Botnet Herders Can Command Via Twitter

A security researcher has unearthed a tool that simplifies the process of building bot armies that take their marching orders from specially created Twitter accounts. Read the full article. The Register...

Watch for Fake Twitter Support Malware

Almost a week ago, Twitter began warning its users about fake Twitter Support emails. Since then, a couple of variants of the email have surfaced, with small differences in the text “unreaded messages”, “information messages”. Read the full article. Help Net Security...

Expected Twitter Ads Should Get Malware Infusion

Miscreants are highly likely to take advantage of Twitter’s move towards making money through ad-supported micro-blogging updates, security watchers warn. Read the full article. The Register...

ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability

ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-067 April 6, 2010 -- CVE ID: CVE-2010-0529 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Fake iPad, iPhone Giveaways Hit Twitter

Not surprisingly, spam using the Apple iPad as a lure to get users to give up personal or credit card information has began to make rounds of Twitter users. Read the full article. Help Net Security...

ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability

ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-055 April 5, 2010 -- CVE ID: CVE-2010-0095 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- Vulnerabili...

ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability

ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-051 April 5, 2010 -- CVE ID: CVE-2010-0094 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime --...

ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability

ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-045 April 2, 2010 -- CVE ID: CVE-2010-0526 -- Affected Vendors: Apple -- Affected Products: Apple OS X -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Moscow Bombings, TJX Hacker Spur Black Hat Campaigns

Spammers and malware writers have wasted no time in taking advantage of Monday’s bombings in Moscow, opening up a campaign on Twitter to point users to malicious sites. The pair of suicide bombings that hit the Metro system in Moscow Monday morning inevitably led to a flood of messages on Twitter...

French Man Arrested for Hacking Twitter

On Thursday, investigators in France arrested an unemployed 25-year old man who appears to have been responsible for the spectacular attacks on Twitter accounts that included those of US President Barack Obama and pop singer Britney Spears. Read the full article. The H Security...

Cross site scripting

Cross-site scripting XSS vulnerability in the Twitter Search twittersearch extension before 0.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4705

Cross-site scripting XSS vulnerability in the Twitter Search twittersearch extension before 0.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4705

CVE-2009-4705 is an XSS vulnerability in the TYPO3 Twitter Search (twittersearch) extension for TYPO3, affecting versions before 0.1.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. No exploitation details are provided in the connected documents...

CVE-2009-4705

Cross-site scripting XSS vulnerability in the Twitter Search twittersearch extension before 0.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Paul Judge on Twitter Crime and Web Security

Dennis Fisher talks with Paul Judge of Barracuda Networks about the company’s new report on Twitter phishing trends, search engine poisoning, Web security and what can be done about the spam pandemic. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Twitter Deploys New Anti-Phishing Service

Twitter is launching a new service designed to prevent users from being tricked into visiting malicious Web sites after clicking on shortened URLs in direct messages or Twitter messages. The new Twiiter anti-phishing service, which launched Tuesday, essentially serves as a proxy between users and...

ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability

ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-025 March 9, 2010 -- CVE ID: CVE-2010-0263 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- Vulnerability Details: This...

Another Twitter Phishing Attack with Video

Twitter users were being hit on Wednesday with what seems to be the second phishing attack this week, according to researchers. The latest attack features a message that says “This you????” followed by a link that leads to a fake Twitter log-in page. Read the full article. cnet...

Twitter Hit By Phishing Attack

Twitter users were hit by potent phishing attacks over the weekend that have already led to spam runs from compromised accounts. Read the full article. The Register...

Winter Olympic Search Results Exploited by Malware

Cybercriminals have been capitalizing on the world’s interest in the Winter Olympics in Vancouver to spread malware, experts warned. Attackers have been using Twitter and black hat search engine SEO optimization tactics to promote fake Olympics videos that are spreading malware. Read the full...