2426 matches found
Black Hat: Phishing E-Mail Scare A False Alarm
The annual Black Hat Briefings hacker conference got off to a rocky start Sunday after thousands of registered delegates to the Black Hat Briefings hacker conference in Las Vegas received a fishy smelling “account password reset” e-mail that contained a suspicious URL. But a message from conferen...
Researchers bypass Google Bouncer Android Security
Researchers bypass Google Bouncer Android Security Google's Android platform has become the most popular mobile operating system both among consumers and malware writers, and the company earlier this year introduced the Bouncer system to look for malicious apps in the Google Play market. Bouncer,...
Nine Percent of Websites May be Malicious
Just fewer than 10 percent of websites serve some sort of malicious purpose, with an additional nine percent of sites being characterized as “suspicious” by Zscaler in a new research report. Zscaler ran 27,000 website URLs through a tool they developed to assess the security of websites and give...
Microsoft Internet Explorer CVE-2012-0172 VML Style Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferenci...
Microsoft Internet Explorer CVE-2012-0010 Cross Domain Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because it fails to adequately validate user-supplied data during copy and paste operations. An attacker can exploit this issue to view content from a browser window in another domain or securi...
In UK Analytics Software Provides Enhanced (Online) Interrogation For Fraud Suspects
A recent report by the UK’s Serious Organized Crime Agency SOCA shows that the Agency is full speed ahead with plans to use powerful data analytics tools to help find and prosecute everything from money laundering to illegal gambling to 419 scams. The 2011 Annual Report on Suspicious Activity...
Scammers Borrow Facebook 'Likes' From Top Sites To Promote Scams
Call it a new twist on Facebook “Like” jacking. Researchers at the firm Zscaler say that scammers are embedding Facebook “Like” widgets from top ranked Web brands and in Web pages used to promote online scams or distribute malware. The widgets make it appear as if tens- or hundreds of thousands o...
Reports Point to Credit Card Processor Breach in Europe
The Romanian Banks Association has issued a warning to credit card users in that country to be on the lookout for suspicious charges, after the Agency received notice of a possible breach at European credit card processor.PDF The warning followed a similar notice from CEC Bank on Wednesday that i...
Microsoft Excel CVE-2011-3403 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability due to a memory-corruption error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the...
CrySyS Duqu Detector Open source Toolkit Released
CrySyS Duqu Detector Open source Toolkit Released Two weeks ago Researchers at the Laboratory of Cryptography and System Security CrySyS in Hungary confirmed the existence of the zero-day vulnerability in the Windows kernel, according to security researchers tracking the Stuxnet-like...
Facebook And Twitter Erode Your Company's Security From Within. Here's How To Stop It.
The “up side” of social networks like Facebook, Twitter and G+ are well known. But the down side of these networks for both users and for organizations that employ them are only now becoming clear. Worms, malware and spam are just the beginning of the security problems engendered by the social ne...
ssl-google-cert-catalog NSE Script
Queries Google's Certificate Catalog for the SSL certificates retrieved from target hosts. The Certificate Catalog provides information about how recently and for how long Google has seen the given certificate. If a certificate doesn't appear in the database, despite being correctly signed by a...
NetworkMiner 1.1 - Network Forensic Analysis Tool (NFAT) Released
NetworkMiner 1.1 - Network Forensic Analysis Tool NFAT Released NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting...
NetworkMiner 1.1 - Network Forensic Analysis Tool (NFAT) Released
NetworkMiner 1.1 - Network Forensic Analysis Tool NFAT Released NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting...
Microsoft SharePoint 'EditForm.aspx' CVE-2011-1890 Script Injection Vulnerability
Description Microsoft SharePoint is prone to a script-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow...
Microsoft Internet Explorer Event Handlers Cross Domain Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue to access local files or content from a browser window in another domain or security zone. This may allow the attacker to obtain sensitive information that m...
Weak Passwords Banned from Hotmail
Microsoft’s email service, Hotmail, is implementing tougher standards for user passwords to combat the increasing occurrence email account hijackings. The company said Hotmail users will no longer be allowed to use common, easily guessable passwords like “password,” “12345,” and “qwerty,” which a...
WordPress Advises Password Reset After Finding Suspicious Commits
WordPress, the popular blogging platform, is requiring users to change their account passwords after members of the company’s security team discovered cleverly disguised backdoors in some of the platforms most popular plug-ins. AddThis, WPtouch, and W3 Total Cache caught the eye of team members...
Microsoft Excel Array Out Of Bounds Access CVE-2011-1274 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability due to a boundary condition error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the...
Microsoft Internet Explorer Layout Uninitialized Memory Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because of a use-after-free error. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the affected application. Failed attacks will cause denial-of-service...