FBI demands SSL Keys from Secure-Email provider Lavabit in Espionage probe

During the summer, The Secure email provider 'Lavabit' and preferred service for PRISM leaker Edward Snowden decided to shut down after 10 years to avoid being complicit in crimes against the American people. The U.S. Government obtained a secret court order demanding private SSL key from Lavabit...

Threat Outbreak Alert: Fake Purchase Order Notification Email Messages on September 30, 2013

Medium Alert ID: 31083 First Published: 2013 October 1 19:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a purchase order notification for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Product Purchase Order Email Messages on October 1, 2013

Medium Alert ID: 31068 First Published: 2013 October 1 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Product Order Request Email Messages on September 30, 2013

Medium Alert ID: 31035 First Published: 2013 September 30 20:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a product order request for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Purchase Order Invoice Request Email Messages on September 29, 2013

Medium Alert ID: 31021 First Published: 2013 September 30 14:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order notification for the recipient. The text in the email message attempts to convince the...

Ecmall 2.x版本存在通杀SQL注入漏洞

简要描述： 本来想早点分析完然后奋斗ECSHOP...结果一直不给老衲机会啊,越来越不敢相信是不是官方版本了,是不是下错了.酒喝多了头有点晕.不知道有没有把分析写错... 详细说明： order by 参数注入,后面不能跟union,但是可以用双重查询. select...from...order by 1 and select username from ecmmember where userid=1 或者 select...from...order by 1,select username from ecmmember where userid=1...

Threat Outbreak Alert: Fake Purchase Order Notification Email Messages on September 25, 2013

Medium Alert ID: 30980 First Published: 2013 September 25 15:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order notification for the recipient. The email message attempts to convince the recipient to ope...

Инъекция в ORDER BY: Второе дыхание

Почему-то у многих людей сложилось мнение, что инъекция в order by раскручивается или через time-based, или как boolean-based. Но, это совсем не так. INTRO ORDER BY употребляется для сортировки выборки по одной или несколькими колонками обычно по возрастанию или убыванию, но не только: PHP код:...

Threat Outbreak Alert: Fake Order Specification Email Messages on September 22, 2013

Medium Alert ID: 30936 First Published: 2013 September 23 12:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain order specification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on September 19, 2013

Medium Alert ID: 30920 First Published: 2013 September 20 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Quote Order List Email Messages on September 13, 2013

Medium Alert ID: 30789 First Published: 2013 September 13 15:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order quotation request for the recipient. The text in the email message instructs the recipient to open...

Threat Outbreak Alert: Fake Purchase Order Request Email Messages on September 8, 2013

Medium Alert ID: 30690 First Published: 2013 September 9 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order notification for the recipient. The text in the email message attempts to convince t...

Protecting Critical Infrastructure: Input Data

Kaspersky Lab is always working to develop new technologies for protecting critical computer systems from cybercriminals. In July, I had the opportunity to represent Kaspersky at a symposium sponsored by the National Institute of Standards and Technology NIST, focused on the national Cybersecurit...

Vulnerabilities in multiple web applications with GDD FLVPlayer

Hello 3APA3A! These are Content Spoofing and Cross-Site Scripting vulnerabilities in multiple web applications with GDD FLVPlayer. Earlier I've wrote about vulnerabilities in GDD FLVPlayer http://seclists.org/fulldisclosure/2013/Aug/247. This is video and audio player, which is used at thousands...

Threat Outbreak Alert: Fake Product Order Confirmation Email Messages on September 5, 2013

Medium Alert ID: 30664 First Published: 2013 September 5 16:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order confirmation for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Purchase Order Notification Email Messages on September 4, 2013

Medium Alert ID: 30652 First Published: 2013 September 4 19:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order notification for the recipient. The text in the email message attempts to convince t...

Threat Outbreak Alert: Fake Purchase Order Request Email Messages on September 2, 2013

Medium Alert ID: 30630 First Published: 2013 September 3 17:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Product Order Pictures Email Messages on September 1, 2013

Medium Alert ID: 30620 First Published: 2013 September 3 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product order pictures attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Order Request Email Messages on August 29, 2013

Medium Alert ID: 30611 First Published: 2013 August 30 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the message body attempts to persuade the recipient to...

Threat Outbreak Alert: Fake Product Purchase Order Email Messages on August 28, 2013

Medium Alert ID: 30530 First Published: 2013 August 29 11:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order for the recipient. The text in the email message attempts to convince the recipient to...