‘Snake’ cyber espionage toolkit unmasked by defence contractor BAE Systems. The Researchers at the German security company G Data Software have reported about sophisticated rootkit malware which targets Governments and Military Networks. The malware designed to steal data from secure facilities and has ability to take control of an infected machine, execute arbitrary commands and hide system activities. “The threat described in this report really does raise the bar in terms of what potential targets, and the security community in
Supermarket giant TESCO customers passwords and email details leaked online. Tesco has deactivated more than 2000 of its customers online accounts after their personal details were published on text sharing site Pastebin by some unknown hackers on Thursday, allowing access to online shopping accounts, personal details and Tesco Clubcard vouchers, reported by The Guardian. The security breach does not appear to have come from Tesco’s end though. The supermarket giant said the data must have been compiled by taking user
Security expert Ebrahim Hegazy, Cyber Security Analyst Consultant at Q-CERT, has found a serious vulnerability in Twitter. The Twitter Unrestricted File Upload Vulnerability allows an attacker to upload files of any extension including PHP. When an application does not validate or improperly validates file types before uploading files to the system, called Unrestricted File upload vulnerability. Such flaws allow an attacker to upload and execute arbitrary code on the target system which could result in execution of arbitrary HTML and script
Cyber Security Expert and Penetration tester, Ebrahim Hegazy has found a serious vulnerability in Yahoo’s website that allows an attacker to remotely execute any commands on the server i.e. Remote Command Execution vulnerability. According to Ebrahim blog post, the vulnerability resides in a Chinese subdomin of Yahoo website. Last week, He reported the flaw to Yahoo Security Team and also tip-off them of more threat. Yahoo remote command execution vulnerability fixed by Yahoo Security Team within a day after he reported.
New Developments On Web Security Introduced By Mozilla. Mozilla and BlackBerry’s work on security research techniques are in the area of fault injection. Fault injection (also known as “fuzzing”) is a method of automated security testing that is used to identify potential security concerns that can be fixed before users are at risk. Fault injection is a testing technique where specially designed software is created to inject a variety of unexpected or malformed data into a specific application, program or
Yahoo confirmed that it was running advertisements that were spreading malware on some of its sites. While this is apparently in the past now, the company acknowledged and confirmed reports that this took place on Friday. Malicious ads served through Yahoo’s ad network delivered malware to thousands of site visitors, according to researchers at Fox-IT, but Yahoo subsequently blocked the attack. In a statement, Yahoo’s spokesperson said: “On Friday, January 3 on our European sites, we served some advertisements that