SEARCH RESULTS
 
Showing 1-10 of 179 records
 
Expand article

Embedding Malicious IFRAMEs Through Stolen FTP Accounts

The Article has images
2008-03-03 10:14:01 by HASH0x8b0b9bc in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...accounts, Fortune 500 companies, Russia. Nothing's wrong with that unless of course you're interested in the whole story and the big picture, which wouldn't be excluding the possibility for having a Fortune 500 company's servers acting as C&Cs for a large botnet. Why are Fortune 500 servers excluded as impossible to get hacked at the first...
 
Tags: ftp accounts, ftp, iframes, malicious iframes, web service, service, ftp account credentials, demand service, data
 
 
 
 
Expand article

Compromised Cpanel Accounts For Sale

The Article has images
2008-08-18 10:42:50 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...accounts. In fact, the oversupply of compromised Cpanel accounts is logically resulting in their decreasing price, with the sellers differentiating their propositions, and charging premium prices based on the site's page ranks and traffic, measured through publicly available services, or through the internal statistics SQL injections may...
 
Tags: sql, sql injections, sql injection attacks, massive sql injection, profile site, site, site sql, sql injection, tactic
 
 
 
 
Expand article

Hacking My Own Accounts

2008-05-28 16:13:04 by Editor in IT Security - The IT Security Industry's Web Resource
 
...accounts or especially if you manage corporate networks, take the extra time to keep clear, adequate documentation and record all the logins, passwords and other info youll ever needthen encrypt the file for safekeeping, back it up in multiple places and make it easy to find Remind your staff, too, not to rely on your browsers password memory...
 
Tags: accounts, login info, password, browsers password memory, info, account log-ins, login, lesson, personal accounts
 
 
 
 
Expand article

Charter Communications deletes 14,000 e-mail accounts

2008-01-24 00:00:00 by Brad Reed in Network World on Security
 
Charter Communications acknowledged today that it had inadvertently deleted about 14,000 of its customers' e-mail accounts
 
Tags: e-mail accounts, charter communications, customers, inadvertently
 
 
 
 
Expand article

Facebook security snafu could compromise accounts

2008-05-23 13:00:00 by Editor in Computerworld Security News
 
A researcher has spotted a security problem in Facebook that could lead to hackers taking control of user accounts
 
Tags: facebook, security, user accounts, lead, researcher, control, hackers
 
 
 
 
Expand article

UltimateBet cheating goes undetected for almost 21 months

The Article has images
2008-06-04 10:55:17 by Evan Francen in The Breach Blog
...accounts did in fact have an unfair advantage, and that these accounts targeted the highest limit games on the site. The individuals responsible were found to have worked for the previous ownership of UltimateBet prior to the sale of the business to Tokwiro in October 2006. Tokwiro is taking full responsibility for this situation and will...
 
Tags: ultimatebet, tokwiro enterprises enrg, tokwiro enterprises, ultimatebet issues statement, ultimatebet prior, ultimatebet subsequently, ultimatebet immediately removes, ultimatebet servers, ultimatebet statement
 
 
 
 
Expand article

Fraud on the Target Visa call center

The Article has images
2008-02-08 15:32:45 by Evan Francen in The Breach Blog
...accounts Reference URL The New Hampshire State Attorney General breach notification which accidentally included the letter sent to Mass. residents The New Hampshire State Attorney General breach notification which includes the correct letter sent to New Hampshire residents Report Credit The New Hampshire State Attorney General Response...
 
Tags: call, target, call center employees, accounts, target visa accounts, call center, call center assistance, employees, target national bank
 
 
 
 
Expand article

Password policies. Once again.

2007-09-04 22:14:00 by Steve Riley in Steve Riley on Security
 
...accounts, that the 42-day default expiration is troublesome. Here's my response; figured that it would make for a useful blog post, too. Account lockouts Account lockout is a poor substitute for good passwords -- and is one of the most expensive security features you can use. Let's think about this by considering the threat. What threat does...
 
Tags: account, enable account lockout, password, account lockouts, disable account lockout, 42-day default expiration, default, expiration, password expires
 
 
 
 
Expand article

Unauthorized access to the Stryker Corporation VPN

The Article has images
2008-04-17 12:45:57 by Evan Francen in The Breach Blog
...accounts Evan] All users must login remotely using their own individual user accounts. A wise decision It also performed an audit of its privileged access accounts and eliminate any unnecessary service accounts Evan] User and service account audits should be conducted on a quarterly basis or at least semi-annually. Usually, we recommend more...
 
Tags: stryker, stryker corporation, stryker suspects, stryker immediately, immediately, stryker intends, stryker servers, servers, evan user
 
 
 
 
Expand article

Gmail, Yahoo and Hotmails CAPTCHA Broken

The Article has images
2008-07-03 08:36:21 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge