Spear Phishing Remains Preferred Point of Entry in Targeted, Persistent Attacks

Persistent targeted attacks against the government, financial services, manufacturing and critical infrastructure take on many characteristics. Attackers can have different backgrounds and motivations, and the tools they use can range from commodity malware to zero-day exploits. One characteristi...

ClubHack 2012 Hacking and Security Conference

Carrying reputation of being India's choicest and oldest hacker's conference, Team ClubHack proudly brings the 6th edition of ClubHack Hacking and Security Conference with more exciting activities. ClubHack 2012 hacker's convention will be held from Nov. 30th to Dec 3rd, 2012 in Pune, India...

FBI Moves to Identify More Hackers

The FBI says it is now making a push to not just stop cybercrime but to identify the attackers behind the phishing, credit card fraud and other campaigns that cost consumers and enterprises billions of dollars each year. The bureau is the lead agency charged with addressing cybercrime in the U.S...

HackAdemy – Free eLearning Platform

I talked with Marius Corici Co-founder and CEO for Hack a Server project about Hackademy – eLearning Platform. What is HackAdemy? It is a free, eLearning platform specializing in InfoSec courses. HackAdemy is a place where people can learn and teach eachother about online security using principle...

Info of 55K Patients Stolen from Indianapolis Cancer Practice

The Cancer Care Group, an oncology practice based in Indianapolis, claims it will improve its storage and data security practices going forward after a laptop containing the sensitive information of about 55,000 of its patients was stolen last month. The laptop, which contained backup media from...

Indian Officials Get Training from Hackers who cracked CERN's IT system

Two Argentina-based cyber security experts - Chris Russo and Fernando Viacanel, who claimed to have cracked the security code of IT systems involved in the discovery of 'God Particle', today conducted training sessions for Indian government officials. Both the hackers are partners of IT security...

Federal Commission Phished, Employees' Information Leaked

The U.S. Commodity Futures Trading Commission CFTC, an independent federal agency that helps regulate futures and option markets, was hit with a data breach last month according to an e-mail statement from the Commission that circulated online late last week. The e-mail confirmed an attacker was...

Sielco Sistemi Winlog 2.07.14 Buffer Overflow

Exploit for windows platform in category dos / poc !/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.14 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link:...

Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow

!/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.16 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link: http://www.sielcosistemi.com/en/download/public/winloglite.html Version: 2.07.14...

Sielco Sistemi Winlog 2.07.14 Buffer Overflow

!/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.14 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link: http://www.sielcosistemi.com/en/download/public/winloglite.html Version: 2.07.14...

Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow

Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow !/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.16 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link:...

国内优秀的JAVA(JSP)内容网站管理系统.FCK上传漏洞

简要描述： 国内优秀的JAVAJSP内容网站管理系统.FCK上传漏洞 详细说明： 漏洞地址: www.域名/thirdparty/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/jsp/connector.jsp 漏洞证明： 使用JEECMS系统的网站FCK漏洞地址： 1、中国物流信息中心：http://www.clic.org.cn/...

Microsoft Office 2008 SP0 (Mac) - RTF pFragments

Microsoft Office 2008 SP0 Mac - RTF pFragments RTF Pfragments exploit for MAC office 2008 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Advanced Hacking Trainings - http://training.aslitsecurity.com Web - http://www.aslitsecurity.com/ Blog -...

WICD 1.7.1 - Local Privilege Escalation

!/usr/bin/python wicd = 1.7.1 0day exploit discovered on 4.9.12 by InfoSec Institute student For full write up and description go to http://www.infosecinstitute.com/courses/ethicalhackingtraining.html import sys import os import time import getopt try: from wicd import dbusmanager except: print "...

Mutillidae 2.1.17 : Born to be Hacked

Mutillidae 2.1.17 : Born to be Hacked A few days ago an update "Mutillidae" version 2.1.17 was released. Mutillidae is a free, open source web application provided to allow security enthusiest to pen-test and hack a web application. Mutillidae can be installed on Linux, Windows XP, and Windows 7...

BlueCross BlueShield to Pay $1.5m for HIPAA Violation

Blue Cross Blue Shield of Tennessee agreed to pony up $1.5 million to the U.S. Department of Health and Human Services HHS for a HIPAA violation in 2009, according to a ComputerWorld report. This payment is the settlement of a violation of the Health Insurance Portability and Accountability Act...

State of SCADA Security 'Laughable', Researchers Say

CANCUN–For people who follow the developments in the security and research communities, it’s easy to get discouraged by the current state of affairs, given the rash of serious hacks on certificate authorities, military networks and companies such as RSA and VeriSign. But, if you think things are...

Microsoft Aims to Make Life Harder, More Expensive For Attackers

MIAMI BEACH–It’s been a decade now since Microsoft began focusing on product security as a top priority and there have been a lot of successes and some failures along the way. But in that time, one of the things that most definitely has changed as a result of the Trustworthy Computing program is...

Dartmouth Cyber Security Chief: More Attention Needed To Human Element In Security

Shari Lawrence Pfleeger wrote the book on cyber security – or should we say “books.” The longtime researcher and expert has authored numerous textbooks on everything from software engineering, to the application of metrics in software development, to computer security. The head of research for th...

FBI Likely to Get More Cybercrime Agents

The FBI is one of a handful of U.S. agencies tasked with investigating computer crimes and one of the many roadblocks that has stood in the way of more successful cases and prosecutions is a lack of resources, mostly in the form of trained agents. It looks like the bureau will be getting the mone...