PT-2011-4029 · Apache +1 · Mod Authnz External +2

Name of the Vulnerable Software and Affected Versions: mod authnz external module versions 3.2.5 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands via the user field. This is related to a SQL injection vulnerability in the mysql/mysql-auth.pl script. The...

DOD Launches New Cyber Strategy Website

DOD Launches New Cyber Strategy Website The Department of Defense today launched a new website to highlight DoD's first unified strategy for cyberspace announced on July 14. The website is a tool to help explain and consolidate DoD's cybersecurity accomplishments and new way forward for military,...

FBI arrests AT&T employee for leaking information to Anonymous

FBI arrests AT&T employee for leaking information to Anonymous The Tech Herald reported on information given to us by Ryan Cleary shortly before his arrest. AT&T insider who handed sensitive information and a bootable USB disk over to Anonymous. On Tuesday, the FBI arrested an AT&T employee...

DOJ Shuts Down Botnet, Disables Infected Systems

The U.S. Department of Justice and the FBI said on Wednesday that they had taken actions to disable an international botnet of more than two million infected computers that was stealing corporate data including user names, passwords and financial information. Thirteen unnamed “John Doe” defendent...

U.S. Military's Cyber Chief Warns Of Eroding Technical Prowess

SAN FRANCISCO — The U.S. Military’s top officer in charge of cyber security said that the country must invest more in so-called “STEM” programs – science, technology, engineering and math – to avoid being outflanked in a world where cyber offensive- and defensive operations are the keys to milita...

NATO networks vulnerable to cyber threat !

BRUSSELS AFP - NATO's military networks are not fully protected against cyber threats and the alliance must make good on a promise to erect a virtual wall in 2012, a defense official U.S. says Tuesday top. U.S. Deputy Secretary of Defense William Lynn warned after a two-day visit to Brussels that...

Government, Military Sites Hacked, Data and Access for Sale

The Web site of the U.S. military’s Communications-Electronics Command CECOM was off line on Monday after reports that access to the site was among those being fenced by hackers in an underground forum. The CECOM home page, cecom.army.mil displayed a message saying the site was “temporarily...

Experts Discuss Stuxnet's Long-Term Impact on Cybersecurity

Stuxnet has both fascinated and horrified the cybersecurity community throughout 2010. Its multiple zero-day exploits, stealth capabilities, and precise control over industrial machinery mark it as a prime example of advanced cyber threats. Stuxnet represents both a nightmare and a dream for...

U.S. Faces Shortage of Computer Science Graduates Amid Rising Cybersecurity Needs

The United States could soon face a significant shortage of computer science professionals unless it starts graduating more students in this field. At a time when computer hacking and security are critical issues for both the government and the private sector, the U.S. is producing only 9,000...

DHS, NIST, Financial Services Group Form Security Research Partnership

As the finger-pointing and name-calling surrounding the WikiLeaks issue continue in Washington, the White House this week facilitated a cooperative agreement among several key public and private organizations designed to spur joint information security research projects. On Tuesday, the Obama...

WikiLeaks and Corporate Security: Lessons from Recent Data Leaks

WikiLeaks' release of secret government communications should serve as a warning to the nation's biggest companies: You're next. Computer experts have warned for years about the threat posed by disgruntled insiders and poorly crafted security policies that give too much access to confidential dat...

Week in Security: Toorcon and SecTor Wrap-up, Bugs and Stuxnet Stances

Autumn conferences grabbed the headlines this week as presentations at the Toorcon Conference in San Diego and SecTor in Toronto wrapped up October, with revelations about the vulnerability of social networking sessions and critical infrastructure headlining. In San Diego, talks at Toorcon came...

Editran editcp 4.1 R7 Remote Buffer Overflow

=============================== - Advisory - =============================== Tittle: Editran editcp V4.1 R7 - Remote buffer overflow Risk: High Date: 25.Jun.2010 Author: Pedro Andujar .: INTRO :. EDItran Communications Platform: this is the market standard for the Spanish financial sector in the...

Editran editcp V4.1 R7 - Remote buffer overflow

=============================== - Advisory - =============================== Tittle: Editran editcp V4.1 R7 - Remote buffer overflow Risk: High Date: 25.Jun.2010 Author: Pedro Andujar pandujar @ segfault.es .: INTRO :. EDItran Communications Platform: this is the market standard for the Spanish...

Crimeware: A New Round of Confrontation Begins

This article provides an analysis of recent developments regarding attacks launched by malicious programs against the clients of financial organizations. This article will focus primarily on the struggle for control between financial malware, also known as crimeware1, and the antivirus industry a...

Research Software Secures Hypervisor Behavior

Researchers from North Carolina State University have developed new techniques and software that may be the key to resolving cloud computing and virtualization security concerns and boosting confidence in the sector. Read the full article. ScienceDaily...

Energy, Chemical Companies Are Malware Targets

Critical infrastructure organizations, such as those in the energy, oil, pharmaceutical and chemical sectors, encountered at least twice as much web malware as other organizations during 2009, researchers found. Read the full article. Secure Computing...

Q&A: Bob Maley on Designing and Implementing a State-wide Security Program

Dennis Fisher: Welcome to the Digital Underground podcast. This is the first episode in what’s going to be a series of podcasts with CSOs from states around the country. We’re going to be discussing the unique challenges of running an InfoSec program in the public sector and what lessons enterpri...

NSA to Run $1.5B Security Data Center

The National Security Agency is going to run a planned $1.5 billion data center in Utah that will serve as a support center for the government’s information security programs. The exact mission and function of the data center is a bit unclear, however. The NSA’s core mission is to collect and...

Taking a Page From Singapore's Cybersecurity Playbook

We could all learn a thing or two about developing an effective cyber security strategy from the government of Singapore. I was recently in Singapore to do a keynote for Singapore GovWare on the Changing State of the Endpoint and, while I was out there, I witnessed something interesting the...