'Hacker safe' Web site gets hit by hacker
555292
Online technology retailer Geeks.com displays a security vendor's "Hacker Safe" logo on its Web site. But now it's warning customers of a possible data compromise.
367211
Days after sample attack code for a yet-to-be-patched flaw surfaced, malicious sites are popping up that exploit the hole.
191229
A bug in Microsoft&#39;s Internet Security and Acceleration (ISA) Server 2000 and Proxy Server 2 can let hackers spoof Web content, such as a trusted site, with their own fake content, the Redmond
230365
Also: Army expects 'suicide hacker' attacks. Read these stories and more from around the Web on News.com Extra.
633181
Gareth Heyes has a new post today talking about one of the vulnerable values in the $_SERVER superglobal - PHP_SELF.   I thought it might be a good idea to gather a few test cases demonstrating the problem. Why PHP allows these URL's is beyond me and it wouldn't take much work to filter out these malicious URL's in the PHP code.   He provides four test cases to show how simple it is to abuse - one using a HTTP header, another pushing XSS through, the third mentions search pages and the fourth a direct code injection.   You can download the code here.
360875
The Web site for Indian antivirus vendor AvSoft Technologies has been hacked and is being used to install malicious software on visitors&#39; computers, security researchers said Thursday.The download section of AvSoft&#39;s S-cop Web site hosts the malicious code, according to Roger Thompson, chief research officer with security vendor AVG. &quot;They let one of their pages get hit by an iFrame injection,&quot; he said. &quot;It shows that anyone can be a victim.... It&#39;s hard to protect Web servers properly.&quot;The technique used on the site has been seen in thousands of similar hacks over the past few months. The attackers open an invisible iFrame Window within the victim&#39;s browser, which redirects the client to another server. That server, in turn, launches attack code that attempts to install malicious software on the victim&#39;s computer.The malicious software is a variant of the Virut virus family.The iFrame pages are commonly used by Web developers to insert content into their Web pages, but because it is possible to create an invisible iFrame window, the technology is often misused by hackers as a way to silently redirect victims to malicious Web sites.AvSoft, based in New Delhi, sells an antivirus product called SmartCOP and has sold a second antivirus product called Smartdog. The company, which is not well-known in the U.S., also specializes in recovering data lost due to virus attacks. The company could not be reached for comment Thursday afternoon.That data recovery service could come in handy for some, as Virut is known as a &quot;parasitic infector&quot; virus that is extremely difficult to remove. &quot;It infects all of your programs on your local hard drives, and then it starts hitting your network drives as well the first time you run,&quot; Thompson said.Fortunately, the malware used to install Virut exploits only well-known bugs, meaning that users who are running antivirus software on fully patched systems will probably not be infected by the attack in its current state, security experts say.Nobody knows how the malware got onto the Web site in the first place. News of the hack was reported on the Full Disclosure security discussion list on Thursday.McAfee Security Research Manager Dave Marcus believes that the site was compromised by exploiting a Web programming error, most likely in the site&#39;s SQL or PHP code. Security experts say that criminals have written automated programs that scour the Web for these types of flaws and then automatically infect sites, making this an increasingly common problem.
332998
A Republican Party Web site has been hacked, and for some time it has been spreading a variation of the long-running Storm Trojan horse to vulnerable visitors, a security researcher said Friday.
622153
You wouldn't believe some of the sites that have fallen victim to this security threat, but Martin Heller tells you how to protect yourself.
497821
Alternative browser features protection against online scams.
87931
Latest worm poses a risk to many Web sites using the PHP scripting language.
575749
Despite displaying a security vendor's "Hacker Safe" logo on its Web site, online technology retailer Geeks.com is warning an unspecified number of customers about a possible data compromise.
754394
Surfing the Web has never been more risky. Simply connecting to the Internet - and doing nothing else - exposes your PC to non-stop, automated break-in attempts by intruders looking to take control of your machine surreptitiously.
274361
Stop the WordPress Bloging software organisation WordPress has warned that hackers posted compromised versions of its open source software after breaking into one of the servers behind its website.â¦
380030
INTERNET banking users beware, there appears to be a new "phishing" method about.   The technique, which avoids most detection systems, works after you log on to an authentic site.
723644
Job searching site warns users to watch out for fraud and says that its recent security breach "was not an isolated incident."
467567
A hacker compromised the corporate Web site of France Telecom SA's ISP subsidiary earlier this week, causing the site to try to install a malicious software program on visitors' computers.
328662
A Russian human rights Web site portal  has been attacked by unknown assailants, forcing it to close  down and move to a new address, the Web site said on Monday.