8810 matches found
RSA Operations Console Detection
The remote web server hosts an RSA Operations Console, which is used with RSA appliances to configure replication as well as RADIUS or LDAP authentication sources, perform backups, perform updates, and alter network configurations. C Tenable Network Security, Inc. include"compat.inc"; if...
RSA Self-Service Console Detection
The remote web server hosts an RSA Self-Service Console, which is used with RSA appliances by users to reset their PINs, create security questions, etc. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55509; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...
Verizon: RSA Hackers Using Trojans, Keyloggers In Second Wave Attacks
Customers of EMC’s RSA Security division that are worried about being the victim of an attack following the theft of sensitive data relating to that company’s SECURID tokens may not need to rush out and replace those tokens, according to security consulting firm Verizon Business. Efforts to stop...
SecurID Attack Was the Work of 'Very Experienced' Attackers
MALAGA, SPAIN–An RSA official on Friday offered more details of the attack the company suffered earlier this year in which thieves made off with key data related to the RSA SecurID two-factor authentication system. The attack, he said, targeted just four employees and was executed by a group he...
High-Profile Attacks Drive Renewed Push For Breach Notification Law
With each new day bringing news of another intrusion at a high-profile company or government agency, lawmakers are considering a number of legislative responses to the problem, including a potential bill that would require companies to report breaches within 48 hours and establish penalties for...
International Monetary Fund Reportedly Hacked
The International Monetary Fund is the victim of a sophisticated, targeted attack that has compromised an unknown number of systems within the organization, Bloomberg reports. The Washington, D.C. based organization sent employees a memo informing them that a desktop computer within the IMF had...
Linux/x86-32 - ConnectBack with SSL connection - 422 bytes
Linux/x86-32 - ConnectBack with SSL connection - 422 bytes. Shellcode exploit for linux platform / Title: Linux/x86-32 - ConnectBack with SSL connection - 422 bytes Date: 2011-06-08 Tested on: ArchLinux i686 Author: Jonathan Salwan - twitter: @jonathansalwan http://shell-storm.org Configurations...
RSA's SecurID Quandry: Replace or Recall?
RSA acknowledged on Monday that a hack at Lockheed Martin was tied to the theft of information on its SecurID tokens. The company offered to replace the tokens for customers, but experts wonder whether RSA should go further and recall SecurID tokens from the market. After acknowledging that forge...
RSA Says Lockheed Attack Not a New Threat to SecurID, But Will Replace Users' Tokens
In the wake of a string of attacks against high-profile users of RSA Security’s SecurID tokens including Lockheed Martin, the company has posted an open letter to its customers, trying to reassure them that the tokens are secure and that the attacks don’t represent a new threat to these businesse...
Report: L3 Warns Employees Of Attacks Using Compromised SecurID Tokens
Executives at U.S. defense contractor L-3 Communications warned employees in April about an attempt by unknown assailants to compromise the company’s network using forged SECURID tokens from RSA. The report, if accurate would be the second attack on a leading defense contractor with links back to...
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : bind (SSA:2006-310-01)
New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. The minimum OpenSSL version was raised to OpenSSL 0.9.7l and OpenSSL 0.9.8d to avoid exposure to known security flaws in older versions these patches were already issued for Slackware. ...
Report: Norwegian Military Hit by Cyber Attack in March
The Norwegian military has admitted it was hit by a “massive” phishing cyber attack in March, according to a report from Techworld.com. The attack began in an e-mail sent to select members of the defense ministry from what appeared to be another Norwegian government agency. An enclosed attachment...
CVE-2011-1423
Cross-site scripting XSS vulnerability in RSA Data Loss Prevention DLP Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in RSA Data Loss Prevention DLP Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-1423
Cross-site scripting XSS vulnerability in RSA Data Loss Prevention DLP Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-1423
CVE-2011-1423 is a cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x, caused by improper input validation. It affects RSA DLP Enterprise Manager versions 8.x prior to 8.5 SP1 and allows remote attackers to inject arbitrary web script or HTML via uns...
Report: RSA Hack Part Of Larger Operation
A sophisticated attack against RSA, the security division of EMC, shares characteristics with similar attacks against Western firms, according to the security blog Krebsonsecurity. Despite RSA’s claims that it was the victim of a unique and targeted attack, research into the incident by reporter...
Source Code is the New Hacker Currency !
Source Code is the New Hacker Currency ! No doubt you've been paying attention to the data breaches pile up lately... but have you noticed a trend? If you wade through the hype and hyperbole, dig into the details of the most prolific intrusions in recent history you'll notice one thing that shine...
ESA-2011-015: RSA, The Security Division of EMC, announces a fix for a security vulnerability in RSA Data Loss Prevention
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-015: RSA, The Security Division of EMC, announces a fix for a security vulnerability in RSA Data Loss Prevention Advisories Updated April 25, 2011 Summary: RSA, The Security Division of EMC, announces a fix for a security vulnerability in RSA...