Online auction for security bugs
90720
Security researchers can now get cash rewards for the loopholes they discover in popular programs.
701997
Beta search app creates vulnerabilities that may threaten your data's security.
330983
Will dirty dealers scare eBay users off?
392627
Get yer luverly 0day IE exploits 'ere An online marketplace where researchers and vendors can trade in security vulnerabilities has been created by a Swiss research lab.â¦
704573
So how much is a vuln worth... and who's buying? Two years ago, Charles Miller found a remotely exploitable flaw in a common component of the Linux operating system, and as many enterprising vulnerability researchers are doing today, he decided to sell the information.â¦
541450
Criminals are auctioning stolen goods for a profit on the Internet.
539958
eBay users' details posted to anti-fraud forum &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
234545
A security research company is offering $20,000 for information on undisclosed security flaws in Microsoft&#39;s Windows OS.Digital Armaments, which doesn&#39;t list a phone number or a headquarters address on its Web site, is offering the money as part of the &quot;Hacker&#39;s Challenge&quot; through midnight EST, Feb. 29. The company is also soliciting for flaws in what they term &quot;Windows Diffuse Applications.&quot;Submitters need to illustrate a working exploit and document it, according to the company&#39;s Web site, which is filled with misspelled words.There&#39;s nothing illegal about paying security researchers for flaws, but it does tend to annoy software companies whose products are affected.Wabisabilabi, based in Switzerland,&#160;took the idea of compensating researchers a step further&#160;last year by opening a site for them to sell vulnerabilities in auctions. In response to criticism, company officials countered that researchers could sell zero-day vulnerabilities on the black market.Microsoft, whose security vulnerabilities are generally high profile, advocates that researchers discretely alert it to software problems so users aren&#39;t put at risk. Companies generally refuse to pay for software vulnerabilities.Digital Armaments says on its Web site its research team was founded in 2003, and offices were opened in the U.S. later that year.In addition to paying money for vulnerabilities, Digital Armaments will also apparently pay in stock or credits that can be exchanged for stock under its Digital Armaments Contribution Program.Efforts to reach Digital Armaments on Wednesday morning by e-mail were unsuccessful.
556610
More info and a new kit for building and customizing Trojan malware is on sale online.
612223
Thin-client computing has been around for a decade, but the rising costs of updating software and installing security patches on networked personal computers is sparking renewed interest
748665
Online portal says bugs could have let attackers alter appearance of pages and access a victim's data.
286816
Carnegie Mellon University researchers are relying on an old adage to develop anti-fraud software for Internet auction sites: It's not what you know, it's who you know.
161755
Don't miss the opportunity! Obtain a FREE SSL Trial ID today.
240614
Site Offer 30% off this and other open source titles
448921
(InfoWorld) - Psst. Want to buy a zero-day? A Swiss startup called WabiSabiLabi has some for sale, but to qualified buyers only. On Tuesday, the company launched a security vulnerability marketplace, where details on unpatched software flaws can be bought and sold. By Thursday, the site was offering details on four bugs in products such as the Linux kernel and Yahoo Messenger. No bids had yet been registered, and asking prices for the research ranged between â¬500 ($681) and â¬2,000 A zero-day vulnerability is a previously undisclosed bug that has not been fixed by the vendor. WabiSabiLabi argues that the computer industry's ethical disclosure policies have led to a raw deal for security researchers, who typically are not paid for disclosing vulnerabilities. "Nobody in the pharmaceutical industry is blackmailing researchers (or the companies that are financing the research), to force them to release the results for free under an ethical disclosure policy," the WabiSabiLabi Web site states. Representatives from WabiSabiLabi could not immediately be reached for comment. The company bills its marketplace as a way for "security researchers to get a fair price for their findings and ensure that they will no longer be forced to give them away for free or sell them to cyber-criminals." But to David Perry at Trend Micro, it looks like something else. "It's going to be eBay for vulnerabilities," he said. Although WabiSabiLabi says it will sell details only to legitimate buyers, Perry is concerned that the site could be used to put dangerous information into the hands of criminals. "We're looking at the potential of cyber warfare coming up," said Perry, who is Trend Micro's global director of education. "Now we're going to peddle vulnerabilities in a winner-takes-all auction. How do we know who's good and who's bad when we do this?" Security researcher Cesar Cerrudo said that while it's uncommon for researchers to go underground to sell their vulnerabilities, it does happen. "Researchers will try to get money in the easier and faster way, and sometimes that can only be done in the black market," said Cerrudo, CEO of Argeniss Information Security. WabiSabiLabi is run by Herman Zampariolo, formerly CEO of Italian networking vendor iLight SpA. It lists Roberto Preatoni, founder of the Zone-h.org cyber-defacement Web site, as its strategic director. Like eBay, WabiSabiLabi offers sellers a variety of options. Research can be offered at a fixed price, sold at auction, or sold to a number of different buyers in what is known as a Dutch auction. WabiSabiLabi will test the research to make sure the vulnerabilities operate as advertised, and the company will also vouch for the sellers and buyers, who can remain anonymous and trade under nicknames. Companies such as 3Com's Tipping Point division and VeriSign's iDefense Labs have offered cash for this type of research before, but this is the first time that such an open marketplace has been created, Perry said. Argeniss's Cerrudo doesn't share Perry's fear of the vulnerabilities being misused. "This is already happening in the underground," he said, "but with a public service like this, I think things are a little clearer."
641287
A Swiss Internet start-up is raising the ire of the computer security community with the launch of an online auction house where software vulnerabilities are sold to the highest bidder.
729820
Scammers and hackers are targeting the human factor in system setups. Part of a series on hot security topics.