From the category archives:

News

» News

All Defcon & Blackhat presentations and videos in one place

This spreadsheet has been making its rounds online and contains details of DEFCON & Black Hat presentations along with authors, youtube links, links to presentations etc. Many Thanks to Javier Bassi

Read Ahead →

» News

U.N. hit by biggest ever cyber attacks uncovered

Security experts from McAfee have discovered the biggest series of cyber attacks to date. This one involves the infiltration of the networks of 72 organizations including the United Nations, governments and companies around the world. McAfee reported a five year long attack which affects # Govt of 1. US 2. India 3. Taiwan 4. South [...]

Read Ahead →

» News

India to work with US on Data.gov and against cyber-crime

An MoU has been signed by Deputy Secretary for the US Department of Homeland Security, Jane Holl Lute and R Chandrashekhar, secretary for India’s Department of Information Technology for working together on cyber crime and data consolidation. As part of the MoU, the following agencies will be working together along with the cyber security communities: Indian Computer Emergency Response [...]

Read Ahead →

» News

TDL-4 botnet traps 4.5 million PC’s

Security researchers [Sergey Golovnoav & Igor Soumenkov] at Kaspersky Lab have posted a detailed analysis of new botnet called TDL-4 and calling it as –> the one that might just be “indestructible”. TDL-4 compared to previous versions is an updated algorithm encrypting the protocol used for communication between infected computers and botnet command and control [...]

Read Ahead →

» News

Should I change my password

What is common in all these attacks? sosasta leak sony attack rootkit.com leak gawker leak few lulz attack few anonymous attack Most of these attack exposed user databases and in most of the cases the passwords too. Are you aware if your ID was compromised in any of these attacks or not? Checkout https://shouldichangemypassword.com/ created [...]

Read Ahead →

» News

Sosasta attacked in a “sasta” way

Sosasta (Indian subsidiary of GrounOn) got compromised in a very easy & sasta(cheap) way. A simple Google query exposed there database of 3,00,000 usernames and password. God knows when people will understand basic security of hashing the password. This si being covered in OWASP TOP 10 from many years (See https://www.owasp.org/index.php/Top_10_2010-Insecure_Cryptographic_Storage) Discovered by: Australian security [...]

Read Ahead →

» News

Sega Database Pwned, Account Information Compromised

Seems like all the attackers have started targeting games industry. After breaking into Sony(multiple times), Nintendo, Bethesda, Codemasters and Epic, this time they have infiltrated into SEGA. As per the mail sent out to sega customers Dear ___, As you may be aware, the SEGA Pass system has been offline since yesterday, Thursday 16 June. Over the last 24 hours [...]

Read Ahead →

» News

Insecure website of Air India leaks credit card & passports

Website of Centaur Hotel at IGI airport New Delhi (http://centaurhotels.com/) used to upload customer data like scanned copy of passport, pan card, credit card etc in an unlinked “hidden” directory on the website. The Centaur Hotels is a unit of the Hotel Corporation of India, which is a wholly owned subsidiary of India’s national carrier [...]

Read Ahead →

» News

After PSN, hackers attack codemasters

Attack after attacks and this time its UK game developer Codemasters whose customer database has been compromised. As posted on company’s forum: Codemasters said hackers gained unauthorized entry to Codemasters.com on Friday, June 3. “As soon as the intrusion was detected, we immediately took codemasters.com and associated web services offline in order to prevent any [...]

Read Ahead →

» News

Sony PSN hit by new exploit

Yesterday Nyleveia revealed a new vulnerability in Sony PSN password reset page. The hack involves PSN web-based password reset page, where it’s said anyone can change someone else’s password using their PSN account email and date of birth (details possibly collected by hackers in April breach). Eurogamer’s also claiming to have seen actual video footage [...]