Results for "security"
Girl killed herself on Halloween, Facebook Scam
Scammers have put a new spin on an old Facebook scam, claiming that a girl killed herself on Halloween after her father posted a message on her wall.

Facebook users are sharing messages with their friends, claiming to link to the salacious content.

Girl killed herself on Halloween, Facebook Scam

Girl-Killed-Herself-on-Halloween-After-Dad-Posted-This-on-Her-Wall
[LINK]
This is unbelievable.. shocking..

The messages are currently spreading very quickly on Facebook, as - at the moment at least - Facebook's built-in security systems are not blocking them.

We've seen similar scams in the past, of course, including some which claimed that the girl killed herself on Christmas Eve rather than at Halloween.

Of course, the story is purely designed to lure you into clicking on the link. So what do you see if you do click on the link?

Girl killed herself on Halloween, Facebook Scam

You are taken to a third-party webpage where you are told that in order to view the shocking message left by the father on his late daughter's Facebook wall, you will have to "Share" and "Recommend" the link with your friends.

Woah!! Would you really share and recommend a link before you've actually found out what the content is?

Sadly, lots of Facebook users are so curious that they will do exactly that - helping the message spread for scammers.

And why do the scammers want the message to spread?

Because it drives traffic to online surveys like this, which earn the scammers affiliate commission:

Girl killed herself on Halloween, Facebook Scam

If you were fooled into participating in this scam remove the message from your newsfeed, and delete any messages you may have inadvertently shared with your friends. That way at least you are no longer spreading it with your online chums. (via)

cyber news , facebook , security

takecy 11/03/2011
at 0 comments
Labels: , ,
Avast Warns WordPress flaw
Avast Warns WordPress flaw
Security firm Avast is advising webmasters to scan sites and update log-in credentials following the discovery of a malware attack targeting the WordPress publishing platform.

The attack exploits a vulnerability in an image plug-in for WordPress, allowing an attacker to access a site and use the platform to distribute malware payloads and harvest FTP log-in credentials for users and administrators.

Jan Sirmer, senior virus lab researcher at Avast, said that a flaw in the TimThumb image plug-in allows the attackers to infect sites running WordPress with a malicious PHP file.

The attack is believed to be conducted through a commercially available toolkit called BlackHole, and redirect users to sites that attempt to install malware.

Sirmer warned that in some cases the attack had gone unnoticed by administrators because the sites were hosted by third-party service providers.

Avast urged administrators to scan their own systems, and to visit their sites with PCs running anti-virus software to detect possible infections on hosted pages.

"WordPress is not immune to exploitation, a fact driven by its overall popularity and the wide number of available versions," Sirmer said.

"Stronger log-in and password keys, alone or together with two-factor authentication, are options that system administrators should use when working with third-party IT managers." via paketstromsecurity

antivirus , cyber news , security , wordpress

takecy 11/01/2011
at 0 comments
Labels: , , ,
Google SSL, For More Secure Search
Google SSL Encrypted

Google : We’ve worked hard over the past few years to increase our services’ use of an encryption protocol called SSL, as well as encouraging the industry to adopt stronger security standards. For example, we made SSL the default setting in Gmail in January 2010 and introduced an encrypted search service located at https://encrypted.google.com four months later. Other prominent web companies have also added SSL support in recent months.

As search becomes an increasingly customized experience, we recognize the growing importance of protecting the personalized search results we deliver. As a result, we’re enhancing our default search experience for signed-in users. Over the next few weeks, many of you will find yourselves redirected to https://www.google.com (note the extra “s”) when you’re signed in to your Google Account. This change encrypts your search queries and Google’s results page. This is especially important when you’re using an unsecured Internet connection, such as a WiFi hotspot in an Internet cafe. You can also navigate tohttps://www.google.com directly if you’re signed out or if you don’t have a Google Account.

What does this mean for sites that receive clicks from Google search results? When you search from https://www.google.com, websites you visit from our organic search listings will still know that you came from Google, but won't receive information about each individual query. They can also receive an aggregated list of the top 1,000 search queries that drove traffic to their site for each of the past 30 days through Google Webmaster Tools. This information helps webmasters keep more accurate statistics about their user traffic. If you choose to click on an ad appearing on our search results page, your browser will continue to send the relevant query over the network to enable advertisers to measure the effectiveness of their campaigns and to improve the ads and offers they present to you.

As we continue to add more support for SSL across our products and services, we hope to see similar action from other websites. That’s why our researchers publish information about SSL and provide advice to help facilitate broader use of the protocol. We hope that today’s move to increase the privacy and security of your web searches is only the next step in a broader industry effort to employ SSL encryption more widely and effectively.

Google SSL, For More Secure Search
taken and edited from google blog
cyber news , google , security , Tips and Trik

Unknown 10/19/2011
at 0 comments
Labels: , , ,
ArpON v2.2 Released – Tool To Detect & Block ARP Spoofing
ArpON (ARP handler inspection) is a portable handler daemon that make ARP secure in order to avoid the Man In The Middle (MITM) through ARP Spoofing/Poisoning attacks. It detects and blocks also derived attacks by it for more complex attacks, as: DHCP Spoofing, DNS Spoofing, WEB Spoofing, Session Hijacking and SSL/TLS Hijacking & co attacks.

This is possible using three kinds of anti ARP Poisoning techniques: the first is based on SARPI or “Static ARP Inspection” in statically configured networks without DHCP; the second on DARPI or “Dynamic ARP Inspection” in dynamically configured networks having DHCP; the third on HARPI or “Hybrid ARP Inspection” in “hybrid” networks, that is in statically and dynamically (DHCP) configured networks together.

SARPI, DARPI and HARPI protects both unidirectional, bidirectional and distributed attacks: into “Unidirectional protection” is required that ArpON is installed and running on one node of the connection attacked; into “Bidirectional protection” is required that ArpON is installed and running on two nodes of the connection attacked; into “Distributed protection” is required that ArpON is installed and running on all nodes of the connections attacked. All other nodes without ArpON will not be protected from attack.

ArpON is therefore a host-based solution that doesn’t modify ARP’s standard base protocol, but rather sets precise policies by using SARPI for static networks, DARPI for dynamic networks and HARPI for hybrid networks thus making today’s standardized protocol working and secure from any foreign intrusion.

Features
It detects and blocks Man In The Middle through ARP Spoofing/Poisoning attacks in statically, dynamically (DHCP), hybrid configured networks
It detects and blocks derived attacks: DHCP Spoofing, DNS Spoofing WEB Spoofing, Session Hijacking, SSL/TLS Hijacking & co
It detects and blocks unidirectional, bidirectional and distributed attacks
Doesn’t affect the communication efficiency of ARP protocol
Doesn’t affect the race response time from attacks
Multi-threading on all OS supported
It manages the network interface into unplug, boot, hibernation and suspension OS features
It works in userspace for OS portability reasons
Easily configurable via command line switches, provided that you have root permissions
Tested against Ettercap, Cain & Abel, dsniff and other tools

You can download ArpON v2.2 here:

ArpON-2.2.tar.gz

Or read more here.

download , security , software

Unknown 5/06/2011
at 0 comments
Labels: , ,
Facebook XSS Again
MagelangCyber : Facebook begitu besarnya dan ruwetnya, disana sini banyak terdapat xxs, setelah sebelumnya terdapat xss kemudian ada lagi xss autopost status by Crazydavinci kini ada lagi xss di facebook. Yach, memang ga begitu berbahaya sih buat si facebook sendiri tapi kan namanya bug, sedikit aja ada celah langsung buat maenan anak-anak yang suka usil di dunia cyber... untuk kali ini xss facebook terdapat di salah satu subdomain faebook yaitu di http://1.61.channel.facebook.com/ . saya baru tau pagi ini gan sebelum ane posting ini artikel, dapet itu xss dari om kaMtiEz

Screen Shoot:



Letak xss nya di sini gan....


atau visit link : XSS Facebook


Wah, bener- bener tertinggal jauh dengan security Google.

cyber news , facebook , security

Unknown 4/04/2011
at 0 comments
Labels: , ,
osCommerce Scanner Online Merchant v2.2 RC2
osCommerce Scanner Online Merchant v2.2 RC2 tools scanner auto deface, sebelumnya versi 1 sudah dirilis oleh hmei7 iki versi 2 nya lebih mantab mas bro, pada tools versi dua ini auto deface diinjectkan pada direktori /images/deface.htm sedikit berbeda dengan versi sebelumnya yang versi 1, namun target masih tetep sama yaitu pada website OsCommerce, nah dari pada bingung ngebayaningnya monggo kita praktekkan langsung saja dibawah ini

--------------------------------------
Donlot tool : disini mas bro
--------------------------------------
Website target : target.txt
---------------------------------------

extrax dulu tool oscommerce yang udah ente download diatas, trus di extrax itu tools.
trus ente download juga target.txt dan save satu folder dengan tools oscommerce yang udah di extrax tadi sekarang tinggal load aja dan rubah script deface yang ada pada tools, kalo udah tinggal scan .... 

thanks for Hmei7
credits for oms junzdab
download , hacking , security , software

Unknown 3/04/2011
at 0 comments
Labels: , , ,
Mozilla Patched, For Hacking Contest
Mozilla merilis Firefox 3.6.14 maupun 3.5.17 mengantisipasi putaran serangan hack jahat. Kedua browser diterima 10 patch , semua yang menangani masalah keamanan. Namun, sementara Mozilla telah diperbarui keamanan dari browser, fitur baru datang dengan rasa pahit dari sejumlah besar crash. Sedangkan versi beta dari Firefox 4 menunjukkan kurang dari 3 crash per 100 pengguna harian aktif, 3.6.14 te laporan ozilla sendiri.

Kami belum mendengar kembali dari Mozilla mengapa jumlah crash luar biasa tinggi, tapi tampaknya untuk sebagian besar crash Firefox berjalan dibawah Windows NT 5.0/6.0/6.1.

Google baru-baru diperbaharui Chrome 9 juga. 19 pembaruan yang diterapkan untuk mengamankan browser mengantisipasi Pwn2Own kontes hacking.

Sementara itu, Mozilla berbaris menuju RC Firefox 4. Firefox 4 Beta 12 saat ini sedang digunakan oleh sekitar 1,3 juta pengguna. Ada saat ini hanya 1 bug tanpa patch kiri, sementara buglog masih daftar 6 bug terbuka.

Source : conceivablytech
cyber news , download , firefox , hacking , IE , security , software

Unknown 3/03/2011
at 0 comments
Labels: , , , , , ,
Subscribe to: Posts ( Atom )