Exploit code targeting the Internet Explorer vulnerability used against Google and other companies has gone public, increasing the chances that broader attacks will soon follow. Both the open-source Metasploit framework and the commercial Immunity Canvas software for penetration testers have working exploits that fully compromise computers running earlier versions of the browser. The attacks target [...]

read full post »

A former London pizza delivery man faces a 10-year prison sentence after admitting he helped found the notorious DarkMarket forum for computer crime, several news sites reported. Renukanth Subramaniam, a 33-year-old Sri Lanka-born man from North London, pleaded guilty at Blackfriars Crown Court in London to conspiracy to defraud and furnishing false information. Authorities say [...]

read full post »

Google’s corporate network was hackedbecause its workers were running rival Microsoft’s Internet Explorer browser, a point that didn’t escape the notice of security researchers and Web users. “More interesting than the IE zero-day, is why wasn’t Google running Chrome?” asked Andrew Storms, director of security operations at nCircle Network Security, shortly after Microsoft issued a [...]

read full post »

Tool name : WhoIs 0.1   Description : A tool to request an IP’s Whois registration information from a Whois server. In this tool the ripe.net server is the chosen one. Change to whatever you want.   Tested on : Windows XP   Feedback : In case you encounter any problems with the tool, you [...]

read full post »

Hackers have stolen the login credentials for more than 8,300 customers of small New York bank after breaching its security and accessing a server that hosted its online banking system. The intrusion at Suffolk County National Bank happened over a six-day period that started on November 18, according to a release (PDF) issued Monday. It [...]

read full post »

A group of cryptographers has developed a new attack that has broken Kasumi, the encryption algorithm used to secure traffic on 3G GSM wireless networks. The technique enables them to recover a full key by using a tactic known as a related-key attack, but experts say it is not the end of the world for [...]

read full post »

A short article from the m86security team about the takedown of the lethic botnet. Last week we posted an analysis of the Lethic spambot, a significant spammer. Over the weekend, spam from this botnet dried up. Thanks to the security folks over Neustar who took the initiative by working with the internet service providers that [...]

read full post »

Facebook founder Mark Zuckerberg told a live audience yesterday that if he were to create Facebook again today, user information would by default be public, not private as it was for years until the company changed dramatically in December. In a six-minute interview on stage with TechCrunch founder Michael Arrington, Zuckerberg spent 60 seconds talking [...]

read full post »

I uploaded some screenshots of the VoIP-Recorder web GUI. For the end user it looks about like this when using the GUI for processing the intercepted Skype calls … Further screenshots will be posted here.

read full post »

Symantec Security Check is a web-based scan that combines two features: a Security Scan and Virus Detection. To use it, you will be asked to download some components and add-ons (ActiveX among others). The Security Scan checks whether your computer allows unknown or unauthorized Internet communications and whether basic information about your computer (including your [...]

read full post »