Bridging the Skills Gap with Trend Micro’s Capture the Flag (CTF) Competition

We all know the IT security industry is suffering from chronic skills gaps and shortages around the world. In the US things are no different, with an estimated talent shortfall of around 40,000 jobs for information security analyst roles alone. While various initiatives have been proposed, few ha...

Code injection

Tokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not validate SSL certificates...

CVE-2016-1184

Tokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not validate SSL certificates...

CVE-2016-1184

Tokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not validate SSL certificates...

CVE-2016-1184

This CVE concerns the Tokyo Star bank App for Android before 1.4 and iOS before 1.4 failing to validate SSL server certificates, enabling potential man-in-the-middle eavesdropping. Affected apps are Android v1.3 and earlier and iOS v1.3 and earlier. Root cause: lack of server certificate validati...

CVE-2016-1184

Tokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not validate SSL certificates...

The Bank of Tokyo-Mitsubishi UFJ for Android vulnerable to SSL/TLS downgrade attack

Overview The Bank of Tokyo-Mitsubishi UFJ for Android may be exploited by SSL/TLS downgrade attack. The Bank of Tokyo-Mitsubishi UFJ for Android provided by The Bank of Tokyo-Mitsubishi UFJ, Ltd. tries to communicate with a server via TLS v1.2. However, when a response from the server indicates S...

Keen Lab Takes Down iPhone 6S, Nexus 6P, at Mobile Pwn2Own

Hackers identified a series of vulnerabilities in Android and iOS to take down a Google Nexus 6P and an Apple iPhone 6S this week at Mobile Pwn2Own. The mobile version of the popular hacking challenge, put on by Trend Micro and Tipping Point’s Zero Day Initiative, was held in tandem with the...

Chinese Hackers won $215,000 for Hacking iPhone and Google Nexus at Mobile Pwn2Own

The Tencent Keen Security Lab Team from China has won a total prize money of $215,000 in the 2016 Mobile Pwn2Own contest run by Trend Micro's Zero Day Initiative ZDI in Tokyo, Japan. Despite the implementation of high-security measures in current devices, the famous Chinese hackers crew has...

tokyo-co2down.jp XSS vulnerability

Vulnerable URL: http://www.tokyo-co2down.jp/coolnetcms/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Tokyo Star bank App Information Disclosure Vulnerability

Tokyo Star bank App for Android and iOS is a suite of banking apps for the Android and iOS platforms from Tokyo Star Bank in Japan. The Tokyo Star bank App for Android and iOS fails to validate server-side SSL certificates, allowing an attacker to exploit this vulnerability to conduct...

Tokyo Star bank App fails to verify SSL server certificates

Overview Tokyo Star bank App provided by The Tokyo Star Bank, Limited fails to verify SSL server certificates. Yuji Tounai of NTT Com Security Japan KK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...

JVN#00272277: Tokyo Star bank App fails to verify SSL server certificates

Tokyo Star bank App provided by The Tokyo Star Bank, Limited fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided...

Tokyo Street Racing - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Tokyo Street Racing published at the 'play' market has multiple vulnerabilities...

Tokyo VR for Cardboard - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Tokyo VR for Cardboard published at the 'play' market has multiple vulnerabilities...

This is How Tokyo Police Catching Rogue Drones in the Sky

So how do you catch rogue drones that take your sky? With another Giant Drone, of course! This is exactly how the Tokyo Metropolitan Police Department is catching unwanted and potentially dangerous drones flying over the city, according to Japan Today. The department is launching an anti-drone...

tokyo-horei.co.jp XSS vulnerability

Vulnerable URL: http://www.tokyo-horei.co.jp/shop/goodslist.php?booktitle=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.03.2016 Latest check for patch:| 03.03.2016 02:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Mt.Gox Bitcoin Exchange CEO Arrested by Japanese Police

Remember Mt.Gox? Once the world’s largest Bitcoin exchange… ...then in early 2014, Tokyo-based Mt.Gox Bitcoin exchange filed for bankruptcy saying it lost some 8,50,000 Bitcoins worth $64 Million to hackers and suddenly went dark with no explanation. Last Friday, Mark Karpeles, the former CEO of...

CVE-2012-4019

Cross-site scripting XSS vulnerability in tokyobbs.cgi in Come on Girls Interface CGI Tokyo BBS allows remote attackers to inject arbitrary web script or HTML via vectors related to the error page...

Cross site scripting

Cross-site scripting XSS vulnerability in tokyobbs.cgi in Come on Girls Interface CGI Tokyo BBS allows remote attackers to inject arbitrary web script or HTML via vectors related to the error page...