News

FireEye Labs has identified a new Windows local privilege escalation vulnerability in the wild. The vulnerability cannot be used for remote code exec…

Atrax, yet another commercial crimekit on the black market, a malware able to exploit Tor and that implements numerous features including Bitcoin min…

The SIM (subscriber identity module) is a fundamental component of cellular phones.

Some 90 percent of iOS mobile applications have at least one security vulnerability, according to HP research. The company’s enterprise security team…

Would you like to help victims of the recent typhoon that devastated the Philippines? Well, don’t do it via e-mails or directly to people who may be …

Malware creators, who first started pumping out fake antivirus solutions in 2008, are now taking them to the next level by tinkering with user trust.

Researcher at Black Hat Brazil to present new data and analysis of the controversial Internet Census project.

Earlier this week, an update for Media-Wiki fixed a bug in how it used caching headers. The headers allowed authenticated content to be cached, which…

Last Tuesday, Popular Mac news website MacRumors's user forums was hacked and forum database has been compromised including the username, email and p…

SQL injection attacks have been plaguing the Web for so long that it may seem as if they've grown ho-hum.

In May sophisticated attackers breached a large Internet hosting provider and gained access to internal administrative systems using a singular Linux…

Seznam.cz has now his own CSIRT team SEZNAM.CZ-CSIRT. SEZNAM.CZ-CSIRT is already listed in Trusted Introducer CSIRT teams list. Hopefully, this activ…

The jury is out on BadBIOS, but malware for motherboards and other hardware is both possible and, with the rise of the Internet of Things, likely.

Security researcher Dancho Danchev profiled a new commercially modular malware platform recently released on the underground marketplace.

A Facebook message calling attention to a Romanian woman who deliberately causes a car accident could be aimed at bringing fraud from the streets to …

This article introduces Burp Suite Intruder and shows how it can be used for SQL injection fuzzing.

Facebook has warned its users to change their login data to protect their accounts in the light of the recent Adobe breach.

We’ve already briefly discussed PaX, but now it’s time to describe it in detail.

FireEye Labs has discovered an "exploit that leverages a new information leakage vulnerability and an IE out-of-bounds memory access vulnerability to…

Input Validation Error in manager_send.php file.

Search engines are formidable tools for reconnaissance, Google Hacking is essential knowledge for professionals searching for website vulnerabilities…

Looks like next Tuesday will be another "average" patch Tuesday. We are to expect 8 total patches, 3 of which are rated "critical" with the remaining…

In this tutorial, we’ll talk about how to harden a Linux system to make it more secure. We’ll specifically use Gentoo Linux, but the concepts should …

Last week at RSA Europe, a leading researcher in the security of business critical applications warned that a new wave of SAP attacks could crash dow…

The professional social network LinkedIn is a mine of information for any king of attackers, a Websense post described a typical attack scenario.

According to Cisco’s Craig Williams, this traffic can be an attempt to identify network security devices.

Google has developed a security feature for Chrome that lets the browser detect and stop malware downloads. The feature has been added to Chrome Cana…

Security Researcher Mohamed Osman Saeed has identified numerous vulnerabilities and reported them all, they include SQL Injection, XSS and URL Redire…

Over 70,000 users were apparently fooled by a credit generator scam that started circulating on Facebook today.

When ISC reader Yin reported earlier today that one of their servers had been hacked via the Apache Struts remote command execution vulnerability (CV…

There are more than 100 Million users who are using Facebook mobile app. Facebook has fixed multiple critical vulnerabilities in its Android based ap…

The tendency of DDoS attacks shows infallibly that perpetrators take aim and move up the OSI network model over time. The relocation of the prime tar…

Hackers this week showed security conference attendees findings and demonstrations directly contradicting Apple's public claim that it can't read iMe…

Experts Werrett and Lee demonstrated how to conduct a powerful analysis using FBStalker, a tool created to find a comprehensive amount of data on any…

More than 135,000 Facebook users were exposed to fraud and [identity theft(http://www.hotforsecurity.com/blog/fake-social-empires-cheat-exposes-over-…

A critical vulnerability in NETGEAR's ReadyNAS network attached storage devices can allow attackers to gain root access without authentication.

Last week Craig Heffner, specialized on the embedded device hacking exposed a serious backdoor in number of D-Link routers allows unauthorized backdo…

Teenagers who create a Facebook account are more vulnerable to stalkers and cyber-crooks, as their posts and photos will be publicly available if the…

Security firm Imperva revealed that more than 35000 websites based on vBulletin CMS have been hacked exploiting a known vulnerability.
On August v…

Address space layout randomization (ASLR) is a security technique involved in protection from buffer overflow attacks. Many recent APT (Advanced Pers…

This scam appeared as a pop-up ad delivered by an advertising SDK that can be found in a lot of legitimate applications. When users download an app c…

At the Hack in the Box conference, a group of researchers will demonstrate how attackers could fool a system meant to help ships avoid collisions.

First appearances may be deceiving... Web attackers have have been using a method of stashing pieces of their PHP backdoor exploit code within the m…

Nowadays, scammers take advantage of the good-hearted by manipulating web search results, blasting them with spam and devising ever-more sophisticate…

The researcher Craig demonstrated the presence of a backdoor within some DLink routers that allows an attacker to access the administration web inter…

Detail view of a new and very dangerous Banking Trojan.

Yet another Microsoft IE bug covered in yesterday's big patch was already being used in the wild in targeted APT-style attacks

vBulletin is a popular proprietary CMS that was recently reported to be vulnerable to an unspecified attack vector. vBulletin is currently positioned…

In January, Bitdefender warned that Facebook users are vulnerable to Graph Search abuse, as the new feature is also being tested by cyber-criminals. …