Poison Ivy RAT Spotted in Three New China Attacks

The Poison Ivy remote access Trojan may be old, but it’s not losing favor with nation states that continue to make it the center piece of targeted attacks. Three groups of hackers, reportedly all with ties to China and possibly related in terms of their funding and training, are currently managin...

EMLOG offline writing high-risk security vulnerabilities-vulnerability warning-the black bar safety net

You emlog user, EMLOG Development Group today confirmed EMLOG 5.1 series of versions exist offline writing interface permission validation is not strict, high-risk vulnerabilities. The vulnerability can lead an attacker can bypass the system user authentication mechanism through the offline writi...

Palestinian Hacker posted vulnerability details on Mark Zuckerberg's Timeline

A Palestinian Web Developer and Hacker, 'Khalil Shreateh' found an interesting vulnerability in Facebook, that allows hacker to bypass the Privacy settings to make a post on anyone's Timeline / Wall. He was forced to post vulnerability details on Mark Zuckerberg Facebook Founder Timeline to prove...

Palestinian Hacker posted vulnerability details on Mark Zuckerberg’s Timeline

A Palestinian Web Developer and Hacker, 'Khalil Shreateh' found an interesting vulnerability in Facebook, that allows hacker to bypass the Privacy settings to make a post on anyone's Timeline / Wall. He was forced to post vulnerability details on Mark Zuckerberg Facebook Founder Timeline to prove...

Syrian Electronic Army Hacks the Outbrain service; Washington Post, CNN suffers

After months of disrupting the Twitter accounts of major U.S. media outlets, The Syrian Electronic Army Leader Says that they won't Stop hacking. Just two days before SocialFlow, a social media optimization platform was hacked by Syrian Electronic Army and readers on certain stories being...

Syrian Electronic Army Hacks the Outbrain service; Washington Post, CNN suffers

After months of disrupting the Twitter accounts of major U.S. media outlets, The Syrian Electronic Army Leader Says that they won’t Stop hacking. Just two days before SocialFlow, a social media optimization platform was hacked by Syrian Electronic Army and readers on certain stories being...

Pakistani hackers hit Indian Eastern Railways Website just before Independence day

Just four days before the Independence day, The Pakistani hacker known as 'MindCracker' from Pakistan Cyber Army team hacked into the Indian Eastern Railways website and deface some internal pages, as shown in the screenshot taken by us few hours before. At the time of reporting, website...

Aumlib, Ixeshe Malware Updated in Targeted China Attacks

After a quiet period, the state-sponsored hacker group blamed for attacks on the New York Times late last year has begun a number of new campaigns that feature updated versions of malware used in attacks going back to 2009. Researchers at FireEye said the group, identified as APT 12 by forensics...

LulzSec hacker sentenced to 1 year jail & ordered to pay $605,663 in restitution

A second member of hacking group LulzSec - Raynaldo Rivera, 21, of Tempe, Arizona, has been sentenced to 1 year in prison, 13 months of house arrest, and 1,000 hours of community service for hacking into the computers of Sony Pictures Entertainment. Raynaldo who went by Internet names "neuron" wa...

Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla

Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...

LulzSec hacker sentenced to 1 year jail & ordered to pay $605,663 in restitution

A second member of hacking group LulzSec - Raynaldo Rivera, 21, of Tempe, Arizona, has been sentenced to 1 year in prison, 13 months of house arrest, and 1,000 hours of community service for hacking into the computers of Sony Pictures Entertainment. Raynaldo who went by Internet names ”neuron” wa...

Tribq CMS 5.2.7 Cross Site Request Forgery

Exploit Title: Tribq CMS CSRF - Adding/Editing new administrator account Date: 2013 8 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://sourceforge.net/projects/tribiq/ Tested on: Linux & Windows, PH...

Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla

Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...

Questions Linger About New Linux 'Hand of Thief' Trojan

It looks like cybercriminals will soon be able to add yet another Trojan to their hacking repertoire, the Hand of Thief banking malware that targets Linux machines. Currently being sold on the Russian black market, Hand of Thief is fetching $2,000 USD €1,500 EUR but could be poised to run a cool...

Windows 8 Phone Authentication Protocol Weakness

Microsoft issued a security advisory on Sunday, warning of a potential data leakage issue for Windows Phone users connecting to Wi-Fi hotspots. Hackers love to set traps for wireless users promising free Wi-Fi in airports, restaurants and other public areas. Once a mobile device connects to the...

How to Fail at Black Hat

Every summer, the hacker intelligentsia descends on Las Vegas like a swarm of thirsty locusts that spends seven days chasing free drinks and avoiding sunlight at all costs. Black Hat and DEF CON week can be an overwhelming and confusing experience, especially for the uninitiated or agoraphobic. B...

Ubuntu Forums hacked; 2 million user's personal Information compromised

Ubuntuforums.org, The popular Ubuntu Forums site, has posted a message on its index page, informing its near 2 million users that it has suffered a serious security breach. "There has been a security breach on the Ubuntu Forums," reads the page. The site was defaced by hacker with Twitter handle...

Mixed Reaction to DEF CON Ban of Feds

For over two decades DEF CON has been an open nexus of hacker culture, a place where seasoned pros, hackers, academics, and feds can meet, share ideas and party on neutral territory. Our community operates in the spirit of openness, verified trust, and mutual respect. When it comes to sharing and...

Iceland parliament member fails to Grant Citizenship to Whistleblower Edward Snowden

Members of Iceland's Pirate Party have introduced a proposal in Parliament that would grant immediate citizenship to National Security Agency Whistleblower Edward Snowden. The government is however not keen on helping Snowden. The bill to grant Snowden citizenship received limited support Thursda...

Iceland parliament member fails to Grant Citizenship to Whistleblower Edward Snowden

Members of Iceland's Pirate Party have introduced a proposal in Parliament that would grant immediate citizenship to National Security Agency Whistleblower Edward Snowden. The government is however not keen on helping Snowden. The bill to grant Snowden citizenship received limited support Thursda...