CVE-2009-4705: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Twitter Search twittersearch extension before 0.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Paul Judge on Twitter Crime and Web Security

Dennis Fisher talks with Paul Judge of Barracuda Networks about the company’s new report on Twitter phishing trends, search engine poisoning, Web security and what can be done about the spam pandemic. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Twitter Deploys New Anti-Phishing Service

Twitter is launching a new service designed to prevent users from being tricked into visiting malicious Web sites after clicking on shortened URLs in direct messages or Twitter messages. The new Twiiter anti-phishing service, which launched Tuesday, essentially serves as a proxy between users and...

ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability

ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-025 March 9, 2010 -- CVE ID: CVE-2010-0263 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- Vulnerability Details: This...

Another Twitter Phishing Attack with Video

Twitter users were being hit on Wednesday with what seems to be the second phishing attack this week, according to researchers. The latest attack features a message that says “This you????” followed by a link that leads to a fake Twitter log-in page. Read the full article. cnet...

Twitter Hit By Phishing Attack

Twitter users were hit by potent phishing attacks over the weekend that have already led to spam runs from compromised accounts. Read the full article. The Register...

Winter Olympic Search Results Exploited by Malware

Cybercriminals have been capitalizing on the world’s interest in the Winter Olympics in Vancouver to spread malware, experts warned. Attackers have been using Twitter and black hat search engine SEO optimization tactics to promote fake Olympics videos that are spreading malware. Read the full...

Drupal 6.15 Twitter module v 6.x-2.6 clear text Vulnerability

Exploit for unknown platform in category web applications ====================================================================================== Drupal 6.15 Twitter module version 6.x-2.6 clear text credential storage vulnerability...

Drupal Twitter Module Credential Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The full text of this advisory can also be found at http://www.madirish.net/?article=447 Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...

Infested Torrent Sites Caused Twitter PW Reset

Twitter revealed more details about the phishing attacks that caused the company to reset the passwords on some user accounts Feb. 2. Read the full article. eWEEK...

Hacked Twitter Accounts Corral Cash

According to researchers, cybercriminals are trying to sell hacked Twitter user names and passwords online for hundreds of dollars and as much as $1000. Read the full article. Computerworld...

Researcher Warns of Twitter Security Flaw

A flaw in Twitter’s website has left the login credentials of its users vulnerable to hackers, according to a security researcher who has asked the social media company to fix the problem. Read the full story Reuters...

Top Facebook, Twitter Hacks From 2009

Here, in chronological order, are the top 10 security and privacy stories concerning Facebook and Twitter from the past year. Read the full article. Network World...

Twitter, Google Calendar Open to XSS Holes

In a proof of concept, researcher Nir Goldshlager demonstrated cross-site scripting XSS vulnerabilities in Google Calendar and Twitter that he said could be used to steal cookies and session IDs. Read the full article. eWEEK...

Joomla Countries SQL Injection

Joomla Component comcountries SQL Injection Vulnerability Author : FL0RiX Name : comcountries Greez : Deep-Power, PyskE,Septemb0x,KaCaK Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : http://www.gocvg.com/index.php?option=comcountries&locat=SQL INJ. Bug Fix...

All About Brittany on Twitter

The day before yesterday, we saw reports about how search engine queries for “Brittany Murphy” returned sites containing links to malware. So it’s the usual situation, with the bad guys exploiting the death of a famous person, just like they did with Michael Jackson. Yesterday we identified some...

Twitter Reveals More on DNS Attack

Attackers got their hands on a valid set of Twitter credentials and used them to compromise the DNS records. Read the full article. eWEEK...

Twitter Outage A DNS Hack

Microblogging site Twitter went offline for a while Friday after hackers calling themselves the Iranian Cyber Army apparently managed to change DNS records, redirecting traffic to another Web page. Read the full article. Computerworld...

Twitter Domain API Back in Malware Fray

Malware writers have revamped code that uses a popular Twitter command to generate hard-to-predict domain names, a technique that brings stealth to their drive-by exploits. Read the full article. The Register...

SSL Flaw Opens Up Twitter MiTM Attack

The vulnerability in the design of the SSL/TLS protocol revealed earlier this month can apparently be used to carry out attacks in practice. On his blog, student Anil Kurmus reports that he was able to steal a Twitter password by using a man-in-the-middle attack. Until now it had been assumed tha...