54 matches found
Ransomware Activity Spikes in March, Steadily increasing throughout 2016
UPDATE June 15, 2016: This post has been updated to include new data on ransomware activity, which is also now broken down by region. Cyber extortion for financial gain is typically carried out in one of two ways. The first method is a business disruption attack – a category we discussed at lengt...
Heze city science and technology information network suffered HackingTeam leakage of 0day vulnerabilities attack-exploit warning-the black bar safety net
For the attacker, the HackingTeam data leak certainly gives them a“spring”. Attackers in the data leak the next day it will be baked 0day vulnerabilities added to the mainstream exploit kits. Copy the leaked 0day attack HackingTeam leakage of various 0day information can be easily reused. In...
Microsoft Ends Windows 7 Mainstream Support
On January 13, 2015, Microsoft's mainstream support for Windows 7 Service Pack SP 1 ended, which means the end of free Windows 7's "mainstream support" period, with the operating system now entering "extended support." Many people are still running the aging Windows XP as well as Windows 7...
New Mozilla Privacy Initiative to Include High-Capacity Tor Relays
Mozilla is starting a new initiative that the company says is designed to incorporate more privacy enhancing features into Firefox and the other Mozilla products. The project, known as Polaris, involves collaboration with The Tor Project and the Center for Democracy and Technology and will involv...
WordPress Mainstream Theme - Remote Code Execution
There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...
RedHat Linux 5.0/5.1/5.2,Slackware Linux <= 3.5 klogd Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because of a buffer overflow in the klogd handling ...
Mark Russinovich on His Novel Zero Day and Coordinated Cyber Attacks
Dennis Fisher talks with Mark Russinovich of Microsoft about his novel Zero Day, the idea of a coordinated cyber attack by terrorists and the difficulty of writing a technical novel for a mainstream audience. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on Image...
Barr Unbowed Part II: Setting the Record Straight on HBGary Federal
This is the second in a two-part interview with Aaron Barr, the former CEO of HBGary Federal In the second half of his exclusive interview with Threatpost, former HBGary CEO Aaron Barr – speaking before the arrest of alleged Lulzsec member Ryan Cleary in the UK – talked about the likely law...
Making Penetration Testing Mainstream
HD Moore, the founder of the Metasploit Project and now the CSO of Rapid7, talks at the SOURCE conference in Boston about the mainstream acceptance and importance of penetration testing...
gtcatalog <= 0.9.1 (index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================= Shopping Catalog RFI ============================================================================================= Info:- Scripts: ShoppingCatalog download :...
gtcatalog <= 0.9.1 (index.php) Remote File Include Vulnerability
============================================================================================= Shopping Catalog RFI ============================================================================================= Info:- Scripts: ShoppingCatalog download :...
gtcatalog 0.9.1 - 'index.php' Remote File Inclusion
============================================================================================= Shopping Catalog RFI ============================================================================================= Info:- Scripts: ShoppingCatalog download :...
LetterIt 2.0 - session.php Remote File Inclusion
LetterIt 2.0 - session.php Remote File Inclusion ================================================================================== LetterIt RFI ================================================================================== Info:- Scripts: LetterIt download :...
Cross-site scripting-vulnerability warning-the black bar safety net
What is cross-site scriptingCSS/XSS? We said the cross-site scripting refers to a remote WEB page's html code is inserted with the malicious purpose of the data, the user that the The page is trustworthy, but when the browser downloads the page, the embedded script will be interpreted, Sometimes...