ToorCon: New Apps, Old Infrastructure Make Toxic Brew

In a variety of ways, experts at this weekend’s ToorCon Conference warned that the tidal wave of new devices and Web based services is straining an already aging Internet infrastructure, with privacy and security as the first victims. Call it the ‘schizophrenia of now’: a tidal wave of new...

Manufacturers, Carriers Look to Defend Devices Against Attackers and Users

As mobile phones have gradually morphed into complete computing devices in the last few years with the advent of the iPhone and Android-based phones, mobile phone manufacturers and wireless carriers have been working to create new protection mechanisms to stop attacks against the increasingly...

The Coming Wave of Mobile Attacks

The pace of innovation on mobile phones and other smart wireless devices has accelerated greatly in the last few years, adding features, speed and computing power. But now the attackers are beginning to outstrip the good guys on mobile platforms, developing innovative new attacks and methods for...

Charlie Miller on Safari Bugs, Predictions for PWN2OWN and Mobile Security

Independent Security Evaluators’ Charlie Miller discusses Safari bugs, his predictions for this year’s PWN2OWN and mobile security with Ryan Naraine at RSA 2010...

CIOs on mobile security: Choosing a platform

At a Churchill Club event in Santa Clara, Calif., Peter Solvik, managing director at Sigma Partners, talks to a panel of CIOs about how they’re making mobile devices more secure in the enterprise and whether their employees prefer the BlackBerry over the iPhone. The panel includes: Matt Carey,...

Mobile security can no longer be ignored

By Paul F. Roberts, The 451 Group Starting this week at the annual CanSecWest conference in Vancouver, British Columbia, some of the world’s best hackers will crack their knuckles and get to work on a different kind of problem: hacking mobile devices including Apple’s über popular iPhone. The...

HTC Touch - vCard over IP Denial of Service

!/usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restriction, including without limitation the...

HTC Touch - vCard over IP Denial of Service

HTC Touch - vCard over IP Denial of Service ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without...

HTC Touch vCard over IP Denial of Service PoC Code

Hello, PoC code for testing the MSL-2008-002 vulnerability HTC Touch vCard over IP Denial of Service is now available at: http://poc.mseclab.com/pocs/MSL-2008-002-PoC.py The code provide means for demonstrating the HTC Touch vCard over IP DoS by sending vCards to port UDP/9204 of the target IP...

SonyEricsson WAP Push Denial of Service

Security Advisory MSL-2008-001 - SonyEricsson WAP Push Denial of Service Advisory Information -------------------- Title: SonyEricsson WAP Push Denial of Service Advisory ID: MSL-2008-001 Advisory URL: http://www.mseclab.com/index.php?pageid=123 Published: 2009-01-26 Updated: 2009-01-26 Vendor:...

[SE-2008-01] J2ME Security Vulnerabilities 2008

Dear Bugtraq, The following information might be of interest for the readers of this list. Security Explorations http://www.security-explorations.com, a new security research start-up company from Poland discovered two very serious security vulnerabilities in mobile Java technology 1 coming from...

CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Multiple vulnerabilities in Google's Android SDK Advisory Information Title: Multiple vulnerabilities in Google's Android SDK Advisory ID: CORE-2008-0124 Advisory URL:...

EZPhotoSales 1.9.3 Multiple Vulnerabilities

http://www.airscanner.com/security/07080601ezphotosales.htm Airscanner Mobile Security Advisory 07080601: EZPhotoSales 1.9.3 Multiple Vulnerabilities Product: EZPhotoSales 1.9.3 and below Platform: Windows IIS or Apache with PHP Requirements: Windows IIS or Apache with PHP Credits: Seth Fogie...

Minimo .2 and more Firefox 2.0.0.6 Password Manager Vulnerabilites

Airscanner Mobile Security Advisory 07080102: Minimo =.2 and Firefox 2.0.0.6 Product: Minimo =.2 and Firefox 2.0.0.6 http://airscanner.com/security/07080103minimo.2.htm Platform: Tested on Minimo .016 and .2 Windows Mobile Pocket PC 2005 and Firefox 2.0.0.6 Windows XP SP2 Requirements: Mobile...

Airscanner Mobile Security Advisory: Remote Hard Reset Data Wipe and DoS of Pocket Controller v5.0 (#AS05080401)

------------------------------------- Airscanner Mobile Security Advisory: AS05080401 Critical ------------------------------------- Remote Hard Reset Data Wipe and DoS of Pocket Controller v5.0 AS05080401 Date of discovery: August 4, 2005 Product: Pocket Controller-Professional V5 latest edition...

Nokia Symbian 60 - BlueTooth Nickname Remote Restart (2)

Nokia Symbian 60 - BlueTooth Nickname Remote Restart 2 / Nokia Bluetab Exploit Found & coded by Qnix - This Exploit will creat file called bluetab.txt with your bluetooth nickname, send the file to your nokia mobile open it copy the nickname and paste it to your bluetooth nickname, if any one...

Airscanner Mobile Security Advisory #05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability

Airscanner Mobile Security Advisory 05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability Product: vxFtpSrv 0.9.7 Platform: Tested on Windows Mobile Pocket PC 2003 Requirements: Mobile device running Windows Mobile Pocket PC with vxFtpSrv 0.9.7 installed and running. Credit...

[SA16283] Microsoft ActiveSync Denial of Service and Equipment ID Enumeration

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...