180 matches found
Capital One Financial Corp latest victim of Cyber Attack
Capital One Financial Corp. said it's the latest target in a new round of coordinated cyber attacks aimed at disrupting the websites of major U.S. banks, and SunTrust Banks Inc. and Regions Financial Corp. said they expect to be next. The so-called "Izz ad-Din al-Qassam Cyber Fighters" posted a...
LinkedIn Confirms Millions of Account Passwords Hacked
LinkedIn Confirms Millions of Account Passwords Hacked LinkedIn Wednesday confirmed that at least some passwords compromised in a major security breach correspond to LinkedIn accounts. Norweigan IT website Dagens IT first reported the breach, noting that "Two days ago a package on the 6.5 million...
Cyber Security Index Highlights Political Threats, Business Partner Risk
The first annual Index of Cyber Security finds that senior security officers are more concerned than at this time last year about the risk of cyber attack and other online risks, with concerns about ideologically-motivated hacktivists and the threats posed by business partners and other “counter...
National program for Cyber army to be launched in India
National program for Cyber army to be launched in India Increasing attacks on cyberspace in India has brought several professionals and experts from the Industry, in support with the Government of India to jointly form a national level program to identify credible and valuable information securit...
DUQU – Another Stuxnet in the Making ?
DUQU – Another Stuxnet in the Making ? Article by : Nidhi Rastogi is a Cyber security professional based in New York. Article shared from THE HACKER NEWS magazine - November Edition. You can download Complete Magazine here. Barely a year into discovering Stuxnet, the world recently saw its powerf...
NSS Labs offers Bounties for exploits
NSS Labs offers Bounties for exploits ExploitHub, which operates a penetration-testing site and is run by NSS Labs, announced a bug-bounty program for researchers to develop exploits for 12 high-value vulnerabilities in Microsoft and Adobe products. The company, which has set aside $4,400 in rewa...
ExploitHub Offering Bounties – And Residuals – for Exploits
NSS Labs’ announced today that their penetration-testing site, Exploithub, will be offering bounties to researchers for developing exploits for12 high-value vulnerabilities. Exploithub is putting up $4,400 for working exploits against what the company describes as a “dirty dozen” of client-side...
OPINION: Are Anonymous Members Forged in the Crucible of IT Compliance?
By B.K. DeLong With alleged Anonymous leadership such as Sabu and opponents such as th3j35t3r tweeting about their supposed shenanigans in Las Vegas, the question on everyone’s mind this week is whether Anonymous is truly walking the halls of this week’s Black Hat and DEFCON hacker conferences...
c0c0n 2011 (Hacking and Security Conference) - Call for Papers
c0c0n 2011 Hacking and Security Conference - Call for Papers Announcing c0c0n 2011 - Oct 7-8 Cochin , India c0c0n is an annual event conducted as part of the International Information Security Day. The Information Security Research Association along with Matriux Security Community is organizing a...
Live Hacking DVD v1.3 Beta - Download !
Live Hacking DVD v1.3 Beta - Download ! Live Hacking DVD is a new Linux distribution packed with tools and utilities for ethical hacking, penetration testing and countermeasure verification. Based on Ubuntu this 'Live CD" runs directly from the DVD and doesn't require installation on your...
Metasploit 3.5.1 adds Cisco device exploitation !
Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...
Security Worth Buying
I’m a dirty vendor. That may not be the best way to start a serious dialogue about security product effectiveness, but I hate to read a post on security theory by some insincere tie-wearing wonk only to discover afterwards that he or she is Lord High Poobah of Marketing at “Scaring You For Profit...
The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads.
The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads ------------------------------------------------------------------------------- Czesc, This advisory describes CVE-2010-3856, an addendum to CVE-2010-3847. Please see http://seclists.org/fulldisclosure/2010/Oct/257 fo...
Hack in the Box (HITB)
Kuala Lumpur, Malaysia Booked as “Asia’s Premier Deep Knowledge Security Conference,” HITB is in its 8th year and has since expanded into other countries in the Middle East and Europe. Modeled on shows like Black Hat, HITB offers both training sessions and a multi track security conference and...
MS Windows nt!SeObjectCreateSaclAccessBits() Missed ACE (MS10-047)
Exploit for windows platform in category dos / poc ================================================================== MS Windows nt!SeObjectCreateSaclAccessBits Missed ACE MS10-047 ================================================================== Microsoft Windows nt!SeObjectCreateSaclAccessBits...
Why Bob Maley's Firing is Bad for All of Us
The news that Pennsylvania CISO Bob Maley lost his job for publicly discussing a security incident at last week’s RSA Conference really shouldn’t come as a surprise, but it does. Even for a government agency, this kind of lack of understanding of what actually matters is appalling and it is a...
Security budget issues to resonate at RSA Conference
From SearchSecurity Robert Westervelt The glum economy has put increased pressure on CISOs to cut costs while maintaining the same security defenses. Tightening budgets, coupled with increased compliance demands could have security professionals looking for answers next week at the 2009 RSA...
