The real security lesson Windows XP taught us is to challenge our assumptions: Windows XP was, and remains popular for individuals and organizations. Estimates range from 18-30% of systems _currently_ accessing the Internet use Windows XP.That means that despite the notice, extension, and dire warnings of negative consequences, a large number of individuals and organizations […]

OpenSSL heartbeat information disclosure: OpenSSL versions 1.0.1 through 1.0.1f contain a flaw in its implementation of the TLS/DTLS heartbeat functionality (RFC6520). This flaw allows an attacker to retrieve private memory of an application that uses the vulnerable OpenSSL library in chunks of 64k at a time. Note that an attacker can repeatedly leverage the vulnerability […]

SQL Injection Leads To BigMoneyJobs.com Leak: Earlier today, a hacker identified as ProbablyOnion (who recently breached Boxee.tv) has posted data from a large job seeker website resulting in over 36,000 accounts being published online. The website BigMoneyJobs.com is a large hub for job seekers and employers looking to hire them. The breach was announced over […]

New teacher licensing system full of glitches: Just hours after the state launched a new, multimillion-dollar teacher licensing system last year, an educator logging in was shocked to find a serious security breach. “I discovered that by doing a public search using any educator’s name, ALL of our personal information is available to everyone. This […]

Beware of Zeus Banking Trojan Signed With Valid Digital Signature: A new dangerous variant of ZeuS Banking Trojan has been identified by Comodo AV labs which is signed by stolen Digital Certificate which belongs to Microsoft Developer, to avoid detection from Web browsers and anti-virus systems. Every Windows PC in the world is set to […]

All You Wanted to Know About Social Engineering: Social engineering is manipulating people into doing something, rather than using technical means. It is the art of gaining access to buildings, systems, or data by exploiting human psychology, rather than by using technical hacking techniques. For example, a social engineer might call an employee and pose […]

Worst Data Breach in German History, 18 Million Email Passwords Compromised: Germany has confirmed its biggest Data theft in the country’s history with usernames and passwords of some 18 million email accounts stolen and compromised by hackers. The Story broke by the German press, Der Spiegel on Thursday, when German Authorities revealed another mass hacking […]

What Could Be Worse?: If you wear the CIO hat of a very large retail company, what could be worse than to have your site broken into and tens of millions of customers’ information records stolen and … right at the peak of the holiday season? Well, I suppose it could be worse if your […]

Disabling ‘Find My iPhone’ on iOS 7 without any Password: iOS devices have a feature called ‘Find My iPhone’, allows device owner to locate their stolen devices using linked Apple ID with iCloud Account. Unfortunately, a security flaw in iOS make it possible to turn off Find My iPhone without a password and enabled thieves […]

Mozilla CEO Brendan Eich Steps Down: A prominent Silicon Valley chief executive stepped down just days after his appointment, amid a firestorm across the Internet that was sparked by employees who complained about his opposition to gay marriage. Brendan Eich resigned from Mozilla, the organization behind the Firefox Web browser, after intense criticism over a […]