Persistent, Covert Malware Causing Major Damage

LAS VEGAS–Security technology and practice have advanced quite a bit in the past few years, but one thing that has become clear is that whatever gains have been made are just not keeping pace with the innovation of attackers. The advances being made by malware authors and crimeware gangs are...

The Persistent Adversary: Targeted Hacking Attacks and What They Mean For Your Business

Join Dennis Fisher, Ryan Naraine and their special guests, Oliver Day, Andy Ellis, and Robert Hansen as they take a look at the rising sophistication of real-world, web-based cyber attacks from the offensive, defensive and end-user perspective. / //These variables control the player launch proces...

Joomla! Component Techjoomla SocialAds - Persistent Cross-Site Scripting

Joomla! Component Techjoomla SocialAds - Persistent Cross-Site Scripting 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comsocialads Persistent Xss Vulnerability Date : july 3,2010 Critical Level : HIGH...

Joomla Component com_socialads Persistent Xss Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component comsocialads Persistent Xss Vulnerability ===========================================================...

Joomla! Component Techjoomla SocialAds - Persistent Cross-Site Scripting

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comsocialads Persistent Xss Vulnerability Date : july 3,2010 Critical Level : HIGH vendor URL :http://techjoomla.com/ Author : Sid3^effects aKa HaRi specia...

Regional Bank Trojans Slip Under the Radar

Cybercrooks have developed regionally-targeted banking Trojans that are more likely to slip under the radar of security defenses. Read the full article. The Register...

Eddie Schwartz on Advanced Threats

Dennis Fisher talks with Eddie Schwartz, CSO of NetWitness, about a new study the company did on the level of awareness of advanced threats in the enterprise and what organizations are doing to respond to the latest targeted attacks. Podcast audio courtesy of sykboy65 Subscribe to the Digital...

Why the Disclosure Debate Doesn't Matter

As the events of recent weeks have shown, there is no better way to start a dumpster fire of an argument among a group of security people than to bring up the hideous, threadbare topic of full disclosure. No one is ambivalent about it; everyone has an opinion, and usually a strong one. But what’s...

Mike Mimoso on Targeted Attacks and the Google-Microsoft Controversy

Dennis Fisher talks with Mike Mimoso of SearchSecurity.com and Information Security magazine about the current spate of highly targeted attacks, the silliness of the term cyberwar and the controversy surrounding the disclosure of the Windows Help Center flaw. Podcast audio courtesy of sykboy65...

Lab Matters: Inside Targeted Attacks

Kaspersky Lab anti-malware researchers Costin Raiu and Magnus Kalkuhl field questions on targeted attacks, how they work and how businesses can protect themselves...

The Economics of Targeted Attacks

CAMBRIDGE–Researchers and security vendors have been telling us for years now that attackers have developed sophisticated, targeted attacks designed to separate victims from their money as quickly and cleanly as possible. If that’s so, why aren’t all of us being compromised on a regular basis? A...

New Tabbed Browsing Phishing Attack Exploits User Trust

A researcher has developed a new type of phishing attack that takes advantage of the way that browsers handle tabbed browsing and enables an attacker to use a script running in one tab to completely change the content in another tab. The attack, demonstrated by Aza Raskin of Mozilla, could be use...

Ten Years After the LoveBug Worm

The LoveBug worm, a simple email that spread a virus to millions of computers a decade ago, paved the way for many of today’s social engineering and targeted cyber attacks. Read the full article. CSO...

Researcher Demos PDF Counter Attacks

Targeted attacks might be tough to prevent, but what if you could fight back against the attacker once he’s infiltrated your network? A researcher has come up with a proof-of-concept PoC that does just that by finding vulnerabilities in the attacker’s malware and using it against him. Read the fu...

NYTimes Report: Attackers Hit Google's Password System

The New York Times is reporting that Google’s password system was compromised during a targeted attack last December. The system, called Gaia or Single Sign-On, controls access by millions of users worldwide to almost all of the company’s Web services, including e-mail and business applications...

Gunter Ollmann on Opt-In Botnets and Targeted Attacks

Dennis Fisher talks with Gunter Ollmann, VP of research at Damballa, about the new generation of hacktivism and opt-in botnets, as well as the trend toward targeted attacks in corporate environments. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Microsoft Plugs IE Drive-By Download Flaws

Microsoft today shipped a cumulative Internet Explorer update with patches for 10 security holes, including a drive-by download vulnerability that’s already being used in malware attacks. The critical MS08-018 update patches security holes that could lead to code execution attacks on all versions...

Chilly CMS Persistent XSS Vulnerability

Exploit for unknown platform in category web applications ======================================= Chilly CMS Persistent XSS Vulnerability ======================================= Vulnerability found in- Admin module email email protected company aksitservices Credit by Pratul Agrawal Software...

The Future of Botnets

A lot of people in the security industry are paid to think like attackers: pen testers, security consultants, software security experts. But some of these people have never met an actual black hat, so much of their work is necessarily based on what they think attackers might do in a given...

Ane CMS CSRF Vulnerability

Exploit for unknown platform in category web applications ========================== Ane CMS CSRF Vulnerability ========================== Vulnerability found in- Admin module Credit by Pratul Agrawal Software AneCMS Category CMS / Portals Plateform php Proof of concept Targeted URL:...