402 matches found
GAO: Federal Cybersecurity Workforce Intiatives Lack Focus
According to a new report from the Government Accountability Office, federal cybersecurity workforce initiatives are in need of better planning and coordination, particularly with regards to human capital. A study by the government’s watchdog of the seven federal agencies with the largest IT...
Twitter Snaps Up Mobile Security Firm WhisperSystems
Micro blogging site Twitter has acquired Whispersystems, a maker of mobile security software, according to a statement posted on the WhisperSystems Web site. The Bay Area startup notified its users of the acquisition in a blog post on Monday, saying that Whisper would be integrating its technolog...
[PT-2011-21] SQL injection vulnerability in OneOrZero AIMS
---------------------------------------------------------------------- PT-2011-21 Positive Technologies Security Advisory SQL injection vulnerability in OneOrZero AIMS ---------------------------------------------------------------------- ---Vulnerable software OneOrZero AIMS Version: 2.7.0 and...
[PT-2011-29] Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300
---------------------------------------------------------------------- PT-2011-29 Positive Technologies Security Advisory Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300. ---------------------------------------------------------------------- ---Vulnerable...
[PT-2011-30] Disclosure of sensitive information in D-Link DIR-300 Router
---------------------------------------------------------------------- PT-2011-30 Positive Technologies Security Advisory Disclosure of sensitive information in D-Link DIR-300 Router ---------------------------------------------------------------------- ---Vulnerable software Router management...
Interview: Crypto Legend Ron Rivest On Fixing SSL, APTs and The Future Of Security
One of the biggest talks at this year’s Black Hat Briefings was a presentation on the structural problem with digital certificate authorities by Moxie Marlinspike. The subsequent hack of Dutch certificate authority DigiNotar and a damning report on that attack only weeks later, and more recent...
Global CyberLympics - Middle East & India Championships 11-12 October at Gitex 2011 Dubai
The Europe Championships of the Global CyberLympics has just concluded! It is now time to crown new CHAMPIONS for the Middle East & India Regional ! About the Global CyberLympics: The Global CyberLympics www.cyberlympics.org is the world's first international team ethical hacking championships, a...
Emperor Hacking Team : iM4n account exposed
Emperor Hacking Team : iM4n account exposed Just a few days back, the Backbox Linux distribution based website got hacked by the Emperor Hacking Team. A few hours later, Backbox maintainers managed to reconstruct the attack step by step and found infos that proved "iM4n" as the attacker. He owns ...
FireCAT 2.0 Released - Firefox Catalog of Auditing Extensions
FireCAT 2.0 Released - Firefox Catalog of Auditing Extensions FireCAT Firefox Catalog of Auditing exTensions is a mindmap collection of the most efficient and useful Firefox extensions oriented application security auditing and assessment. FireCAT is not a replacement of other security utilities...
FireCAT 2.0 Released - Firefox Catalog of Auditing Extensions
FireCAT 2.0 Released - Firefox Catalog of Auditing Extensions FireCAT Firefox Catalog of Auditing exTensions is a mindmap collection of the most efficient and useful Firefox extensions oriented application security auditing and assessment. FireCAT is not a replacement of other security utilities...
PT-2011-20: Authorization bypass vulnerability in OneOrZero AIMS
Positive Research Center has discovered authorization bypass vulnerability in OneOrZero AIMS. Vulnerability exists due incorrect logic of authorization using $COOKIE variables - predictable session value, stored in $COOKIE'oozimsrememberme' variable. Attacker, have valid username which registered...
SAP Player 0.9 Buffer Overflow
SAP Player 0.9 .m3u universal Diret ret version Author Abhishek Sahni - abhil00703atgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.sorinara.com/sap/sap09.exe Vulnerable versio...
Veterans Affairs breaches
The Department of Veterans Affairs was hit on two separate occasions by breaches in 2006. 26.5 million Veterans and their families had their names, Social Security numbers and dates of birth lifted after a laptop was swiped from an employee’s home in May. The laptop was retrieved in August and tw...
PT-2011-13: Privilege Gaining in ManageEngine ServiceDesk Plus 8.0.0
The specialists of the Positive Research center have revealed privilege gaining vulnerability in ManageEngine ServiceDesk Plus. Insufficient privilege validation allows attackers with guest privileges account guest/guest to create a user with servicedesk administrator privileges via HTTP GET...
This Week: Coalfire Systems in the News
Its been quite a week in the world of IT security, and as experts in our field, we are often asked to comment on current trends and recent stories. Take some time to check out what we had to say recently:...
Qualys and Malware Analyser - Online malware scanning engine !
Qualys and Malware Analyser - Online malware scanning engine ! Qualys and Malware Analyser Author : Beenu Arora, recently came into an agreement which will allow Qualys to use Malware Analyser tool on its online malware scanning engine. This would enable the users to perform more comprehensive...
Pangolin 3.2.3 - Automatic SQL injection penetration testing tool New Release !
Pangolin 3.2.3 - Automatic SQL injection penetration testing tool New Release ! Pangolin is an automatic SQL injection penetration testing Pen-testing tool for Website manager or IT Security analyst. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications...
Live Hacking DVD v1.3 Beta - Download !
Live Hacking DVD v1.3 Beta - Download ! Live Hacking DVD is a new Linux distribution packed with tools and utilities for ethical hacking, penetration testing and countermeasure verification. Based on Ubuntu this 'Live CD" runs directly from the DVD and doesn't require installation on your...
McAfee study - India is fourth lowest in security adoption !
McAfee study - India is fourth lowest in security adoption ! McAfee and the Center for Strategic and International Studies CSIS revealed the findings from a global report 'In the Dark, Crucial Industries Confront Cyber attacks' that reflects the cost and impact of cyber attacks on critical...
Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)
$Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and maxlen add those parameters to the .rb file drop in appropriate directory...