White House Cyber-Security Strategy Could Guard Health Care Payments !

The National Strategy for Trusted Identities in Cyberspace aims to help consumers pay for services such as health care more securely and avoid identity theft. Recent guidelines issued by the White House on cyber-security could provide an impetus for secure online bill paying in health care,...

Dept. of Commerce Unveils the National Strategy for Trusted Identities in Cyberspace

The U.S. Chamber of Commerce held a press conference this morning to unveil details surrounding a National Strategy for Trusted Identities in Cyberspace, or NSTIC as they are calling it. While the press conference was somewhat vague in terms of specifics, the initiative appears to be designed to...

IEEE members database hacked !

A hacker stole the credit card details of over 800 members of the IEEE Institute of Electrical and Electronics Engineers last December, according to its law firm. A team of IEEE-appointed forensic investigators "concluded that a file containing customer credit card information had been deleted on...

OddJob Trojan Piggybacks On Legitimate eBanking Sessions

A new Trojan leads online banking customer into thinking they have logged out of their sessions when in fact they remain logged in. Discovered by Trusteer researchers, this completely new piece of malware represents the evolution of online attacks in the ways in which it integrates new and old...

Online security losing cyber battle !

THE internet was never meant to do sensitive banking transactions, cyber criminals are winning the war against online security and Australia's easy going nature is making us vulnerable targets to ever-more sophisticated internet thugs. That was San Francisco-based internet security watcher and...

Lush Cosmetics Australian website hacked !

The Australian and New Zealand shopping site of cosmetics retailer Lush has been hacked just weeks after a similar breach occurred on the UK site. Credit card details and other intimate information of shoppers have been exposed. If you visit the Lush Cosmetics Australian website you will find a...

Zeus Targeting Online Payment Services

The Zeus Botnet continues to evolve and shift in focus from its traditional targets, banks and their customers, to other money-handling institutions like electronic money and online payment systems, according to a new report. The shift has been going on for months and likely follows policy moves ...

US Enhancing Online Security !

U.S. Commerce Secretary Gary Locke and White House Cybersecurity Coordinator Howard Schmidt announced this month plans to create a National Program Office to help foster an environment in which sensitive online transactions can be carried out with greater levels of trust. The announcement was mad...

Visa: New Tools Could Spot Additional $1.5b In Fraud

Credit card giant Visa Inc. said on Thursday that an update to its anti-fraud technology will make it easier to spot sophisticated credit card fraud that spans national borders. Visa said the update amounted to a major upgrade of Visa Advanced Authentication, the company’s real time risk scoring...

Four arrested in 1st cyber fraud in J&K !

Srinagar: A Nigerian national is under the scanner of Jammu and Kashmir Police while four other persons have been arrested in the first case of cyber bank fraud in the Kashmir Valley. Four persons, including two residents of Mumbai, were arrested last week in connection with a case of bank fraud...

Mastercard says,We're recovering from Wikileaks related attacks !

Mastercard said Thursday that it is recovering from a series of attacks related to the Wikileaks flap. In a statement, Mastercard said: MasterCard has made significant progress in restoring full-service to its corporate website. Our core processing capabilities have not been compromised and...

4) "S" stands for Safe(r)

Browsing a Web site for offers is one thing. Actually buying merchandise is another matter entirely. Online transactions should be carried out securely, using encryption to scramble the sensitive financial data you’re sending to the merchant’s Web site and that they’re sending to you. Before...

Researcher Develops Small Device to Intercept, Modify Electronic Payments

With bank fraud and attacks against financial institutions and online banking applications having turned into an epidemic, researchers, banks and other concerned parties have been looking for new ways to protect the integrity of financial transactions. A researcher at the University of Cambridge...

Remote Code Execution Vulnerabilities in SChannel (980436)

This host is missing a critical security update according to Microsoft Bulletin MS10-049. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows MSDTC Denial of Service (CVE-2006-1184)

The Microsoft Distributed Transaction Coordinator MSDTC is a transaction infrastructure for distributed systems. It is implemented on the Windows platform as a service. The MSDTC facilitates the interactions between independent programs in a distributed system. A denial of service vulnerability...

SA-CONTRIB-2010-077 - Sage Pay (former Protx) Direct Payment Gateway for Ubercart - Information Disclosure

The Sage Pay Direct Payment Gateway for Ubercart ucprotxvspdirect processes credit card transactions in Ubercart stores using the Sage Pay Direct service. The module may show remote 3-D Secure pages to the user in an iframe when their bank supports the Verified by Visa or MasterCard SecureCode...

AdMan Standalone Ad Server Cross Site Scripting / SQL Injection

=========================================================== AdMan Standalone Ad Server SQLi AND XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Easy room search system type injection exploit-vulnerability warning-the black bar safety net

This system is a housing transactions, rental of the system. Vulnerability file: searchsell. asp; the searchhire. asp; the searchbuy. asp conn. asp Keyword inurl: efwmanager; the inurl: the searchhire. asp; and inurl: in subhack. asp? This keyword is a bit much By Macromedia Dreamweaver the searc...

Researchers Discover New ACH Banker Trojan

Malware hunters at SecureWorks have intercepted a new banker Trojan being used by cyber-criminals to steal financial credentials from banks in the U.S. The Trojan, dubbed “Bugat,” targets Automated Clearing House ACH and wire transfer transactions by small- and mid-sized business in the U.S., muc...

Small Biz Targeted by Banking Criminals

The American Bankers Association and the FBI are advising small and midsize businesses that conduct financial transactions over the Internet to dedicate a separate PC used exclusively for online banking as they ahve become targets of banking malware. Read the full article. The Last Watchdog...