ncleg.net XSS vulnerability

Vulnerable URL: http://www.ncleg.net/gascripts/EnactedLegislation/ELSearch.asp?bPrintable=true=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=confirm'OPENBUGBOUNTY'%20//%3E%3CSvg%3E=piedmont=Law Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

Lack of Security Talent Afflicts Health Care

BOSTON—Reality has bitten healthcare hard in the last year, with dire vulnerabilities in medical devices bubbling to the surface, malware infections affecting patient care at a number of facilities, and the realization that nowhere is the lack of information security professionals more pressing...

Active Defense Bill Raises Concerns Of Potential Consequences

A discussion draft of a bill proposed on Friday by Rep. Tom Graves R-GA that would exclude organizations from prosecution for hacking back is already stirring up some concerns about potential unintended consequences. The Active Cyber Defense Certainty Act would exempt victims of computer crimes...

Congressional Group Says Encryption Backdoors Are a Bad Idea

The Congressional Encryption Working Group released its year-end report that concluded that encryption backdoors do more harm than good. The 12-page report said that “any measure that weakens encryption works against the national interest.” The bipartisan congressional panel recommended that the...

China Passes Cybersecurity Law to Tighten its Control over the Internet

China has long been known for its strict censorship policies, which has already made it difficult for foreign companies to do business in the world's most populous country of more than 1.35 Billion people. Now, the Chinese government has approved a broad new controversial cybersecurity regulation...

Tor Joins Movement Against Expanding Hacking Powers

The Tor Project on Monday made a public plea for others to speak out against the proposed amendments to Rule 41 of the Federal Rules of Criminal Procedure, which are taking effect Dec. 1 barring a Congressional injunction. The amendments would expand the Department of Justice’s ability to hack...

Car Hackers Could Face Life In Prison. That's Insane!

Yes, you heard it right. You can now end up your whole life behind bars if you intentionally hack into a vehicle's electronic system or exploit its internal flaws. Car Hacking is a hot topic. Today, many automobiles companies are offering cars that run mostly on the drive-by-wire system, which...

On Badlock, Encryption Legislation, and Cryptoworms

Mike Mimoso and Chris Brook recap the week in news, including the Badlock bust, encryption legislation Burr-Feinstein, the California decryption bill and the dawn of ‘cryptoworms’ – Mike also discusses last week’s Infiltrate Conference in Miami. Download: ThreatpostNewsWrapApril152016.mp3 Music b...

coolice.legis.iowa.gov XSS vulnerability

Vulnerable URL: https://coolice.legis.iowa.gov/cool-ice/default.asp?Category=ExamplesJS=%22%3E%3Csvg/onload=confirm%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

search.leg.state.nv.us XSS vulnerability

Vulnerable URL: http://search.leg.state.nv.us/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website status:| No Check...

Weaponized Drones For Police Now Legal In North Dakota

Drones also known as Unmanned Aerial Vehicles UAVs have contributed enormously by acting as an interface for conducting surveillance operations, or delivering products, or attacking a war site to name a few. We have seen Drones like 'Snoopy' that are capable to intercept data from your Smartphone...

Car Hacking Gets the Attention of Detroit and Washington

Car hacking is a relatively new phenomenon, but it is evolving at a frighteningly quick pace. While just a year or two ago security researchers were still trying to work out exactly how the internal electronics and communications gear in vehicles works, now a pair of researchers has discovered a...

FBI Pleads For Crypto Subversion in Congressional Budget Hearing

In a House Appropriations subcommittee hearing this morning on the FBI budget for the upcoming fiscal year, FBI Director James Comey was again critical of new encryption features from Apple and Google that he claims would make it impossible for law enforcement to access the contents of mobile...

Drupal Open Legislation module cross-site scripting vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Open Legislation is one of the open database modules. A cross-site scripting vulnerability exists in the Drupal Open Legislation module, which stems from the program's failure to...

Tech Companies, Privacy Advocates Call for NSA Reform

A group of technology companies, non-profits and privacy and human rights organizations have sent a letter to President Barack Obama, the director of national intelligence and a wide range of Congressional leaders, calling for an end to the bulk collection of phone metadata under Section 215 of t...

White House Creates Cyber Governance Unit Within OMB

With the framework explained for a number of government cybersecurity-related initiatives, now it’s time to talk money. The White House anted up strong in 2015 with proposals for a new data breach notification standard, as well as plans to facilitate information-sharing between the public and...

Microsoft Publishes Information Sharing Framework

Microsoft earlier this week published a 25-page framework offering guidance on how to effectively share information and what kinds of information need to be shared in order to reduce overall risk. Information sharing has been an oft-repeated refrain in security and policy-making circles for the...

Proposed CFAA Amendments Bad News For Security Researchers

Legitimate security researchers, from bug hunters to pen-testers, are buckled in for a bumpy ride as vague language in President Obama’s proposed amendments to the Computer Fraud and Abuse Act CFAA is expected to be debated and sorted out as it makes its way through the legislature. The amendment...

President Proposes National Breach Notification Standard

Lacking precious detail, President Obama today proposed a national data breach notification standard, legislation that would mandate breached companies notify affected consumers inside of 30 days. The national law would supersede the current collection of state laws that govern notification...

FISC Approves 90-Day Extension of Section 215 Surveillance Authority

The secret Foreign Intelligence Surveillance Court has authorized a 90-day extension to the Section 215 bulk telephone collection program used by the National Security Agency, giving the agency through the end of February to run the program in the absence of legislation establishing a new...