DHS Investing $40 Million for Cybersecurity Research !

Insider threats, botnets and malware, and assay to abutment the Comprehensive Civic Cyber Initiative CNCI are amid areas of cybersecurity advance the Department of Homeland Aegis DHS will accomplish in budgetary year 2011. The DHS Science and Technology Homeland Aegis Advanced Assay Projects Bure...

DHS: $40m To Research Next Big Thing in Cyber Security

The U.S. Department of Homeland Security issued a call for proposals this week in a $40m program to encourage research and development in a wide range of topics related to cyber security: from designing more resilient software, to alternatives to passwords and CAPTCHA technology to prevent...

On Insider Threats

Even before PFC Bradley Manning made off with hundreds of thousands of pages of classified military and diplomatic documents, malicious insiders were a persistent and growing problem in the halls of government, The Pentagon and inside companies large and small. According to Verizon’s 2010 Data...

WikiLeaks Prompts Federal Agencies to Assess Infosec Programs for Sensitive Data

In response to the embarrassment and perceived threat resulting from the WikiLeaks disclosures in recent months, the Office of Management and Budget has issued a hefty memo with pages of questions that federal agencies must use to conduct an initial assessment of their programs to handle and...

WikiLeaks and Corporate Security: Lessons from Recent Data Leaks

WikiLeaks' release of secret government communications should serve as a warning to the nation's biggest companies: You're next. Computer experts have warned for years about the threat posed by disgruntled insiders and poorly crafted security policies that give too much access to confidential dat...

Top 10 IT Security Trends for 2011

The crystal ball gazing has started early this year. Typically, tech prediction pieces emerge after Christmas, but the first 'security trends for 2011' missive has already dropped into my inbox. So, what does the somewhat premature Imperva Application Defense Center think will worry us the most o...

DARPA Project CINDER Targets Insider Threats

The U.S. military is looking for new ways to identify malicious insiders and stop them from operating from within government and military networks, which it assumes have already been compromised. The Defense Advanced Research Projects Agency DARPAhttp://www.darpa.mil/ this week issued a call for...

Thumb Drive Attack in 2008 Compromised Classified U.S. Networks

A senior official at the Department of Defense is talking publicly about a 2008 security breach that he claims compromised classified intelligence networks used by the U.S. military. Classified networks used by the U.S. military were the target of a successful attack by a foreign nation in 2008,...

With the Database, Sometimes it's the Little Things That Matter

Most users are aware of the risks connected to the default, blank and weak username/password combinations associated with most applications. Yet it amazes the research community that many companies still don’t heed the following simple advice: 1 Don’t use easily guessed passwords. 2 Change the...

Social Engineering Attacks Prove Failure of User Education

BOSTON — A prominent security consultant is urging a rethink of the way businesses handle user education and awareness, warning that the way attackers have latched on to social engineering techniques makes it difficult to cope with hacker attacks. During a presentation at the SOURCE conference...

Insider exposure! Hack the online voting make a mockery of-vulnerability warning-the black bar safety net

Now a variety of picks in Vogue, in the audition stage, organized people tend to use the network to vote the way to gather popularity. Originally, the network to vote the number of votes of the statistics and the display is completely controlled by software, without human intervention, to a certa...

Broiler get an insider secret of the use of Trojans and social engineering-vulnerability warning-the black bar safety net

For a skilled attacker to say, the chickens get the tactics have varied. However, with all the others, the attacker may also like those that is simple and easy to obtain broiler method. For now, the use of Trojans and social engineering is an attacker who favorite used to obtain broilers in a maj...

Verizon Data Breach Report Reveals Depth of Breach Problem

Last night, the fine folks at Verizon posted the 2009 version of the DBIR. I haven’t had time to do a full deep dive yet, but I thought I’d share my initial notes in the meantime. Stuff in italics is from the DBIR, regular text is me: 81 percent of organizations subject to PCI DSS had not been...

Study: Businesses still don't recognize insider threat

From DarkReading Tim Wilson Despite recent headlines and instances of insider attacks, many companies still are not acting to protect themselves darkreading.com from insider threats, according to two new analyst reports. Although 88 percent of the respondents to a Forrester Research study said th...

In weak economy, IT pros could turn to e-crime

By Jeremy Kirk, IDG News Service Enterprises increasingly feel their employees will be more willing to steal data or sell insider knowledge due to the poor economy, according to an annual security survey infoworld.com conducted by KPMG. Sixty-six percent of respondents felt that out-of-work IT...

Unfixed XSS vulnerability at www.insider-seo.com

Security researcher doublecheck, has submitted on 26/07/2008 a cross-site-scripting XSS vulnerability affecting www.insider-seo.com, which at the time of submission ranked 950014 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is...

Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities (Aruba Advisory ID: AID-051408)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities Aruba Advisory ID: AID-051408 Revision: 1.0 For Public Release on 05/14/2008...

Insider revealed the thunder catch the chicken to achieve a method and prevention tips-vulnerability warning-the black bar safety net

The world's largest sorrow, than they are to harm you, unbeknownst to you also for him too beholden to. Such absurd things, only in the TV series appear in? You ever think of yourself will become like that? If you don't believe, after reading this article the quasi surprise you! Thundercatch the...

Emule 0.42e Remote Denial Of Service Exploit

!/usr/bin/perl system"cls"; Emule 0.42e Remote Denial Of Service Exploit Coded by Rafel Ivgi, The-Insider: http://theinsider.deep-ice.com usage: perl emule042e.pl host port how many times use IO::Socket; my $host = $ARGV0; my $port = $ARGV1; my $times = $ARGV2; if $host unless$port $port="4711";...

Worldspan DoS

Vendor: Worldspan www.worldspan.com Software: Worldspan for Windows 4.1 Gateway Problem: Invalid packets sent to gateway crash system Fix: No response from vendor. All systems should be firewalled from outsiders but there is no protection from insiders. Overview: Worldspan is one of the leading...