Former Zero Day Initiative Researchers Form New Firm Exodus Intelligence

In case you thought that the mass exodus of researchers from TippingPoint’s Zero Day Initiative in recent months meant that the demand for third-party vulnerability markets was waning, fear not. Several former members of the ZDI team have come back together to form a new firm called Exodus...

[ppt] Hack ASP.Net website

Слайды рус: Слайды EN: Видео внизу выбрать 17:01: Владимир Кочетков, Взломать Web-сайт на ASP.NET? Сложно, но можно! Обзорная презентация о проведении атак на ресурсы использующие технологию ASP.Net, рекомендую смотреть с видео в фоне. Анонс: Цитата: Анализ защищенности веб-приложений ASP.NET/MVC...

VUPEN Says Rumors of Hack Are False

Claims surfaced earlier this week that the French security firm VUPEN, which is known for selling zero-day vulnerabilities to third parties, had been compromised and more than 100 of the company’s secret bugs had been leaked. However, VUPEN’s CEO said that the claims were totally false and there...

Arms Race In Zero Days Spells Trouble For Privacy, Public Safety

Editor’s Note: This is the second of a two-part podcast with independent security researcher Chris Soghoian. In the first part of our podcast with independent security researcher Chris Soghoian, we talked about the way that the proliferation of “free” applications have forced consumers into the...

EFF Says Cyber Security Bills Open Door To Government, Corporate Abuse

The Electronic Frontier Foundation EFF is sounding alarms about a collection of overly vague cyber-security bills making their way through Congress. EFF looked at two bills making their way through Congress: The Cybersecurity Act of 2012 S. 2105, sponsored by Senator Joseph Lieberman I-CT of...

Ongoing Targeted Attack Campaign Going After Defense, Aerospace Industries

Researchers have identified a strain of malware that’s being used in a string of targeted attacks against defense contractors, government agencies and other organizations by leveraging exploits against zero-day vulnerabilities. The attacks may have been going on since 2009 in some form and the...

stoneware webnetwork6 - Multiple Vulnerabilities

Stoneware WebNetwork6 Vulnerability Assessment CVE-2012-0285 – XSS CVE-2012-0286 - CSRF Conducted by: Leland Public Schools Stoneware Customer Jacob Holcomb Network Engineer for LPS Conducted for: Leland Public Schools Purchaser of WebNetwork product. Test was to assure cloud security Stoneware...

stoneware webnetwork6 - Multiple Vulnerabilities

stoneware webnetwork6 - Multiple Vulnerabilities Stoneware WebNetwork6 Vulnerability Assessment CVE-2012-0285 – XSS CVE-2012-0286 - CSRF Conducted by: Leland Public Schools Stoneware Customer Jacob Holcomb Network Engineer for LPS Conducted for: Leland Public Schools Purchaser of WebNetwork...

Stoneware WebNetwork6 Multiple Vulnerabilities

Exploit for jsp platform in category web applications Stoneware WebNetwork6 Vulnerability Assessment Conducted by: Leland Public Schools Stoneware Customer Jacob Holcomb Network Engineer for LPS Conducted for: Leland Public Schools Purchaser of WebNetwork product. Test was to assure cloud securit...

Revamped Pwn2Own to Offer $105K in Prizes, Cash From Google for Chrome 0-Days

The Pwn2Own contest at the CanSecWest conference has become one of the landmark events on the calendar each year, as researchers gather with nervous vendors in a tiny room to see who can own which browser on which platform and how quickly. But this year’s contest will have a much different look...

SecurID Attack Was the Work of 'Very Experienced' Attackers

MALAGA, SPAIN–An RSA official on Friday offered more details of the attack the company suffered earlier this year in which thieves made off with key data related to the RSA SecurID two-factor authentication system. The attack, he said, targeted just four employees and was executed by a group he...

Dedicated Attackers Will Always Win

Despite the multitude of anti-exploit mitigations built into modern operating systems ASLR, DEP, Sandboxing, hackers were able to compromise every major target this year. This is confirmation that dedicated attackers with the right financial motivation, will almost always find a way to break into...

Hacker Report 'High Risk' Flaws in Safari Browser

Over the last two weeks, security researchers have reported eight different zero-day vulnerabilities in Apple’s Safari browser. Details of these vulnerabilities, all rated “high risk,” have been sold to Tippingpoint’s Zero Day Initiative ZDI, a program that purchases the rights to vulnerability...

The Ryan & Roel Show Episode 9

Adobe vs. Microsoft on Security Response – Fri, March 6, 2009 Ryan and Roel discuss the latest zero-day vulnerabilities and attacks affecting Adobe and Microsoft customers and compare the response from the two software vendors. Download episode...

Jeff Moss on the vulnerability economy

Jeff Moss, the founder of DEFCON and Black Hat, discusses the unfolding of the vulnerability economy. Nowadays, instead of exposing high profile zero-day vulnerabilities at conferences, many researchers opt for selling their discoveries on a growing market...