Monthly Archives: October 2011

XSS in official Adobe site

Posted on October 28, 2011 by Prashant

Cross-site scripting aka XSS has been a common threat faced by web applications these days. That’s why its on the top 10 chart of OWASP! :) Many times while browsing websites, we had came across  this vulnerability (like the FlipKart.com and … Continue reading →

Tagged , , , , , | Leave a comment

Blackberry spam mails flooding in

Posted on October 25, 2011 by Prashant

Spam mails have always been the hot choice of cyber criminals and fraudster gangs. And they are back with something interesting. I was normally checking my inbox, when my eyes got struck on a mail that appeared to be from … Continue reading →

Tagged , , | Leave a comment

XML encryption standard found to be unsafe

Posted on October 22, 2011 by Prashant

According to researchers at the Ruhr University of Bochum XML encryption used by IBM and Microsoft in web service applications presents certain vulnerabilities that would allow someone to intercept and decrypt the data transmitted between online servers. The official W3C XML encryption specification … Continue reading →

Tagged , , , , | Leave a comment

Zero-Day vulnerability patched in Opera

Posted on October 19, 2011 by Prashant

Security researcher José A. Vázquez had discovered a security hole in Opera browser that could have been exploited to inject malicious code. Vázquez says that he found the hole and notified the developers with a proof of concept a year ago. … Continue reading →

Tagged , , , , | Leave a comment

Oracle patches 57 vulnerabilities

Posted on October 19, 2011 by Prashant

Software giant Oracle has released a critical update that fixes a large number of security holes in its products. The products range from Linux 5, Sun Ray, Sun Product Suit, Fusion Middleware, Application Server, Business Intelligence Enterprise Edition etc. The patch … Continue reading →

Tagged , , , , | Leave a comment

Malware spotted using DLL hijacking technique

Posted on October 14, 2011 by Prashant

DLL hijacking, what we believe is one of the most fatal threat  that Microsoft has ever faced!:) What’s interesting is that it is being used in a malware spotted recently. According Commtouch Café ,a new piece of malware has been … Continue reading →

Tagged , , , | Leave a comment

ASP mass infection takes down 300,000 websites

Posted on October 14, 2011 by Prashant

Internet security research firm Armorize has spotted a search engine poisoning attack that has infected more than 300,000 websites. The websites relied on ASP or ASP.NET web application frameworks came under the attack vectors. A malicious script that points to … Continue reading →

Tagged , , , , , | Leave a comment

Rogue web browser gets back online

Posted on October 11, 2011 by Prashant

Yapbrowser, the browser that automatically redirected users to obscene and illegal websites was once again spotted roaming the internet. It seems to be new version and it still does the same nasty stuff as before. Yapbrowser first appeared in 2006, … Continue reading →

Tagged , , , | Leave a comment

Researcher discovers vulnerability in American Express website

Posted on October 8, 2011 by Prashant

American Express is a leading name when it comes to the banking services. Recently security researcher Niklas Femerstrand has discovered a bug on th eAmerican Express web site that attackers can use to steal, among other things, the login data of credit card … Continue reading →

Tagged , , , , , | Leave a comment

Python virus found in the wild

Posted on October 8, 2011 by Prashant

Symantec security researchers have discovered a virus called Python.Pytroj that’s based on Python programming, which can easily infect .pyc files with code of its own. The method used to release the infection is fairly new and it should be taken into consideration … Continue reading →

Tagged , , , | Leave a comment