Richard Clarke Highlights Overlapping Techniques in Cyber Crime, Espionage, and Warfare

The difference between cyber crime, cyber espionage, and cyber war is often just a matter of a few keystrokes, as they use the same techniques. Richard Clarke, chairman of Good Harbor Consulting, highlighted this during his keynote at the RSA Europe 2010 conference in London. Cyber Crime Cyber...

Researcher Develops Small Device to Intercept, Modify Electronic Payments

With bank fraud and attacks against financial institutions and online banking applications having turned into an epidemic, researchers, banks and other concerned parties have been looking for new ways to protect the integrity of financial transactions. A researcher at the University of Cambridge...

Saint Corporation Cross Site Scripting / HTML Injection

SAINT Corporation XSS Defacement Vulnerability Management, Assessment, Penetration Testing SAINT Corporation provides network security tools to financial, government and educational institutions around the world SAINT customers. The SAINT® vulnerability assessment tools are recognized as industry...

Visa Says Criminal Group Planning Fraud

Visa is warning financial institutions that it has received reliable intelligence that an organized criminal group plans to attempt to move large amounts of fraudulent payments through a merchant account. Read the full article. KrebsonSecurity...

Attackers Targeting .Edu Sites in SEO Poisoning Campaigns

Having mastered the art of poisoning search engine results for .com sites, attackers are now turning their attention to .edu sites, linking their keyword campaigns to educational institutions as a way of lending their malicious sites more credence in the eyes of Google. The goal of these attacks ...

'Avalanche' Crimeware Kit Fuels Phishing Attacks

A single cybercrime group called “Avalanche” was responsible for nearly one-quarter of all identity theft-related phishing attacks in the first half of 2009, according to a new report by the Anti-Phishing Work Group APWG. According to the report, phishing sites on Avalanche domains target the...

Fraudsters Trying to Capture Bank Cards at Machines

If your cash card gets eaten by the automated-teller machine, it may not end up in the hands of a bank employee. European financial institutions are seeing a sharp rise in card “trapping,” where criminals use various tricks in order to capture and retrieve a person’s ATM card for fraudulent use...

blackboard-xss.txt

//////////////////////////////////////////////////////////////////////////////// //Note: //The full version of this report in pdf format available at my blog: //http://www.secskill.wordpress.com // OR : //http://www.scribd.com/doc/2363025/Blackboard-Academic-Suite-Multiple-XSS-Vulnerabilities-...

[ELEYTT] 3SIERPIEN2007

Eleytt Research www.eleytt.com Overview: ==================== Michal Bucko, Eleytt Shyaam Sundhar R S, Eleytt Credit: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Gynvael Coldwind for providing a good example Vulnerability Table =================== 1. Firefox 2.0.0.6...

Blackboard Courseinfo v4.0 User Authentication

Apparently Courseinfo or at least the implementation I was playing with has no user authentication, meaning that anyone can force feed their own form values and Perl with merrily modify the database. So for instance running: all form input is in caps for readability...

Fortres4-analysis.txt

Fortres 4.0, An Overview. By: FrostByte S/I Date: April 11, 2000 ----------------------------- Introduction: This is my first formal document, so please excuse the crudity of the wording and grammar. This document is soley for the purpose of informing individuals of a flaw within a program herin...