South Korean social network hacked, 35 million users Data at risk

South Korean social network hacked, 35 million users Data at risk 35 million users Personal information of a South Korean social network site may have been exposed. Local authorities were quick to blame hack attacks against the Cyworld social networking website and the Nate web portal – both of...

Massive Data Breach of South Korea Portal Affects 35 Million Users

A major provider of Internet services and mobile access in South Korea has been hit by one of the larger data breaches in recent history, resulting in the compromise of personal information belonging to as many as 35 million users. The attack on SK Telecom’s Cyworld site reportedly came from an I...

Nate Lawson: Crypto Strikes Back!

This Google Tech Talk features researcher Nate Lawson discussing recent vulnerabilities in crypto libraries, why public key cryptography is like a Ford Pinto in a demolition derby and the password-hashing mess created by Web 2.0 sites...

Nate Lawson on Crypto Flaws, Web Application Security and Selling Hardware Bugs

Dennis Fisher talks with Nate Lawson of Root Labs about the proliferation of crypto flaws in Web applications and the market for hardware security bugs. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of sykboy65...

SA-CONTRIB-2009-025 - Fivestar - Cross-site request forgery

The Fivestar module provides a voting widget for content and records votes using Ajax. The URL used by the javascript to register votes is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Fivestar 5.x-1.x prior to...

Java applets can be used to read sensitive information – Opera Security Advisories

Java applets can be used to read sensitive information – Opera Security Advisories OPCOM Team | December 16, 2008 Severity: Highly Severe Problem Description Once a Java applet has been cached, if a page can predict the cache path for that applet, it can load the applet from the cache, causing it...