Microsoft Now Using IP Address to Map Malware Infections

Microsoft has a new way of determining the geolocation of systems infected with malware, and it had subtle but relevant effects on the 11th volume of the Microsoft Security Intelligence Report. It’s a novel concept, instead of relying on an administrator-specified setting that anyone with hands a...

Duqu malware was created to spy on Iran's nuclear program

Duqu malware was created to spy on Iran's nuclear program A Report by Kaspersky Lab Expert, Ryan Naraine says that the DUQU malware was created to spy on Iran's nuclear program. IrCERT Iran's Computer Emergency Response Team Duqu is an upgraded version of "Stars". Back in April this year, The...

Duqu malware was created to spy on Iran's nuclear program

Duqu malware was created to spy on Iran's nuclear program A Report by Kaspersky Lab Expert, Ryan Naraine says that the DUQU malware was created to spy on Iran's nuclear program. IrCERT Iran's Computer Emergency Response Team Duqu is an upgraded version of "Stars". Back in April this year, The...

CIA Admits It Monitors, Analyzes Facebook, Twitter

The Associated Press published a report today detailing, for the first time, a unit within the CIA, referring to itself as the ‘vengeful librarians,’ that is responsible for monitoring the vast and various social networks, local and international news, radio, and television, Internet chat rooms,...

The Changing Threat Landscape

Join Dennis Fisher, Threatpost editor-in-chief, and his guests, Josh Corman, Director Security Intelligence Akamai, and Gene Kim, Founder / Former CTO Tripwire, and Author, “Visible Ops,” as they discuss the changing threat landscape and how technology plays a pivotal role in the security...

CVE-2011-3510

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security...

Duqu - Next Major Cyber Weapon like Stuxnet

Duqu - Next Major Cyber Weapon like Stuxnet The Stuxnet cyberworm could soon be modified to attack vital industrial facilities in the US and abroad, cybersecurity experts warned Wednesday at a Senate hearing. Computer security companies agree that these virus is unprecedented and it means the daw...

Duqu - Next Major Cyber Weapon like Stuxnet

Duqu - Next Major Cyber Weapon like Stuxnet The Stuxnet cyberworm could soon be modified to attack vital industrial facilities in the US and abroad, cybersecurity experts warned Wednesday at a Senate hearing. Computer security companies agree that these virus is unprecedented and it means the daw...

Massachusetts Inaugurates New Cyber Security Center

Hundreds of business leaders and academics joined Massachusetts Governor Deval Patrick and Attorney General Martha Coakley to launch the state’s Advanced Cyber Security Center ACSC, one of the first of its kind in the nation. Speaking at the local headquarters of the MITRE Corporation, Patrick an...

NeXpose 5.0 vulnerability management solution Released by Rapid7

NeXpose 5.0 vulnerability management solution Released by Rapid7 Nexpose proactively supports the entire vulnerability management lifecycle, including discovery, detection, verification, risk classification, impact analysis, reporting and mitigation. This gives organizations immediate insight int...

Intelligence and National Security Alliance (INSA) hacked

Intelligence and National Security Alliance INSA hacked On Wednesday, 48 hours after releasing a policy paper on cybersecurity, the top trade association for intelligence contractors got a first-hand lesson on the subject: they discovered that their website was hacked. Cryptome, a site affiliated...

Apache HTTPd Range Header Denial of Service Vulnerability

The Apache HTTPd server contains a denial of service vulnerability when it handles multiple, overlapping ranges. Multiple Cisco products may be affected by this vulnerability. Mitigations that can be deployed on Cisco devices within the network are available in the Cisco Applied Intelligence...

Harnig Botnet Returns, But Without Rustock

The takedown of the Rustock botnet earlier this year has had ripple effects throughout the malware and spam ecosystems, with some large reductions in spam levels and attacks. However, some of the components of the malware machine driven by Rustock are beginning to come back online now. Researcher...

Richard Thieme Got Dark

Richard Thieme, the Obi-Wan Kenobi of the security community holds forth during his Black Hat talk: “Staring into the Abyss: The Dark Side of Security and Professional Intelligence.” Thieme, an IT security consultant and published author, had a tough message, telling them that the world is “grey...

SIG Sauer - Security Intelligence Group Hacked by LulzaMac

SIG Sauer - Security Intelligence Group Hacked by LulzaMac Nothing is Secure on Internet Now. SIGARMS Academy website Hacked by hacker "LulzaMac". SIGARMS Academy is committed to providing safe, responsible and accurate firearms training and courses which are nationally and internationally...

Italian Intelligence agency CNAIPIC steals sensitive data from Indian Embassy

Italian Intelligence Agency CNAIPIC steals sensitive data from Indian Embassy Sensitive defence information appears to have been stolen from the Indian embassy here by an Italian intelligence agency during the past two years. If the documents released by Anonymous Hackers are to be believed, the...

Italian Intelligence agency CNAIPIC steals sensitive data from Indian Embassy

Italian Intelligence Agency CNAIPIC steals sensitive data from Indian Embassy Sensitive defence information appears to have been stolen from the Indian embassy here by an Italian intelligence agency during the past two years. If the documents released by Anonymous Hackers are to be believed, the...

Oracle Warehouse Builder SQL Injection

Added: 08/01/2011 CVE: CVE-2011-0799 BID: 47431 OSVDB: 71956 Background Oracle Warehouse Builder OWB is an ETL tool produced by Oracle that offers a graphical environment to build, manage and maintain data integration processes in business intelligence systems. Problem A SQL injection vulnerabili...

Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation

Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation Rapid7 launched Metasploit Pro 4.0, a penetration testing solution that provides security professionals with a better view of their threat landscape by integrating with more than a dozen vulnerability management...