Cross-subdomain Session Fixation

Cross-subdomain Session Fixation


Cross-subdomain Session Fixation

Posted:

InfoSec News: Cross-subdomain Session Fixation: http://blog.skeptikal.org/2010/09/cross-subdomain-session-fixation.html
By Mike Bailey skeptikal.org September 2, 2010
Last fall I wrote a bit about cross-subdomain cookie attacks. As often as I come across more uses for them, I think that they are a much more [...]

Snoop Dogg joins cybercrime fight because 'hack is wack'

Posted:

InfoSec News: Snoop Dogg joins cybercrime fight because 'hack is wack': http://gcn.com/articles/2010/09/02/hack-is-wack-with-snoop-dogg.aspx
By Michael Hardy GCN.com Sept 02, 2010
Hack is wack, fo' shizzle.
Ready to show off your mad freestyle rap skillz? Snoop Dogg and Symantec's Norton are teaming up to sponsor a video contest for raps [...]

Botnet takedown may yield valuable data

Posted:

InfoSec News: Botnet takedown may yield valuable data: http://www.computerworld.com/s/article/9183299/Botnet_takedown_may_yield_valuable_data
By Jeremy Kirk IDG News Service September 2, 2010
Researchers are hoping to get a better insight on botnets after taking down part of Pushdo, one of the top five networks of hacked computers [...]

Russian Trojan blamed for credit card losses at US diner

Posted:

InfoSec News: Russian Trojan blamed for credit card losses at US diner: http://news.techworld.com/security/3237726/russian-trojan-blamed-for-credit-card-losses-at-us-diner/
By John E Dunn Techworld 01 September 10
Hundreds of lunchtime customers of a diner in the US city of Memphis are believed to have had funds stolen from their debit and credit cards [...]

Secunia Weekly Summary - Issue: 2010-35

Posted:

InfoSec News: Secunia Weekly Summary - Issue: 2010-35: ========================================================================
The Secunia Weekly Advisory Summary 2010-08-26 - 2010-09-02
This week: 82 advisories [...]

News of the World faces fresh phone hacking charge

Posted:

InfoSec News: News of the World faces fresh phone hacking charge: http://www.guardian.co.uk/media/2010/sep/02/news-of-the-world-phone-hacking
By Nick Davies, Vikram Dodd and Nicholas Watt guardian.co.uk September 2010
The government tonight came under pressure to set up a judicial inquiry into the phone hacking scandal at the News of the World after the paper confirmed that it has suspended a journalist while it investigates new allegations of the unlawful interception of voicemail.
The prime minister's media adviser, Andy Coulson, has denied a report in the New York Times which claimed he freely discussed the use of unlawful news-gathering techniques when he was editing the paper and "actively encouraged" a named reporter to engage in illegal interception of voicemail messages. Coulson has always denied knowing of any illegal activity by his journalists.
Scotland Yard, too, found itself in the firing line after the New York Times quoted unnamed detectives alleging they had cut short their investigation because of their close relationship with the News of the World. A group of four public figures, including former deputy prime minister John Prescott, is poised to sue police over a failure to warn them they had been targeted by the private investigator at the centre of the scandal, Glenn Mulcaire.
The Guardian has learned that the Metropolitan police commissioner at the time of the original investigation, Sir Ian Blair, was among those whose names were found in material seized from Mulcaire, raising questions about whether officers who were directly involved in the investigation had discovered that they, too, had been targets of the newspaper. It is understood Blair was assured at the time that his phone had not been hacked.
[...]

Russian government email servers hacked

Posted:

InfoSec News: Russian government email servers hacked: http://www.mn.ru/society/20100824/188002181.html
By Evgeniya Chaykovskaya The Moscow Times 24/08/2010
On Monday it turned out that the Federal Service of Protection (FSO) is not that good at protecting its own privacy. Yesterday internet forums [...]

DARPA Soliciting Bids On Insider Threat Prevention

Posted:

InfoSec News: DARPA Soliciting Bids On Insider Threat Prevention: http://www.informationweek.com/news/government/security/showArticle.jhtml?articleID=227300041
By Elizabeth Montalbano InformationWeek September 2, 2010
The Defense Advanced Research Projects Agency (DARPA) has launched a new program aimed at quickly finding and stopping insiders from trying to [...]

0 comments:

Post a Comment