Tag Archives: security

Android malware said to be targeting Indian politicians

Posted on May 4, 2013 by Prashant
am

Android as of now has gain popularity much more than desired by its creator! Anything that has popularity and relays on internet for major function, becomes an easy target for cyber crooks. Though security loopholes have been updated and brought … Continue reading →

Tagged , , , , , , , , , , | Leave a comment

Beware! RBI lottery scam on the way

Posted on April 17, 2013 by Prashant
s2

One fine morning while doing routine work to analyze malicious mails and samples, I came across one such mail hailing from RBI offering lottery. Obviously this ain’t gonna be legitimate! :) But this kind of mail landing in inbox is … Continue reading →

Tagged , , , , , , , | Leave a comment

Kali Linux: A complete infosec distro

Posted on April 7, 2013 by Prashant
k

BackTrack has always been the most popular choice when it comes to choose a security purpose distro. The offensive security open source distro gained a lot of popularity and was rolled till version 5 with frequent changes to the variants. … Continue reading →

Tagged , , , , | Leave a comment

XSS in Dell

Posted on March 9, 2013 by Prashant
XSS alert

Dell is a leading name in the Information Technology industry, especially the hardware segment of the industry. From servers to work stations, desktops, laptops, mobiles, Dell has got its name and a good hold on leading forms of IT gadgets. … Continue reading →

Tagged , , , , , , , | 1 Comment

No, not a Java Zero Day again!

Posted on March 1, 2013 by Prashant
Java_Bullet

For all netizens, I have a simple advice: either disable Java or uninstall it! A brand new Java Zero Day has been identified by security firm FireEye. The constant targets are browsers that have Java v1.6 Update 41 and Java … Continue reading →

Tagged , , , , , , , | Leave a comment

APTs and the Red Dragon

Posted on February 20, 2013 by Prashant
apt1

Yesterday following a tweet, I came across a newly published report pointing towards the involvement of the Chinese government and its People’s Liberation Army (PLA) involvement in some long time cyber espionage carried out in the past. A leading security … Continue reading →

Tagged , , , , , , , , | Leave a comment

HealthKart.com XSS

Posted on February 8, 2013 by Prashant
XSS alert

Many a times passing by few websites, we have responsibly disclosed security related issues especially XSS and SQL injection threats. This is one of the findings of our. HealthKart.com is an e-commerce website dealing in health care products, providing online … Continue reading →

Tagged , , , , , | 1 Comment

Exploit Diary: Ruby on Rails and Java back with exploits

Posted on January 10, 2013 by Prashant
Java_Bullet

The New Year welcomed Ruby on Rails and Java with exploits and zero days! Talking about Ruby on Rails first, an SQL injection vulnerability was identified on the active record in all versions. Due to the way dynamic finders in … Continue reading →

Tagged , , , , , , , | Leave a comment

PCWorld.com XSS

Posted on January 6, 2013 by Prashant
pc1

PCWorld is a leading magazine in the field of Information Technology updating its reader with the modern trends in technology, computers, gadgets etc. The magazine is available in paper back format and has a website as well. A month back … Continue reading →

Tagged , , , , , , | Leave a comment

Exploit Diary: Firefox memory leak exploit

Posted on January 3, 2013 by Prashant

We at Secfence keep analyzing day to day threats and exploits to provide better solutions to our customers. Our vulnerability research specialist Mr Vinay Katoch came across one such exploit where he was able to create PoC for the exploit. … Continue reading →

Tagged , , , , , | Leave a comment