Hackers Center Blogs

Not Another Penetration testing course

2010-04-15T12:52:00.000-07:00

Have you ever attended a Penetration testing course?Have you found it vague/boring? Far from what your clients are asking you?If your answer is no, you can skip this post.If your answer is yes, me...

Read the rest of the story here

Data Related to Kneber Botnet breach recovered by Netwitness

2010-02-18T14:02:00.000-08:00

Security researchers at Herndon, Va.-based NetWitness Corp. have unearthed a massive botnet affecting at least 75,000 computers at 2,500 companies and government agencies worldwide.The Kneber botnet,...

Read the rest of the story here

Building security into business processes

2010-02-16T05:54:00.000-08:00

Earlier today after months of avoiding it, I finally decided to go a few days without my faithful Blackberry and get the camera repaired. As I handed over my Blackberry, the technician returned a...

Read the rest of the story here

Spy Eye tool kit goes after Zeus botnet

2010-02-11T04:42:00.000-08:00

Spy Eye tool kit goes after Zeus botnet: "Peter Coogan at Symantec put up a very interesting blog post yesterday about a crimeware kit called SpyEye v1.0.7 (on sale now on Russian sites -- $500) that...

Read the rest of the story here

Black Hat: Researcher claims hack of chip used to secure computers, smartcards

2010-02-03T18:21:00.000-08:00

A researcher with expertise in hacking hardware Tuesday detailed at the Black Hat DC conference how it's possible to subvert the security of a processor used to protect computers, smartcards and even...

Read the rest of the story here

China steals Google's data

2010-01-12T15:52:00.000-08:00

In an astonishing post, today Google admitted that Chinese hackers have successfully stolen intellectual property from the big G corporate network and from other 20 large companies in the U.S.Gmail...

Read the rest of the story here

PortSwigger.net - web application security

2010-01-08T05:05:00.000-08:00

Burp Suite v1.3 releasedBurp Suite v1.3 is now available to download. This is a major upgrade with a host of new features.Burp Suite is an integrated platform for attacking web applications. It...

Read the rest of the story here

eLearnSecurity : Breaking into system is no more enough

2009-12-28T05:01:00.000-08:00

Hello everyone. We have been out for awhile working on the upcoming and long awaited eLearnSecurity Penetration Testing Professional Course.The work has been hard as you can see here but the...

Read the rest of the story here

NIST releases Security Content Automation Protocol for FISMA

2009-11-05T14:44:00.000-08:00

Automated tools take sweat out of security compliance Nov 05, 2009 When it comes to complying with federal security mandates, chief information security...

Read the rest of the story here

A zero-day flaw in the TLS and SSL protocols, which are commonly used to encrypt web pages, has been made public.

2009-11-05T10:25:00.000-08:00

Security researchers Marsh Ray and Steve Dispensa unveiled the TLS (Transport Layer Security) flaw on Wednesday, following the disclosure of separate, but similar, security findings. TLS and its...

Read the rest of the story here

Use Data Masking to Secure Sensitive Data in Non-Production Environments

2009-10-23T19:10:00.000-07:00

Data masking is the process of de-identifying (masking) specific elements within data stores by applying one-way algorithms to the data. The process ensures that sensitive data is replaced with...

Read the rest of the story here

Symbian Microkernel released as Open Source

2009-10-23T12:48:00.001-07:00

It was well over a year ago now that news of the Symbian operating system--found on approximately half of global smartphones--going open source broke. The news was interpreted as particularly...

Read the rest of the story here

Congressional Advisory Panel: China taking valuable information from hitech companies

2009-10-23T12:45:00.001-07:00

The Chinese government is stepping up efforts to steal valuable information from high-technology companies in other countries, according to a congressional advisory panel, which detailed one...

Read the rest of the story here

Almost half ISO 27001 'compliant' firms break with security

2009-10-23T12:40:00.001-07:00

Almost half of businesses that claim compliance with ISO 27001 are sharing privileged user accounts and breaking other standard guidance, according to a survey of IT managers.Some 47 percent of firms...

Read the rest of the story here

Firefox Users At Risk From MIcrosoft Plug-In

2009-10-16T19:35:00.000-07:00

[ UPDATE: Mozilla has now removed the extension from the blocklist after Microsoft clarified some information in its bulletin on how Firefox users were affected. ]Patches critical bug, exploitable...

Read the rest of the story here

Latest Fake Antivirus Attack Holds Compromised Systems Hostage

2009-10-16T19:27:00.001-07:00

Attack forces user to purchase phony antivirus package to free computer Attackers have added a new twist to spreading fake antivirus software: holding a victim's applications for ransom. ...

Read the rest of the story here

Botnet Operators Impacted by Global Economy. DDoS and other attacks cheaper

2009-10-16T19:20:00.001-07:00

Security researchers say the cost of criminal services such as distributed denial of service, or DDoS, attacks has dropped in recent months. The reason? Market economics. "The barriers to entry in...

Read the rest of the story here

Oracle to fix 38 database, product vulnerabilities

2009-10-16T19:13:00.001-07:00

Image via WikipediaOracle has announced plans to ship a Critical Patch Update (CPU) with fixes for at least 38 security vulnerabilities in a wide range of database and server products. The most...

Read the rest of the story here

NIST maps out the emerging field of IT metrology

2009-10-06T18:10:00.000-07:00

NIST maps out the emerging field of IT metrologyInformation technology security is a hot topic, but attention usually focuses on the lack of it. What is missing is an objective, quantifiable way to...

Read the rest of the story here

Avert Labs Paper: Inside the Password Stealing Business:the Who and How of Identity Theft

2009-10-06T18:00:00.000-07:00

Avert Labs has published a new research paper, “Inside the Password-Stealing Business: the Who and How of Identity Theft.” With so many financial transactions occurring online today, stealing...

Read the rest of the story here

Computer scientists successfully boot one million Linux kernels as virtual machines

2009-10-06T17:56:00.000-07:00

Computer scientists successfully boot one million Linux kernels as virtual machinesSeptember 25th, 2009 in Technology / Computer SciencesSandia National Laboratories computer scientists Ron Minnich...

Read the rest of the story here

Express Scripts: 700,000 notified after extortion

2009-10-06T17:46:00.001-07:00

Express Scripts: 700,000 notified after extortionLast November, the company reported that someone had threatened to expose millions of customer prescription records, but it has come under criticism...

Read the rest of the story here

MS Windows 2000 SP4 and XP Owners beware, "No patch for you" for MS09-048

2009-09-10T21:00:00.000-07:00

Image via WikipediaMicrosoft this week started what will be one of the largest debated issues they will have in some time. Especially given that organizations that pay maintenance on their software...

Read the rest of the story here

Avert Labs Releases A New Version of McAfee FileInsight

2009-09-10T17:15:00.000-07:00

Image via WikipediaToday Avert released the new version 2.1 of McAfee FileInsight. You can download a free copy from the Avert Tools site. FileInsight is a handy integrated tool environment for web...

Read the rest of the story here

Absolute Poker Scandal

2009-09-02T06:31:00.000-07:00

In the Summer of 2007, a disturbing trend was occurring on the poker site Absolute Poker. Four accounts were consistently winning large amounts of money in high stakes games by playing a clearly...

Read the rest of the story here