CORS requests can omit the preflight request – Opera Security Advisories

Cross-Origin Resource Sharing CORS requests are required to send a preflight request if custom headers are included, to check that the host wishes to allow the full request to be made. An example of where this may be needed is for sites that use a custom header with a static value as part of thei...

DHS Secretary Warns of Potential Cyber Attacks

There is no shortage of problems for President Obama and the new Congress to tackle as they settle into their offices in Washington, D.C., this week, and one of the topics that’s at the top of that list is cybersecurity. Earlier this week a group of Democratic senators introduced a new...

GitHub Search Down After Some Credentials and Crypto Keys Exposed

GitHub’s search capability remains dark Friday after it was discovered that the code-sharing site’s search feature could be used to dredge up passwords, private crypto keys, and other credentials developers use in their projects. GitHub is a popular collaboration site for open source software...

Senate Introduces Cybersecurity Bill that Prioritizes Information Sharing

The United States Senate says it will prioritize the passage of a comprehensive cybersecurity bill designed to fortify the nation’s public and private IT systems in this session of Congress. Senators John D. Rockefeller IV D-WV, Chairman of the Senate Commerce, Science, and Transportation...

Password reset Vulnerability in Facebook Employees Secure Files Transfer service

Many be many of you are not aware about this, but Facebook having a Secure Files Transfer service for their Employees at https://files.fb.com and Hacker reported a very critical password reset vulnerability. Nir Goldshlager, a researcher told 'The Hacker News' that how he defeat Facebook's Secure...

Threat Outbreak Alert: Fake Personal Video Sharing Email Messages on October 9, 2013

Low Alert ID: 27713 First Published: 2013 January 2 15:05 GMT Last Updated: 2013 October 9 18:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a video attachment for the recipient. The text in the email message attempt...

CVE-2012-6462

Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing CORS specification, which allows remote attackers to bypass intended page-content restrictions via a crafted request...

Cross site scripting

Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing CORS specification, which allows remote attackers to bypass intended page-content restrictions via a crafted request...

Regulator Warns Banks About DDoS Attacks, Encourages Information Sharing

In an alert issued by the Office of the Comptroller of the Currency OCC, Deputy Comptroller for Operational Risk Carolyn G. DuChene warned financial and other critical institutions about the wave of ongoing distributed denial of service DDoS attacks targeting their networks. DuChene is urging the...

Nvidia Display Driver Service Attack Escalates Privileges on Windows Machines

There’s nothing like a zero-day to ruin the holiday break, but that’s just what may be in store for engineers at Nvidia after a researcher discovered a new vulnerability in the Nvidia Display Driver Service. The flaw could hand over administrator privileges on Windows machines to an attacker. Pet...

PHPCMS V9 video sharing module SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

Nonsense not say,directly on behalf of the code analysis \phpcms\modules\video.php7 of 8 lines of code / Video Add method / public function add if $POST'dosubmit' //First deal submitted over the data $data'vid' = $POST'vid'; // obviously the VID is not filtered if !$ data'vid'...

National Strategy Could Nudge Security Information Sharing Forward

In the early days of the Obama administration, the president declared cyberspace a critical asset. Since then, little more than lip service has been paid on a policy level to the security of the country’s critical infrastructure, despite increasing public awareness of the problem and high-profile...

Instagram Privacy Changes Start Clock Ticking for Users Who Want to Opt-Out

Instagram users have some soul searching to do between now and Jan. 16 when new terms of service kick in that give the photo-sharing social network the right to sell personal photos without the user’s permission or compensating them. The most startling change reads: “To help us deliver interestin...

[TOR v0.2.3.25] Virtual Network Tunneling Tool

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...

PASSTEAL Malware Lurking on File Sharing Sites

Variants of the PASSTEAL malware are propagating by masquerading as key generators for paid applications, popular e-books, and other software on file sharing services, according Alvin John Nieto, a threat response engineer at TrendMicro’s TrendLabs. PASSTEAL, as its name suggests, is a piece of...

Fedora 17 : openstack-glance-2012.1.2-2.fc17 (2012-18085)

Fix Glance Authentication bypass for image deletion - Update to stable/essex 2012.1.2 including... - Support zero-size image creation via the v1 API - Allow admins to share images regardless of owner - Log sensitive store info, rather than exposing over API - Fix the qpidheartbeat option to avoid...

Bulgarian torrent tracker forum hacked and accused of collecting user IP

A Russian hacker going by name - "kOS" hack into the Bulgarian torrent tracker "Arenabg" website https://forum.arenabg.com/ and leak the complete database of their forum and accused of collecting IP of users like PirateBay. Hacker said, "Why I hack this tracker? Because they store IP information...

Adequate Attack Data and Threat Information Sharing No Longer a Luxury

BOSTON – While some industry groups such as the Financial Services Information Sharing and Analysis Center FS-ISAC and cross-industry groups such as the Advanced Cyber Security Center ACSC facilitate the exchange of threat information, for the most part organizations are still hamstrung by legal...

Guadeloupe National Domain registrar hacked, Twitter & Google domain credentials leaked

Guadeloupe is a Caribbean island located in the Leeward Islands, in the Lesser Antilles. Today a hacker going by name "UR0B0R0X" claimed to hack into the "Network Information Center Guadeloupe" nic.gp, which is Guadeloupe National Domain registrar having control over domains of big companies like...

Dimensions social sharing system word vulnerability-vulnerability warning-the black bar safety net

Brief description: Profile filter is not strict, resulting in the word arbitrary code execution. Detailed description: Profile filter is not strict, the user-submitted code is saved, the template cache after the read again when the direct execution of user code! Vulnerability to prove: ! ! Repair...