U.S. Needs Cybersecurity Skunk Works, Expert Says

ARLINGTON, VA–In order to address the fundamental questions surrounding the concept of cyberwar and what it might mean for both the government and the enterprise, the United States should develop a skunk works-type think tank comprising highly skilled private-sector security experts as well as...

New York Times: Stuxnet A Joint US-Israeli Operation

Details of the Stuxnet worm’s origins and functioning have been seeping into the media, tidbit by intriguing tidbit, since last Summer, when news of the worm went mainstream. But a new exclusive from the New York Times breaks the Stuxnet story wide open, confirming oft-cited theories that it was ...

kernel: missing tty ops write function presence check in hci_uart_tty_open()

The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service NULL pointer dereference via vectors related to the...

kernel: panic when submitting certain 0-length I/O requests

The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service panic via a zero-length I/O request in a device ioctl to a SCSI device...

kernel: CAN minor heap overflow

Heap-based buffer overflow in the bcmconnect function in net/can/bcm.c aka the Broadcast Manager in the Controller Area Network CAN implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service memory corruption via a connect operation...

'Anonymous' Hacktivists Attack African Government Sites !

"Anonymous," the shadowy hacktivist group that's attacked PayPal, the record industry and the Church of Scientology, has upped the ante: It's now taking on entire countries. The group launched massive distributed denial-of-service DDoS attacks on at least eight Tunisian government websites...

FBI raids ISP in Anonymous DDoS investigation !

Authorities in the U.S. and Germany have raided Internet Service Providers in hopes of tracking down the hackers who launched distributed denial of service DDoS attacks against Web sites such as Visa.com, PayPal.com, and Mastercard.com earlier this month. In documents posted Wednesday to the...

'BitTorrent' exploit could be used to stage massive cyber attacks !

With the Federal Bureau of Investigations FBI treating successful cyber attacks by "Operation Payback" as criminal offenses, a new level of ambiguity is being introduced into the enforcement of cyber crime laws. The FBI was treating efforts by "Anonymous" and "4chan" as an "unauthorized and knowi...

4chan back online after being downed by DDoS attacks !

A coordinated DDoS attack from an unknown source temporarily knocked 4chan offline in the latest attack against the high-profile group. The 4chan forum helped to create and cultivate the Anonymous hacker group that has used DDoS attacks against numerous companies in recent months as part of...

CVE-2010-3874

Heap-based buffer overflow in the bcmconnect function in net/can/bcm.c aka the Broadcast Manager in the Controller Area Network CAN implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service memory corruption via a connect operation...

CVE-2010-3874

Heap-based buffer overflow in the bcmconnect function in net/can/bcm.c aka the Broadcast Manager in the Controller Area Network CAN implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service memory corruption via a connect operation...

Linux Kernel 2.6.37-rc2 - ACPI custom_method Local Privilege Escalation

Linux Kernel 2.6.37-rc2 - ACPI custommethod Local Privilege Escalation / american-sign-language.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4347 This custommethod file allows to inject custom ACPI methods into the ACPI interpreter...

CVE-2009-5033

IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a " " argument sequence for a certain tell command, which allows remote authenticated users to obtain access to other users' data via a sync operation, related to storage of the data of multiple users within the same thread...

CVE-2009-5036

traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 allows remote authenticated users to cause a denial of service daemon crash via a malformed invitation document in a sync operation...

Design/Logic Flaw

IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited application, which allows remote authenticated users to bypass intended access restrictions via this operation...

Design/Logic Flaw

traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 allows remote authenticated users to cause a denial of service daemon crash via a malformed invitation document in a sync operation...

CVE-2009-5036

traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 allows remote authenticated users to cause a denial of service daemon crash via a malformed invitation document in a sync operation...

Mastercard says,We're recovering from Wikileaks related attacks !

Mastercard said Thursday that it is recovering from a series of attacks related to the Wikileaks flap. In a statement, Mastercard said: MasterCard has made significant progress in restoring full-service to its corporate website. Our core processing capabilities have not been compromised and...

Anonymous Clarifies Its Identity and Mission in Recent Statement

On December 10, 2010, Anonymous released a press statement to clarify its identity and objectives. Who is Anonymous? Anonymous, often misunderstood, is not a conventional group. Instead, it is an internet gathering without formal structure. Both Anonymous and the media acknowledge the perceived...

Anonymous Targets WikiLeaks Critics in Operation Payback Campaign

Do you support WikiLeaks? Are you angry at critics trying to suppress it? Maybe you're considering joining online protests to shut down the websites of its opponents. Don't. A group of vigilantes named Anonymous has turned their Operation Payback campaign, previously targeting antipiracy...