Wendy Nather on the Retail Cyber Intelligence Sharing Center

Dennis Fisher talks with Wendy Nather about her new role as the research director at R-CISC, the challenges of getting companies to share threat intelligence, how smaller retails can deal with breaches and threats, and how the government can play a role in information sharing. Download:...

These Laser Beams Will Offer Free Internet to the World from the Sky

During a wide-ranging online question-and-answer session on his Facebook page Tuesday, Facebook co-founder Mark Zuckerberg predicted some wild things for Future. It includes: Telepathy Technology, the ability for humans to talk to each other with their minds. Laser Beams, used to transmit data fr...

Cisco to Buy OpenDNS Company for $635 Million

Cisco, a networking giant that offers traditional network edge protection, has announced that the company is buying cloud-based security company OpenDNS for $635 Million. Yes, OpenDNS, whose Domain Name Services DNS you might have used to avoid regional restrictions or to improve your Internet...

Cisco Acquires OpenDNS for $635 Million

Cisco continues to spend on security, today announcing its intent to acquire San Francisco-based OpenDNS for $635 million. OpenDNS’ domain name system and cloud-based security services bring threat data collected from those platforms to Cisco’s security offerings. “To build on Cisco’s advanced...

Facebook Can Recognize You Even if You Don't Show Your Face

Well, this is incredible and scary both at the same time. Forget about "facial" recognition; Facebook's newest technology is way good at identifying you in photos even without the need to see your face. The New Scientist is reporting about the Facebook's new "experimental" facial recognition...

Passive Intelligence Gathering: Just-Metadata

Just-Metadata is a tool that gathers and analyzes metadata about IP addresses. It attempts to find relationships between systems within a large dataset. Just-Metadata is a tool that can be used to gather intelligence information passively about a large number of IP addresses, and attempt to...

US Navy Soliciting Zero Days

The National Security Agency may find and purchase zero days, but that doesn’t mean it’s sharing its hoard with other government agencies such as the U.S. Navy, which apparently is in the market for some unpatched, undisclosed vulnerabilities of its own. A request for proposal posted last...

IBM Cognos Business Intelligence Open Redirect Vulnerability

IBM Cognos is an integrated business intelligence BI and planning solution. A security vulnerability exists in IBM Cognos Business Intelligence. The vulnerability is allowed to be exploited by an attacker to redirect users to kongz-controlled sites via a crafted URL and conduct phishing attacks...

IBM Cognos Business Intelligence Developer 10.2.1 Open Redirect

IBM Cognos Business Intelligence Developer 10.2.1 backURL Open Redirect Vendor: IBM Corporation Product web page: http://www.ibm.com Affected version: 10.2.1 Build 10.2.5000.267 Trial Summary: IBM Cognos Business Intelligence is a web-based, integrated business intelligence suite by IBM. It...

SOPHOS WAF JSON Filter Bypass

SECURITYLABS INTELLIGENT RESEARCH - SECURITY ADVISORY http://www.securitylabs.com.br/ ADVISORY/0115 - SOPHOS WAF WEBSERVER PROTECTION DOES NOT ANALYZE JSON DATA PRIORITY: MEDIUM TYPE: WAF Bypass 1 - About SecurityLabs Intelligent Research ----------------------------------------------- SecurityLa...

IBM Cognos Business Intelligence Developer 10.2.1 (backURL) Open Redirect

Summary IBM Cognos Business Intelligence is a web-based, integrated business intelligence suite by IBM. It provides a toolset for reporting, analysis, scorecarding, and monitoring of events and metrics. The software consists of several components to meet the different information requirements in ...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...

PT-2015-4855 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center version 10.61 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations: For Cisco Unified Intelligence Center version 10.61...

Opoint Media Intelligence 'click.php' Remote URL Redirection Vulnerability

Opoint Media Intelligence is a Web-based OPAC Online Public Access Catalog interface platform from Opoint Norway. A remote URL redirection vulnerability exists in Opoint Media Intelligence. An attacker can exploit this vulnerability by constructing a URI that contains a redirection to a malicious...

CVE-2015-0740

CVE-2015-0740 is a CSRF vulnerability in Cisco Unified Intelligence Center 10.6(1) (Bug ID CSCus28826). The issue arises from insufficient validation of user input on the web interface, enabling an unauthenticated, remote attacker to hijack the authentication of arbitrary users. Impact is describ...

CVE-2015-0740

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides a comprehensive display of report-related business data and call center data and other functions. A cross-site request forgery vulnerability exists in Cisco...

President Urged to Reject Mandatory Backdoors

One-off opposition to calls on Congress from FBI Director James Comey and NSA Director Adm. Mike Rogers to draft a legal framework that would enable law enforcement to access encrypted communication has been scattered at best. Experts have taken to their own forums to voice opposition to the...

UK Government Rewrites Laws to Let GCHQ Hack Into Computers Legally

The UK Government has quietly changed the Anti-Hacking Laws quietly that exempt GCHQ, police, and other electronic intelligence agencies from criminal prosecution for hacking into computers and mobile phones and carrying out its controversial surveillance practices. The details of the changes wer...

US House Votes to End NSA Phone Records Collection

The U.S. House of Representatives’ resounding vote on Wednesday to end the National Security Agency’s collection of phone metadata and business records shifts the Senate focus squarely onto the shoulders of Kentucky Republican Senator, Mitch McConnell. McConnell is a staunch defender of the...