SEARCH RESULTS
 
Showing 1-10 of 101 records
 
Expand article

Oak Ridge National Laboratory visitor information exposed

The Article has images
2007-12-11 13:45:21 by Evan Francen in The Breach Blog
...attempts The attackers cooked up seven phishing variations, one of which purportedly advertised a scientific conference, another of which posed as a notification about a complaint on behalf of the Federal Trade Commission No classified information was lost If you visited ORNL between the years 1990 and 2004 your name and other personal...
 
Tags: information, personal information, security, store social security, retrieve information, regular information security, security systems, cyber-security issues, security breach
 
 
 
 
Expand article

Yet Another Web Malware Exploitation Kit in the Wild

The Article has images
2008-12-02 06:24:43 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
 
...attempts of intellectual property enforcement in the form of exchange of flames between an author of a original kit, and a newly born author who seems to have copied over 80% of his source code, changed the layout, re-branded it, added several more exploits and started pitching it as the most exclusive kit there is available in the...
 
Tags: kit, malware exploitation kit, nuclear malware kit, zeus crimeware kit, malware, exclusive kit, nuclear grabber kit, apophis kit, ddos malware kit
 
 
 
 
Expand article

Anti-Debugging Series - Part I

2008-12-02 20:56:25 by Tyler Shields in Zero in a bit
 
...attempts at reverse engineering or debugging a target process. Typically this is achieved by detecting minute differences in memory, operating system, process information, latency, etc. that occur when a process is started in or attached to by a debugger compared to when it is not. Most research into anti-debugging has been conducted from the...
 
Tags: process execution breaks, execution, process, methods query process, hardware breakpoint, hardware, process information, target process, methods
 
 
 
 
Expand article

MySpace Phishers Now Targeting Facebook

The Article has images
2008-01-07 19:20:52 by HASH0x898bea0 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...attempts to load 209.160.73.132/download/502/541/1/ where 209.160.73.132/dw.php is the adware in this case - Adware:Win32/SmitFraud. And yet another one - facebook-login-61248sf1.krantik.info (89.149.206.225) whose once deobfuscated javascript attempts to load topsearch10.com/search.php (209.8.25.156). Spammy, yammy
 
Tags: facebook, site facebook, facebook users, genuine facebook link, login details, login, myspace, facebook-login, malware
 
 
 
 
Expand article

A breach that hits home with 2008 presidential candidates

The Article has images
2008-03-22 13:16:50 by Evan Francen in The Breach Blog
...attempts (successful and not) to confidential information. Of course you need to identify confidential information and classify it first, which is a huge challenge in a vast majority of companies. I think the government does a pretty good job of data classification however Former Independent Counsel Joseph diGenova said the firings of the...
 
Tags: stanley subcontractor employees, subcontractor employees, subcontractor, confidential information, information, information security, stanley, personal information, employees
 
 
 
 
Expand article

A false accusation of hacking

2008-04-02 17:03:46 by Richard Clayton in Light Blue Touchpaper
 
...attempts to log in your PayPal account from a foreign IP address and we have reasons to believe that your account was hijacked by a third party without your authorization If you recently accessed your account while traveling, the log in attempts may have initiated by you However if you are the rightful holder of the account, click on the link...
 
Tags: paypal, paypal account, account, account holder, email, people, original email, gmail account, people receive
 
 
 
 
Expand article

What is 802.1X? Here's a Technology Primer for You

2008-04-02 03:10:42 by JJ in Security Uncorked
 
...attempts to connect to the network and has been successfully identified as someone who is allowed access. At this point, we would say that this legitimate user is authenticated. Until this happens, no standard network traffic passes through the 802.1X port- so whatever is trying to connect will not even get an IP address. No IP address = no...
 
Tags: edge port, edge, edge ports, network access control, network access, wireless standard, standard, standard network traffic, network
 
 
 
 
Expand article

Laptop stolen from the home of a BearingPoint employee

The Article has images
2008-06-19 15:38:38 by Evan Francen in The Breach Blog
...attempts to steal your identity, we have engaged ConsumerInfo.com Inc., and Experian company, to provide you with one year of credit monitoring, at no cost to you Please contact BPt-FMGOICPrivacy@bearingpoint.com should you have additional questions regarding the cirumstance of the incident BearingPoint currently anticipates notifying...
 
Tags: sensitive personal information, personal information, information, bearingpoint, store confidential information, confidential information, laptop, information security, independent contractors
 
 
 
 
Expand article

Directly connect to your corpnet with IPsec and IPv6

2008-06-25 20:55:59 by Steve Riley in Steve Riley on Security
 
...attempts. Be sure to follow my advice in " Configure your router to block DOS attempts ," and then add two more rules to permit incoming port udp/500 and IP protocol 50 over IPv6. That's it. No NATing or other unnatural network acts are required (finally, you can stop lying to your significant other about why you squirrel yourself away in the...
 
Tags: directly, corpnet, sql server directly, data, data center, ipv6, trust, end-to-end trust vision, users store data