Apple Adds Two-Factor Authentication to iTunes Accounts

Apple has introduced a new two-factor authentication system designed to help protect users’ iTunes and App Store accounts and prevent attackers or unauthorized users from taking over users’ accounts. The system is similar to the one that Google has implemented for Gmail, utilizing verification...

U.K. Internet service providers ordered to block three filesharing websites

The UK High Court has ordered BSkyB, BT, Virgin Media and three other UK broadband providers to block access to three music and movie file-sharing websites Kickass Torrents, H33T and Fenopy. Judge Richard Arnold said that these websites infringed 10 music companies copyrights on an industrial...

U.K. Internet service providers ordered to block three filesharing websites

The UK High Court has ordered BSkyB, BT, Virgin Media and three other UK broadband providers to block access to three music and movie file-sharing websites Kickass Torrents, H33T and Fenopy. Judge Richard Arnold said that these websites infringed 10 music companies copyrights on an industrial...

Sony Fined £250,000 By UK Over Failures in PlayStation Network Breach

Nearly two years after attackers began what turned out to be a long series of intrusions at Sony, most notably with the PlayStation Network data breach, authorities in the U.K. have fined the company the equivalent of almost $400,000 for not being careful enough with customer data. The Sony PSN...

Shylock banking malware spreads via Skype

The banking Trojan known as Shylock has been updated with new functionality, including the ability to spread over Skype. The program was discovered in 2011 that steals online banking credentials and other financial information from infected computers. Shylock, named after a character from...

Shylock banking malware spreads via Skype

The banking Trojan known as Shylock has been updated with new functionality, including the ability to spread over Skype. The program was discovered in 2011 that steals online banking credentials and other financial information from infected computers. Shylock, named after a character from...

Ask.com UK Cross Site Scripting

Exploit Title: ASK UK XSS Date: 11.03.2013 Author: TayfunBasoglu Tested: BackTrack 5 Platform: asp ------------------------------------------------------------------...

Under the hood of recent DDoS Attack on U.S. Banks

Incapsula security study reveals how a simple neglect in managing the administrative password of a small UK site was quickly exploited by Botnet shepherds operating obscurely out of Turkey to hurl large amounts of traffic at American banks. If you've been following the news, you are probably awar...

Narilam malware target Iran Financial SQL Databases

Symantec recently identified a database-corrupting piece of malware targeting systems mostly in Iran, but despite early speculation that it could be related to the likes of Stuxnet and Flame, it appears to be targeting small businesses rather than the country's infrastructure. Malware Dubbed...

Cross site scripting

Cross-site scripting XSS vulnerability in the Uk Cookie aka uk-cookie plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5856

The CVE-2012-5856 entry concerns the WordPress uk-cookie plugin (uk-cookie) and is a Cross‑Site Scripting (XSS) vulnerability. The vulnerability is described as a reflective XSS issue that allows remote attackers to inject arbitrary script/HTML via unspecified vectors in the plugin. Several conne...

Reflective XSS in uk cookie plugin

The plugin uk-cookie has a reflective XSS injection possible while using it. http://wordpress.org/extend/plugins/uk-cookie/ Script Used- scriptalert'hacked'/script CVE-2012-5856...

WordPress UK-Cookie Cross Site Scripting

The plugin uk-cookie has a reflective XSS injection possible while using it. http://wordpress.org/extend/plugins/uk-cookie/ Script Used- alert'hacked' CVE-2012-5856...

vBulletin vBay 11.9 SQL Injection

!/usr/bin/env python -W ignore::DeprecationWarning """ VBay input variable "type" being assigned with the datatype NOHTML. Using this data type allows malicious attacks to still be executed. At line 448, it is used within the insert into statement, without any sanitization. POC - You will need to...

WordPress Uk Cookie plugin <= 1.0 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability discovered by nauty.me04 in WordPress Uk Cookie plugin versions = 1.0 Solution Update the WordPress Uk Cookie plugin to the latest available version at least 1.1...

UNESCO Etxea website hacked by #NullCrew

Hacking group NullCrew deface UNESCO Etxea website unescoetxea.org, which is an internationally oriented NGOs working for the culture of peace, sustainable human development and human rights, at local and global levels. Deface page reads, "Welcome to the new front page of unesco etxea You have be...

UK Intelligence recruiting brilliant minds for eavesdropping social networks

Government eavesdropping and security agency GCHQ is developing new tools to sift through them for nuggets of useful data from Facebook, Twitter, LinkedIn, Google+, Pinterest. All of these are the source of valuable intelligence that the UK's intelligence agencies want to know about. During a vis...

Anonymous hacks 20 million accounts to promote Operation Jubilee

Anonymous hackers claimed that they compromise over 20 million user accounts worldwide this year to promote Operation Jubilee. Large community web sites were targeted to gain access to users' contact information. Many administrators denied that their databases were at risk while all their data wa...

Anonymous deface UK Police forum and Dating Portal

Yesterday Anonymous deface the UK Police Online web forum https://www.ukpoliceonline.co.uk and stole the private emails addresses of various members. The Metropolitan Police's e-Crime unit is investigating the hack and said that no computer system run by the police force had been hacked. The Hack...

Exclusive : Gary McKinnon wins 10-year fight against US extradition

Gary McKinnon has had his extradition blocked by the UK government. He has finally won his 10-year fight against extradition after Home Secretary Theresa May today halted proceedings on human rights grounds. The Home Secretary said medical reports warning the computer hacker would kill himself if...