1418 matches found
PT-2013-43: Hard-coded credentials in Siemens WinCC and SIMATIC PCS 7
The specialists of the Positive Research center have detected a vulnerability in Siemens WinCC and SIMATIC PCS 7 related to hard-coded credentials used in the login system . Attackers with network access and knowledge of the credentials could log into the Web Navigator Web applications as an...
Bamital botnet servers seized by Microsoft and Symantec
Microsoft teamed up with Symantec to take down a nasty malware affecting thousands upon thousands of PCs. Bamital botnet hijacked people's search experiences and redirected victims to potentially dangerous sites that could leave them vulnerable to other online threats and steal their personal...
Bamital botnet servers seized by Microsoft and Symantec
Microsoft teamed up with Symantec to take down a nasty malware affecting thousands upon thousands of PCs. Bamital botnet hijacked people’s search experiences and redirected victims to potentially dangerous sites that could leave them vulnerable to other online threats and steal their personal...
PT-2013-42: SQL Injection in Siemens WinCC and SIMATIC PCS 7
The specialists of the Positive Research center have detected "SQL Injection" vulnerability in Siemens WinCC and SIMATIC PCS 7. The WinCC Web Navigator 7.2 and Runtime Client OPC protocol have input filtering in the login screen an attacker can overcome, allowing injection of SQL statements into...
[SECURITY] Fedora 18 Update: BackupPC-3.2.1-10.fc18
BackupPC is a high-performance, enterprise-grade system for backing up Linux and WinXX and Mac OS X PCs and laptops to a server's disk. BackupPC is high ly configurable and easy to install and maintain...
Facebook Helps FBI to shuts down Butterfly botnet theft $850 millions
The U.S. Department of Justice said on Tuesday that they’ve arrested 10 suspects from from Bosnia and Herzegovina, Croatia, Macedonia, New Zealand, Peru, the United Kingdom, and the United States involved in a global botnet operation that infected more than 11 million systems. The ring is said to...
Nitol Infections Fall, But Malware Still Popping Up
When Microsoft went after the Nitol botnet in September, one of the key details in the investigation was the fact that much of the botnet was built by pre-loading malware onto laptops during the manufacturing process in China. This was the clearest case yet of the phenomenon of certified pre-owne...
9 million PCs infected with ZeroAccess botnet
In recent months, we've seen the rootkit family Win32/Sirefef and Win64/Sirefef also known as ZeroAccess Botnet update its command and control protocol and grow to infect more computers while connecting to over one million computers globally. Before, disclosed that it creates its own hidden...
Mariposa botnet creator goes on trial
26-year-old Slovenian hacker known as Iserdo stands thought to have been behind the Mariposa botnet is on trial in Slovenia, charged with having masterminded an international cybercrime gang. At its height, the Mariposa botnet infected up to 12.7 million PCs, with more than half of the Fortune...
PT-2013-29: Information Disclosure in Siemens Simatic WinCC and PCS 7
The specialists of the Positive Research center have detected "Information Disclosure" vulnerability in Siemens Simatic WinCC and PCS 7. By opening a manipulated project file, sensitive data can be transmitted over the network or a DoS condition can be provoked. How to fix Update your software up...
Siemens Patches Stuxnet-Like SCADA Bugs
German industrial control system manufacturer Siemens announced Monday that it had patched holes in some of its products that appear to resemble holes used by the famous Stuxnet worm in 2010. If left unpatched, vulnerabilities in the company’s Simatic STEP 7 and Simatic PCS 7 software could have...
PT-2013-26: Information Disclosure in Siemens Simatic WinCC and PCS 7
The specialists of the Positive Research center have detected "Information Disclosure" vulnerability in Siemens Simatic WinCC and PCS 7. Users with legitimate, non-privileged access to WinCC MS SQL database can retrieve obfuscated user passwords for WebNavigator. For doing this, access to the...
PT-2013-27: Directory Traversal in Siemens Simatic WinCC and PCS 7
The specialists of the Positive Research center have detected "Directory Traversal" vulnerability in Siemens Simatic WinCC and PCS 7. Authenticated users may manipulate the URL in the web browser to access the file system of the web server. With this vulnerability they may read all the files that...
Root Access Vulnerability on ZTE Android Device
Certain Android devices manufactured by the China-based ZTE Corporation contain a poorly protected setuid shell that can be used to gain root-access to vulnerable devices, according to Lookout Mobile Security. Any attacker who successfully exploits the vulnerability will have complete control of...
Siemens SIMATIC STEP 7 DLL Vulnerability
Overview Siemens has released a software update for a DLL hijacking vulnerability in SIMATIC STEP 7 and SIMATIC PCS 7 software. Previous versions of SIMATIC STEP 7 and PCS 7 allowed the loading of malicious DLL files into the STEP 7 project folder that can be used to attack the system on which ST...
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95070 Diese Prüfung bezieht sich auf die 12...
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95070 Diese Prüfung bezieht sich auf die 12...
New Worm Morto Using RDP to Infect Windows PCs
A new worm called Morto has begun making the rounds on the Internet in the last couple of days, infecting machines via RDP Remote Desktop Protocol. The worm is generating a large amount of outbound RDP traffic on networks that have infected machines, and Morto is capable of compromising both...
Another Government contractor - PCS Consultants (USA) got Hacked by #Antisec
Another Government contractor - PCS Consultants USA got Hacked Another Government contractor - PCS Consultants USA got hacked by Anonymous Hackers & Antisec operation Hackers. Database of website has been extracted and leaked on internet via tweeter on Pastebin.The leaked Data extracted Includes...
Another Government contractor - PCS Consultants (USA) got Hacked by #Antisec
Another Government contractor - PCS Consultants USA got Hacked Another Government contractor - PCS Consultants USA got hacked by Anonymous Hackers & Antisec operation Hackers. Database of website has been extracted and leaked on internet via tweeter on Pastebin.The leaked Data extracted Includes...