Realmd Remote Code Execution Vulnerability

realmd is a DBus service for configuring kerberos and other online identities. A remote code execution vulnerability exists in realmd that could be exploited by a remote attacker to execute arbitrary code in the context of an application, which could also result in a denial of service...

openSUSE Security Update : strongswan (openSUSE-SU-2013:1333-1)

This update of strongswan fixed a denial-of-service vulnerability, that could be triggered by special XAuth usernames and EAP identities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2014-0215

The blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anonymize student identities by 1 using a screen reader or 2 reading the HTML source...

CVE-2014-0215

CVE-2014-0215 affects Moodle versions up to 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3. The vulnerability stems from the blind-marking implementation, allowing remote authenticated users to de-anonymize student identities by (1) using a screen reader or (2) reading th...

5 Best WhatsApp alternatives with end-to-end Encryption

WhatsApp acquisition may have had a negative impact on the reputation of the company, it seems many users are planning to switch the service and a few of them have already done it. In our previous article, we have mentioned that why you should switch from WhatsApp to an encrypted Chat messaging...

FreeBSD : strongswan -- multiple DoS vulnerabilities (efa663eb-8754-11e3-9a47-00163e1ed244)

strongSwan Project reports : A DoS vulnerability triggered by crafted IKEv1 fragmentation payloads was discovered in strongSwan's IKE daemon charon. All versions since 5.0.2 are affected. A DoS vulnerability and potential authorization bypass triggered by a crafted IDDERASN1DN ID payload was...

strongswan -- multiple DoS vulnerabilities

strongSwan Project reports: A DoS vulnerability triggered by crafted IKEv1 fragmentation payloads was discovered in strongSwan's IKE daemon charon. All versions since 5.0.2 are affected. A DoS vulnerability and potential authorization bypass triggered by a crafted IDDERASN1DN ID payload was...

CyberArk User Enumeration - Multiple vulnerabilities

Security Advisory - CyberArk User Enumeration - Multiple vulnerabilities ======================================================================== Summary : CyberArk Vault was found prone to multiple user enumeration/harvesting vulnerabilities. Date : 1 August 2013 Affected versions : All Vault...

White House Security Czar Howard Schmidt Retiring

Howard Schmidt, the top White House information security adviser, is retiring after more than two years on the job and several decades in security both in government and private industry. Schmidt is in his second stint as the White House security chief and he’s leaving at a time when cybersecurit...

Costin Raiu on the Timing of the Duqu Attacks

Threatpost editor Dennis Fisher and Kaspersky Lab’s Costin Raiu discuss the timing of the Duqu attacks, how that may hint at the identities of its creator and what other mysteries about the worm remain. RELATED Q&A Anatomy of the Duqu Attacks...

Feeling Heat Facebook Adds Google+ Like Privacy Controls

History has taught us that monopolies are bad for consumers. It was true in the first decades of the 20th century with Standard Oil, and in the final decade of the same century with Microsoft. Its been true, in recent years, with social networking behemoth, Facebook, also. But now, with Google’s...

Calling Mark Twain: Pseudonyms on G+

If you want to hide behind a fake name, don’t count on Google+ to be your “phony me” social network. As Threatpost has reported, the new social network doesn’t truck with fake identities – a position that’s quite similar to the one taken by Facebook. The company has also taken a hard stand on...

White House Cyber-Security Strategy Could Guard Health Care Payments !

The National Strategy for Trusted Identities in Cyberspace aims to help consumers pay for services such as health care more securely and avoid identity theft. Recent guidelines issued by the White House on cyber-security could provide an impetus for secure online bill paying in health care,...

Dept. of Commerce Unveils the National Strategy for Trusted Identities in Cyberspace

The U.S. Chamber of Commerce held a press conference this morning to unveil details surrounding a National Strategy for Trusted Identities in Cyberspace, or NSTIC as they are calling it. While the press conference was somewhat vague in terms of specifics, the initiative appears to be designed to...

Children, the New Hot Commodity in the Business of Identity Theft?

Evidently the kids are not alright. At least, that is when it comes to the increasingly lucrative identity theft black market. A study carried out by a researcher at Carnegie Mellon University’s Cylab found that as many as 10 percent were victims of identity theft – even years before they are old...

Spammers steal 400k user identities from Irish recruiter !

Job seekers' identities compromised in massive data breach. The Irish job website RecruitIreland.com was hacked last week, resulting in breached systems and the theft of the credentials of 400,000 users. The website was temporarily taken offline after the breach was discovered last Tuesday. A...

Obama wants Internet ID for Every American !!

Everyone in the UK will already be familiar with this story with the New Labour's plan for biometric identity cards. That plan, which costs billions of pounds and was later shelved by the new coalition government, will now probably never happen in the UK. Now US President Barak Obama wants to...

97% of Cyber Crimes in Gurgaon Go Unreported, Say Police

Police in India report that 97 percent of cyber crimes remain unreported in Gurgaon, a city less than 20 miles from New Delhi. Industry representatives are now collaborating with law enforcement to tackle this issue, according to Times of India. Last week, the IT and business process outsourcing...

Feds Bust Black Market ID Theft Ring

Thirty-eight defendants from across the United States have been charged with participating in a multimillion-dollar black market travel agent ring that used the stolen identities of thousands of victims to purchase airline tickets for customers. Read the full article. Dark Reading...

Government Details Vision of Trusted Identities

The White House has published a draft of a strategy designed to make the concept of trusted identities and authentication more of a reality in the digital world. Read the full article. eWEEK...