card fraud Case

111 Arrested for biggest identity theft and credit card fraud Case One of the biggest identity theft and credit card fraud cases in history has generated millions of dollars in losses to date. 111 individuals have been indicted in the largest identity theft takedown in U.S. history. "This is by f...

Medium: ca-certificates

Issue Overview: This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure PKI. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the...

Ubuntu Update for qt4-x11 USN-1197-6

Ubuntu Update for Linux kernel vulnerabilities USN-1197-6 OpenVAS Vulnerability Test $Id: gbubuntuUSN11976.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for qt4-x11 USN-1197-6 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

CentOS Update for xulrunner CESA-2011:1242 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu 10.04 LTS / 10.10 / 11.04 : qt4-x11 vulnerability (USN-1197-6)

USN-1197-1 and USN-1197-3 addressed an issue in Firefox and Xulrunner pertaining to the Dutch Certificate Authority DigiNotar mis-issuing fraudulent certificates. This update provides an update for Qt that blacklists the known fraudulent certificates. USN-1197-1 It was discovered that Dutch...

CentOS 4 / 5 : nspr / nss (CESA-2011:1282)

Updated nss and nspr packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Network Security Services NSS is a set of libraries designed to support the...

Ubuntu: Security Advisory (USN-1197-6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1197-6: Qt vulnerability

USN-1197-1 and USN-1197-3 addressed an issue in Firefox and Xulrunner pertaining to the Dutch Certificate Authority DigiNotar mis-issuing fraudulent certificates. This update provides an update for Qt that revokes the known fraudulent certificates. Original advisory details: USN-1197-1 It was...

Debian: Security Advisory (DSA-2309-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DigiNotar fraudulent certificates

Well known domain names certificates were issued to untrusted party...

GlobalSign Set to Resume CA Operations

GlobalSign is still in the process of completing the investigation into whether its certificate authority infrastructure was compromised, but the company on Tuesday was ready to resume some of its operations under “high-threat” conditions. The company said that it has found evidence that its main...

RHEL 4 / 5 / 6 : nss and nspr (RHSA-2011:1282)

Updated nss and nspr packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Network Security Services NSS is a set of libraries designed to support the...