Documents in Long-Running Yahoo FISC Challenge Case Published

During a long-running secret dispute between Yahoo and government officials over the constitutionality of orders from the federal government to turn over data belonging to Yahoo users, the company was facing fines of $250,000 for refusing to comply with the order. The revelation is contained in a...

OpenSSL Heartbleed Impact, Vulnerabilities Down in 2014

On the one hand, the total number of vendor-reported vulnerabilities are down so far this year. On the other, 2014 was the year of the Heartbleed, the common name for a vulnerability in the nearly ubiquitous OpenSSL’s encryption implementation library, which IBM Security Systems characterized as...

Intelligence Insiders Disclose Bug Information With Tor

The executive director of the Tor Project told the BBC that U.S. and U.K. intelligence agencies are in an internal cat and mouse game, with one faction trying to break the anonymity network, and another one sharing bugs anonymously with Tor developers. Andrew Leman, in an extensive...

Hillary Clinton's Phone Intercepted by German intelligence Agency

After the allegations that the U.S. National Security Agency NSA not only conducted mass surveillance on German citizens, but also spied on German Chancellor Angela Merkel’s own personal mobile phone for years, surveillance has become a big issue for Germany. So big, that Germany itself started...

Oracle Business Intelligence Publisher April 2012 Critical Patch Update

According to its self-reported version number, the remote Oracle Business Intelligence Publisher install is missing the April 2012 Critical Patch Update. It is, therefore, affected by an unspecified vulnerability related to Administration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Behind the CryptoLocker Disruption

LAS VEGAS–The takedown of the GameOver Zeus malware operation in June got more than its share of attention, but it was the concurrent demolition of the CryptoLocker ransomware infrastructure that may prove to have been the most important part of the operation. That outcome was the culmination of...

WordPress Business Intelligence Lite Plugin <= 1.0.6 - Remote Code Execution

This plugin is prone to a remote code execution exploit because of ofcuploadimage.php file parameters. Solution Update the plugin...

WordPress Business Intelligence Lite Plugin <= 1.0.6 - Remote Code Execution

This plugin is prone to a remote code execution exploit because of ofcuploadimage.php file parameters. Solution Update the plugin...

Leahy Introduces Bill to End Bulk Call Record Collection

Sen. Patrick Leahy has introduced an updated, tougher version of the USA FREEDOM Act that would end the bulk collection of data under Section 215 of FISA and also would require the appointment of a panel of special legal advocates who would represent the interests of individual privacy and civil...

Georgia Tech Releases BlackForest Threat Intelligence Tool

Enterprises longing for an automated system that sends up a smoke signal that attackers may be planning a move against a particular organization or are promoting a new tool that targets companies in a specific industry may have had their wish come true. Georgia Tech Research Institute has release...

FreeBSD : i2p -- Multiple Vulnerabilities (13419364-1685-11e4-bf04-60a44c524f57)

The i2p project reports : XSS and remote execution vulnerabilities reported by Exodus Intelligence. Exodus Intelligence reports : The vulnerability we have found is able to perform remote code execution with a specially crafted payload. This payload can be customized to unmask a user and show the...

TAILS Team Recommends Workarounds for Flaw in I2P

The developers of the TAILS operating system say that users can mitigate the severity of the critical vulnerability researchers discovered in the I2P software that’s bundled with TAILS with a couple of workarounds, but there is no patch for the bug yet. The vulnerability that affects TAILS is in...

i2p -- Multiple Vulnerabilities

The i2p project reports: XSS and remote execution vulnerabilities reported by Exodus Intelligence. Exodus Intelligence reports: The vulnerability we have found is able to perform remote code execution with a specially crafted payload. This payload can be customized to unmask a user and show the...

Researchers Demonstrate Zero-Day Vulnerabilities in Tails Operating System

The critical zero-day security flaws, discovered in the privacy and security dedicated Linux-based Tails operating system by the researcher at Exodus Intelligence that could help attackers or law enforcements to de-anonymize anyone’s identity, actually lie in the I2P software that’s bundled with...

Warning — Zero-Day Vulnerabilities Identified in Tails Operating System

The critical zero-day security flaws has been discovered in the privacy and security dedicated Linux-based operating system “Tails” that could be used by an attacker to unmask your identity. Tails, which is been used and recommended by the global surveillance whistleblower Edward Snowden to remai...

Researchers Plan to Disclose Critical Bugs to TAILS Team Soon

The developers of the TAILS operating system are poised to release a new version of the software–which is designed to preserve privacy and anonymity–and it includes several security fixes. However, there are several other security issues that aren’t patched in the new release, vulnerabilities...

New Variant of Havex Malware Scans for OPC Servers at SCADA Systems

At the beginning of the month, we have reported about the new surge of a Stuxnet-like malware “Havex”, which was previously targeting organizations in the energy sector, had been used to carry out industrial espionage against a number of companies in Europe and compromised over 1,000 European and...

Oracle Business Intelligence Mobile App Designer UIXCacheResourceServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Business Intelligence Mobile App Designer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UIXCacheResourceServlet servlet. The issue lies i...

Crowd-Sourced Threat Intelligence: AlienVault Open Threat Exchange™ (OTX)

For years, the systems and networks that run our businesses have been secured by the efforts of IT and security practitioners acting on their own. We continue to deploy the latest countermeasures, always trying to keep up with adversaries. Criminal attackers, on the other hand, have shared...

DNI, Justice Department Deny Targeting Americans for Surveillance Based on Religion, Politics

The Director of National Intelligence and the Department of Justice have denied a report based on leaked documents from Edward Snowden that United States intelligence and law enforcement agencies conduct surveillance of Americans based on their ethnicity, religious affiliation or political stance...