Hackers Center

NIST releases Security Content Automation Protocol for FISMA

Brett Arion — Thu, 05 Nov 2009 06:44:00 -0800

Automated tools take sweat out of security compliance Nov 05, 2009 When it comes to complying with federal security mandates, chief information security...

Read the rest of the story here

A zero-day flaw in the TLS and SSL protocols, which are commonly used to encrypt web pages, has been made public.

Brett Arion — Thu, 05 Nov 2009 02:25:00 -0800

Security researchers Marsh Ray and Steve Dispensa unveiled the TLS (Transport Layer Security) flaw on Wednesday, following the disclosure of separate, but similar, security findings. TLS and its...

Read the rest of the story here

Use Data Masking to Secure Sensitive Data in Non-Production Environments

Brett Arion — Fri, 23 Oct 2009 12:10:00 -0700

Data masking is the process of de-identifying (masking) specific elements within data stores by applying one-way algorithms to the data. The process ensures that sensitive data is replaced with...

Read the rest of the story here

Symbian Microkernel released as Open Source

Brett Arion — Fri, 23 Oct 2009 05:48:00 -0700

It was well over a year ago now that news of the Symbian operating system--found on approximately half of global smartphones--going open source broke. The news was interpreted as particularly...

Read the rest of the story here

Congressional Advisory Panel: China taking valuable information from hitech companies

Brett Arion — Fri, 23 Oct 2009 05:45:00 -0700

The Chinese government is stepping up efforts to steal valuable information from high-technology companies in other countries, according to a congressional advisory panel, which detailed one...

Read the rest of the story here

Almost half ISO 27001 'compliant' firms break with security

Brett Arion — Fri, 23 Oct 2009 05:40:00 -0700

Almost half of businesses that claim compliance with ISO 27001 are sharing privileged user accounts and breaking other standard guidance, according to a survey of IT managers.Some 47 percent of firms...

Read the rest of the story here

Firefox Users At Risk From MIcrosoft Plug-In

Brett Arion — Fri, 16 Oct 2009 12:35:00 -0700

[ UPDATE: Mozilla has now removed the extension from the blocklist after Microsoft clarified some information in its bulletin on how Firefox users were affected. ]Patches critical bug, exploitable...

Read the rest of the story here

Latest Fake Antivirus Attack Holds Compromised Systems Hostage

Brett Arion — Fri, 16 Oct 2009 12:27:00 -0700

Attack forces user to purchase phony antivirus package to free computer Attackers have added a new twist to spreading fake antivirus software: holding a victim's applications for ransom. ...

Read the rest of the story here

Botnet Operators Impacted by Global Economy. DDoS and other attacks cheaper

Brett Arion — Fri, 16 Oct 2009 12:20:00 -0700

Security researchers say the cost of criminal services such as distributed denial of service, or DDoS, attacks has dropped in recent months. The reason? Market economics. "The barriers to entry in...

Read the rest of the story here

Oracle to fix 38 database, product vulnerabilities

Brett Arion — Fri, 16 Oct 2009 12:13:00 -0700

Image via WikipediaOracle has announced plans to ship a Critical Patch Update (CPU) with fixes for at least 38 security vulnerabilities in a wide range of database and server products. The most...

Read the rest of the story here

NIST maps out the emerging field of IT metrology

Brett Arion — Tue, 06 Oct 2009 11:10:00 -0700

NIST maps out the emerging field of IT metrologyInformation technology security is a hot topic, but attention usually focuses on the lack of it. What is missing is an objective, quantifiable way to...

Read the rest of the story here

Avert Labs Paper: Inside the Password Stealing Business:the Who and How of Identity Theft

Brett Arion — Tue, 06 Oct 2009 11:00:00 -0700

Avert Labs has published a new research paper, “Inside the Password-Stealing Business: the Who and How of Identity Theft.” With so many financial transactions occurring online today, stealing...

Read the rest of the story here

Computer scientists successfully boot one million Linux kernels as virtual machines

Brett Arion — Tue, 06 Oct 2009 10:56:00 -0700

Computer scientists successfully boot one million Linux kernels as virtual machinesSeptember 25th, 2009 in Technology / Computer SciencesSandia National Laboratories computer scientists Ron Minnich...

Read the rest of the story here

Express Scripts: 700,000 notified after extortion

Brett Arion — Tue, 06 Oct 2009 10:46:00 -0700

Express Scripts: 700,000 notified after extortionLast November, the company reported that someone had threatened to expose millions of customer prescription records, but it has come under criticism...

Read the rest of the story here

MS Windows 2000 SP4 and XP Owners beware, "No patch for you" for MS09-048

Brett Arion — Thu, 10 Sep 2009 14:00:00 -0700

Image via WikipediaMicrosoft this week started what will be one of the largest debated issues they will have in some time. Especially given that organizations that pay maintenance on their software...

Read the rest of the story here

Avert Labs Releases A New Version of McAfee FileInsight

Brett Arion — Thu, 10 Sep 2009 10:15:00 -0700

Image via WikipediaToday Avert released the new version 2.1 of McAfee FileInsight. You can download a free copy from the Avert Tools site. FileInsight is a handy integrated tool environment for web...

Read the rest of the story here

Absolute Poker Scandal

Armando Romeo — Tue, 01 Sep 2009 23:31:00 -0700

In the Summer of 2007, a disturbing trend was occurring on the poker site Absolute Poker. Four accounts were consistently winning large amounts of money in high stakes games by playing a clearly...

Read the rest of the story here

Trafscrambler v0.2 (Source)

Sat, 29 Aug 2009 03:13:02 -0700

An anti-sniffer/IDS LKM(Network Kernel Extension) for OSX

Trafscrambler v0.2 (Pkg)

Sat, 29 Aug 2009 03:10:04 -0700

An anti-sniffer/IDS LKM(Network Kernel Extension) for OSX

Mobiusft Forensic Toolkit v0.4.7

Thu, 27 Aug 2009 08:48:12 -0700

Mobius Forensic Toolkit is an open-source forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files, for easy integration with other tools.

It features an ICQ viewer/browser.

WRT54G Raper

Fri, 21 Aug 2009 06:33:49 -0700

WRT54G Authentication Bypass vulnerability Exploitation Tool by Hackers Center

Once your wifi card has detected the WRT54G, you can simply click connect; even if this router asks for a password, it will still provide you with "Local Only" access in order to
authenticate your key against the router. Once this "Local Access" is obtained, you can use the WRT54G Raper from Hackerscenter.com to disable the security and change the admin password.
The rest is up to you.Â

Â Coded by Digital Spirit @ Hackers Center

Researchers find large-scale XML library flaw - Sun, Apache and Python vulnerable

Brett Arion — Thu, 06 Aug 2009 12:04:00 -0700

Researchers from Codenomicon, working with CERT-FI in Finland, have uncovered a series of flaws in the eXtensible Markup Language (XML) libraries that could pose a serious security risk. The flaws...

Read the rest of the story here

Hyenae v0.30-1 (Win32)

Tue, 04 Aug 2009 07:51:43 -0700

Hyenae is a highly flexible platform independent network packet generator. It allows you to reproduce several MITM, DoS and DDoS attack scenarios, comes with a clusterable remote daemon and an interactive attack assistant.

Tor Browser Bundle v1.2.6

Tue, 04 Aug 2009 07:40:09 -0700

The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, it prevents the sites you visit from learning your physical location, and it lets you access sites which are blocked. The Tor Browser Bundle lets you use Tor on Windows without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser and is self contained. The Tor IM Browser Bundl additionally allows instant messaging and chat over Tor.

Keychain v2.6.8-1.noarch

Wed, 29 Jul 2009 11:39:59 -0700

The keychain script makes handling RSA and DSA keys both convenient and secure. It acts as a front-end to ssh-agent, allowing you to easily have one long-running ssh-agent process per system, rather than per login session. This dramatically reduces the number of times you need to enter your passphrase from once per new login session to once every time your local machine is rebooted.

Afick v2.14-1

Wed, 29 Jul 2009 11:36:01 -0700

Afick is a security tool, very close from the well known tripwire. It allows to monitor the changes on your files systems, and so can detect intrusions.

Haraldscan v0.21

Sat, 11 Jul 2009 03:04:58 -0700

A Bluetooth discovery scanner.The scanner will be able to determine Major and Minor device class of device, as well as attempt to resolve the device's MAC address to the largest known Bluetooth MAC address Vendor list.

Fuzzgrind - An automatic fuzzing tool

Sat, 11 Jul 2009 03:03:01 -0700

Fuzzgrind is a fully automatic fuzzing tool, generating test files with the purpose of discovering new execution paths likely to trigger bugs and potentially vulnerabilities.

It is based on the concept of symbolic execution. Thus, the tool starts from a file considered valid by the software under test, and analyses the execution path to extract any constraints tied to branch instructions followed by this software. By resolving constraints one by one, Fuzzgrind will alter the valid file to explore possible new branches of the software under test, in order to discover new vulnerabilities.

Fuzzgrind is licensed under the terms of the GNU GPL. Anybody is welcome to contribute!

Cybercrime spreads on Facebook

Brett Arion — Tue, 30 Jun 2009 04:22:00 -0700

BOSTON (Reuters) - Cybercrime is rapidly spreading on Facebook as fraudsters prey on users who think the world's top social networking site is a safe haven on the Internet.Lisa Severens, a clinical...

Read the rest of the story here

FBI Defends Disruptive Raids on Texas Data Centers

Brett Arion — Mon, 29 Jun 2009 22:48:00 -0700

The FBI on Tuesday defended its raids on at least two data centers in Texas, in which agents carted out equipment and disrupted service to hundreds of businesses.The raids were part of an...

Read the rest of the story here

Trojan Swipes FTP Credentials for Major Companies in Malware Attack

Brett Arion — Mon, 29 Jun 2009 22:41:00 -0700

Security researchers are tracking a Trojan that has swiped as many as 88,000 FTP credentials for organizations such as Symantec, McAfee, Amazon, Cisco and the Bank of America. According to...

Read the rest of the story here

Epok begins Marketing Vulnerability Analysys Tool Developed for NSA and DHS

Brett Arion — Thu, 04 Jun 2009 07:53:00 -0700

A vulnerability analysis tool used by the National Security Agency (NSA) and U.S. Department of Homeland Security is now commercially available for enterprises that want to either make sense of their...

Read the rest of the story here

New Software Revolutionizes Computer Security

Brett Arion — Thu, 28 May 2009 10:22:00 -0700

Tizer Secure™ Beta released for free testing at www.tizersecure.com"The advanced technology and enhanced tools that drive Tizer Secure™ were all built to satisfy certain pain points of our clients...

Read the rest of the story here

CIS issues free benchmark on iPhone security

Brett Arion — Thu, 28 May 2009 09:23:00 -0700

The nonprofit Center for Internet Security today released what it termed the industry's only consensus security benchmark for the iPhone, which is aimed at helping IT managers and users reduce the...

Read the rest of the story here

New Websense Survey Reveals State of Web 2.0 Use, Policies and Security at Businesses Worldwide

Brett Arion — Wed, 27 May 2009 11:31:00 -0700

Websense Delivers Free Tools to Help IT Professionals Enable Web 2.0 in the Workplace While Mitigating Security RisksWebsense, Inc. (NASDAQ: WBSN) today revealed the findings from a global survey of...

Read the rest of the story here

Please update your TradePub RSS feed URL!

Beth Brindle

We are excited to announce the release of our enhanced RSS feeds. The new and improved feeds will alert you of every new offer on TradePub.com the moment it becomes available to our network. As always, you may select a complete feed or choose the categories of most interest to you.

Simply visit our site and scroll down to the “Get RSS Updates” link on the left-hand side for access to all of the new feeds.

Note: The current blog and feeds have been discontinued and will no longer be supported as of March 31, 2009. Please be sure to update your feed address at your earliest convenience.

NERC CyberSecurity Solutions for CIP 002 - CIP 009

Beth Brindle

Download Now!

The NERC deadline is approaching. Are you ready for the new 2009 cybersecurity regulations?

Find out how to prepare for the new North American Electric Reliability Corporation (NERC) cybersecurity regulations. All bulk power system owners, operators, and users are responsible for compliance with regulations, measures and standards developed by NERC starting July 2009, including preparations for auditable compliant requirements in 2010.

Email Link Digg This! Add to Del.icio.us