Imperva SecureSphere management GUI contains an XSS vulnerability

Overview An XSS vulnerability exists in the Imperva SecureSphere management GUI. Description Dell SecureWorks' SWRX-2011-001 advisory states:"A vulnerability exists in Imperva SecureSphere due to improper validation of user-controlled input. User-controllable input is not properly sanitized for...

Dell buys data security company !

Deal with undisclosed terms part of computer maker's ongoing effort to expand, improve information technology, cloud computing offerings. Dell Inc. was hunting for the right computer security company to buy, and on Tuesday, it announced its choice. Dell will buy Atlanta-based SecureWorks Inc. ,...

FBI Arrests Alleged Head of Mega-D Botnet Operation

The FBI has arrested the man that they allege is behind the notorious Mega-D botnet, which at one point accounted for nearly a third of all of the spam on the Internet. The arrest came to light this week after the man was caught entering the U.S. last month on his way to a car show. The man that...

[oCERT-2010-003] Free Simple CMS path sanitization errors

2010-003 Free Simple CMS path sanitization errors Description: Free Simple CMS, an open source content management system, suffers from remote file inclusion vulnerabilities. Insufficient path sanitization on several query string parameters leads to inclusion of arbitrary files from remote sources...

Researchers Cripple Pushdo Botnet

Researchers have made a huge dent in a major variant of the Pushdo botnet, virtually crippling the network by working with hosting providers to take down about two thirds of the command-and-control servers involved in the botnet. Pushdo for years has been one of the major producers of spam and...

Каждый десятый британский компьютер скомпрометирован хакерами

Один из каждых десяти ПК в Великобритании может стать участником кибератаки. Такие данные приводит фирма SecureWorks, работающая в области разработки решений для обеспечения компьютерной безопасности. По результатам последнего общемирового исследования этой компании Великобритания заняла общее...

McAfee Network Security Manager Bypass / Hijack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-002 McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerability Advisory Information Title: McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerabili...

McAfee Network Security Manager XSS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-001 McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory Information Title: McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory ID: SWRX-2009-001 Advisory...

[SWRX-2009-001] McAfee Network Security Manager Cross-Site Scripting (XSS) Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-001 McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory Information Title: McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory ID: SWRX-2009-001 Advisory...

Inside the Pay-Per-Install Malware Economy

Stevens provides considerable details on the methods and tools used by cyber-criminals, the seedboxes and crypters that are used to get around anti-malware detection and the clever black hat SEO Search Engine Optimization techniques used in social engineering attacks. An example of one affiliate...

Researcher wants hacker groups hounded mercilessly

From ComputerWorld Gregg Keizer Criminal cybergangs must be harried, hounded and hunted computerworld.com until they’re driven out of business, a noted botnet researcher said today as he prepared to pitch a new anti-malware strategy later this week at the RSA Conference in San Francisco. “We need...

There will be no April 1st Conficker outbreak

By Joe Stewart, SecureWorks If you’ve been reading any news at all on the Internet in the past week, you’ve probably heard that Conficker Armageddon is approaching, and it’s scheduled for April 1st, only a few days from now. The truth is, there will be no April 1st outbreak, despite what some of...

[Full-disclosure] Miranda IM Multiple Buffer Overflow Vulnerabilities

Miranda IM Multiple Buffer Overflow Vulnerabilities Summary Multiple buffer overflow vulnerabilities exist in Miranda IM, a popular open source instant messaging client. Scope These vulnerabilities have been verified in the following Miranda IM versions: 0.6.8 0.7.0 Note: one vulnerability in...