Hackers deface Hostgator Indian domain

Hacking group 'today hack and deface Hostgator Indian domain Hostgator.in , which handles the Indian Operations of Hostgator.com with locally available servers and localized currency billing as well as support. Rather than editing homepage or other pages of site, hacker just added new file at on...

Federal Reserve Admits It was Briefly Hacked During Super Bowl

Two days after the group Anonymous boasted it had broken into a government Web site and had the data dump to prove it, the U.S. Federal Reserve admitted it was hacked. “The Federal Reserve system is aware that information was obtained by exploiting a temporary vulnerability in a website vendor...

USN-1715-1: OpenStack Keystone vulnerability

Dan Prince discovered that Keystone did not properly perform input validation when handling certain error conditions. An unauthenticated user could exploit this to cause a denial of service in Keystone API servers via disk space exhaustion...

Department of Energy Compromised in Sophisticated Attack

Hackers targeted and compromised computer networks at United States Department of Energy headquarters in Washington DC two weeks ago, according to a report published by the Washington Free Beacon earlier this morning. DoE officials confirmed the attack and are currently investigating the incident...

Pakistan Domain Registrar PKNIC Hacked

PKNIC, The Pakistan domain registrar of .com.pk, .pk, org.pk and others domains has been reportedly hacked again yesterday. A hackers group named PakBugs has claimed that they have successfully penetrated PKNIC servers and gained control of around 23,000 domains which included some of the most...

Android malware with ability to install Backdoor on Computers

Kaspersky Lab has revealed a new type of malware that can infect your computer when connected smartphone or tablet. Two such application, Super Clean and DroidCleaner found in Google Play android market. These two are actually same application, just released with two different names. These...

Fedora 17 : jakarta-commons-httpclient-3.1-12.fc17 (2013-1189)

This update fixes a security vulnerability that caused jakarta-commons-httpclient not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via...

Fedora 17 : axis-1.4-19.fc17 (2013-1194)

This update fixes a security vulnerability that caused axis not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via andaarbitrary valid...

Fedora 18 : jakarta-commons-httpclient-3.1-12.fc18 (2013-1203)

This update fixes a security vulnerability that caused jakarta-commons-httpclient not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via...

Fedora Update for proftpd FEDORA-2013-0483

Check for the Version of proftpd OpenVAS Vulnerability Test Fedora Update for proftpd FEDORA-2013-0483 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 16 Update: proftpd-1.3.4b-5.fc16

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Multilayer DDoS Attacks Have Reset Stage for Network Attacks

Back in the dark days of dial-up connectivity, attackers wouldn’t bother compromising home computers as bots to be used in distributed denial-of-service. The lack of bandwidth made PCs persona non grata in the DDoS world. Instead, attackers targeted Web servers, the only machines with the...

Fedora Update for rubygem-rack FEDORA-2013-0837

Check for the Version of rubygem-rack OpenVAS Vulnerability Test Fedora Update for rubygem-rack FEDORA-2013-0837 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Dissecting a mobile malware

The capillary diffusion of mobile devices, the lack of security systems on these platforms and low level of awareness on principal cyber threats made them a privileged target for cybercrime. We have assisted in the recent year to an explosion of malware designed to hit principal mobile OSs, in a...

[SECURITY] Fedora 17 Update: rubygem-rack-1.4.0-3.fc17

Rack provides a common API for connecting web frameworks, web servers and layers of software in between...

[SECURITY] Fedora 18 Update: rubygem-rack-1.4.0-4.fc18

Rack provides a common API for connecting web frameworks, web servers and layers of software in between...

[SECURITY] Fedora 16 Update: rubygem-rack-1.3.0-3.fc16

Rack provides a common API for connecting web frameworks, web servers and layers of software in between...

SuSE 11.2 Security Update : dhcp (SAT Patch Number 6606)

This update provides dhcp 4.2.4-p1, which fixes the dhcpv6 server crashing while accessing the lease on heap and provides the following additional fixes : - Security fixes : - Previously the server code was relaxed to allow packets with zero length client ids to be processed. Under some situation...

PT-2013-2177

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.5.1 Description The issue allows remote attackers to send HTTP requests to intranet servers and conduct port-scanning attacks by specifying a crafted source URL for a pingback, related to a Server-Side Request...

RedHat Update for ipa-client RHSA-2013:0189-01

Check for the Version of ipa-client OpenVAS Vulnerability Test RedHat Update for ipa-client RHSA-2013:0189-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...