SEARCH RESULTS
 
Showing 1-10 of 38 records
 
Expand article

"many of Colt's clients" affected by breach, CNET included

The Article has images
2008-06-25 11:25:20 by Evan Francen in The Breach Blog
...CNET Networks, Inc. ("CNET Contractor/Consultant/Branch Colt Express Outsourcing Services, Inc. ("Colt Victims current and former employees and their dependants Number Affected around 6,500 Types of Data first names, last names, date of birth, Social Security numbers, address, employer, hire date, benefits group numbers, and relationship...
 
Tags: information, personal information, information security, confidential information, protect information, breach, sensitive information, information security requirements, colt
 
 
 
 
Expand article

More CNET Sites Under IFRAME Attack

The Article has images
2008-03-06 10:50:57 by HASH0x8b1424c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...CNET Networks' web properties besides ZDNet Asia , namely, TV.com , News.com and MySimon.com which I'll assess in this post. In the time of posting this, no other CNET sites are involved in the campaign, including ZDNet's international sites such as, ZDNet India, ZDNet U.K, and ZDNet Australia, but the abovementioned ones. And so, we have...
 
Tags: iframe, cnet sites, sites, iframe-ed pages, pages, cnet, iframe redirects, iframe campaign, campaign
 
 
 
 
Expand article

CNET employees notified after data breach

2008-06-24 10:23:26 by Editor in Computerworld Security News
 
A firm retained by online publisher CNET Networks (but in the process of closing up shop) suffered a burglary that may have exposed more than 6,500 CNET staffers and family members to data breaching
 
Tags: cnet staffers, data, shop, burglary, firm, family, process
 
 
 
 
Expand article

Malicious Javascript Code In Another CNET Networks Website

2008-08-08 10:14:02 by CyberInsecure in CyberInsecure.com
 
Websense has discovered that another CNET Networks site, CNET Clientside Developer Blog, has been compromised, just 5 months after previous incident. The main page of this website contains malicious JavaScript code that de-obfuscates into an iframe that loads its primary malicious payload from a different host. This malicious JavaScript code...
 
Tags: malicious javascript code, cnet networks site, primary malicious payload, website, previous incident, main page, websense, access, loads
 
 
 
 
Expand article

CNET employees notified after data breach

2008-06-23 00:00:00 by Robert McMillan in Network World on Security
 
More than 6,500 CNET Networks employees and relatives are being notified of a possible data breach after burglars stole computer systems from the offices of the company that administers the Internet publisher's benefit plans
 
Tags: data breach, cnet networks employees, computer systems, benefit plans, internet publisher, offices, relatives, company, administers
 
 
 
 
Expand article

Injecting IFRAMEs by Abusing Input Validation

The Article has images
2008-03-07 15:53:50 by HASH0x8bac8b8 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...CNET Networks, in fact Symantec's Internet Threat Meter monitor for web activities rated it medium risk , and urged extra caution On March 4, 2008, reports of an IFRAME attack coming from ZDNet Asia began to surface. Attackers appear to have abused the ZDNet search engine's cache by exploiting a script-injection issue, which is then being...
 
Tags: input validation, input validation checks, plan input validation, input, input validation refers, input validation flaw, iframes, iframe, iframe attack
 
 
 
 
Expand article

Wired.com and History.com Getting RBN-ed

The Article has images
2008-03-10 14:20:33 by HASH0x8aeaaa0 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...CNET stops IFRAME site attacks - who's next? " in terms of high-profile sites, that is Wired.com and History.com Key summary points the same malicious parties behind the CNET and TorrentReactor's IFRAME injection are also the ones behind Wired.com and History.com's abuse of input validation the IFRAME injection entirely relies on the...
 
Tags: malware, vbs malware, malware attack, rbn, media malware gang, iframe injection attack, iframe injection, malware research, high-profile sites
 
 
 
 
Expand article

Beware of Rogue Anti-Malware

2008-08-18 10:16:04 by Editor in Cheap Hack
 
...CNET (specifically their Download.com service) through syndicated Google ads. Not to pick on CNET specifically; Google ads are likely to be appearing elsewhere, but we were referred to them on that site. The hallmark of such malware is to start with a free version. This version conducts a fake malware scan that finds lots of malware on the...
 
Tags: anti-malware, rogue anti-malware vendors, legit software, software, sunbelt software, malware, rogue anti-malware software, fake malware scan, google ads
 
 
 
 
Expand article

Blue Box #70: 2-yr Anniversary show, VoIP security vulnerabilities, Vonage, Comcast, phishing, listener comments and much, much more...

2007-11-07 21:52:53 by HASH0x89e6354 in Blue Box: The VoIP Security Podcast
 
...cnet post TorrentFreak: Comcast Throttles BitTorrent Traffic, Seeding Impossible P2P Net: Comcast impedes hi-speed file sharing Carnegie Mellons CyLab and Nortel Combine Efforts to Research Leading Security Technologies SearchVoIP.au: Avaya white paper: VoIP Security for Dummies Upcoming shows Oct 24-25, New York, USA, Interop Oct 29-Nov...
 
Tags: voip security, voip security vulnerabilities, voip security news, voip, voip security podcast, consumer voip, vulnerabilities, sans voip security, sans