CERTStation Lab

Zscalar ThreatLabz Free Web Risk Analysis Service

2012-01-28T07:53:00.002-05:00

Zulu - a free service from Zscalar that scans websites for potential threats. This service uses mix of proprietary-based and open-source tools to scan sites and provide security ratings. Threat rating is done through the use of heuristics, reputation and host domain analysis for a particular URL. It supports direct URLs as well as addresses masked with URL shortening services. These days

Opensource intrusion detection & prevention engine

2010-07-23T03:37:00.000-04:00

The Open Information Security Foundation (OISF) has released version 1.0 of its open source intrusion detection and prevention engine – Suricata. The first stable release includes a number of improvements and new features over the previous development releases, such as support for DCERPC over UDP and the tag keyword. Unlike Snort, another popular open source network intrusion prevention and

Facebook users prefer quitting the social network over privacy concerns.

2010-05-25T02:30:00.000-04:00

A company called Sophos have claimed that numbers of Facebook users are having concerns about how the privacy is being maintained on the social networking site and how is it effecting them. Previously the company ran an online survey asking Facebook users if they would consider quitting Facebook over privacy concerns. In response the survey concluded that sixty per cent of the users stated that

Credit card skimming attacks on pay-at-the-pump petrol stations

2010-02-26T00:18:00.001-05:00

According to US media reports, criminals have launched large-scale attacks on petrol pumps with built-in card payment systems to gain access to card data. Similar attacks that involve the attachment of special skimming devices over the legitimate equipment to copy card data, have previously only targeted cash points. Attackers often obtain the PIN with a hidden camera or a secondary PIN pad

National Satellites are they Hackable ...!

2009-04-13T06:33:00.005-04:00

According to " http://www.infiltrated.net/amishAttacks.html " reported on 9th april "Security experts are reporting today that Amish hackers equipped with reverse engineered VCIM's have hacked into Instar's vehicle satellite navigation systems and are extorting Instar." while some witnessess were also reported saying "It's horrible. I was headed down Main Street and my Garmin told me to turn

Adobe Vulnerability takes a new turn

2009-03-12T11:16:00.002-04:00

The new adobe vulnerability is now exploitable not only by reading the infected pdf file but also by at least three different methods using metadata which is used by windows to show file information. It turns out that adobe has a shell extension which get the file information. Security Researcher "Didier Stevens" have released a short video on his blog which shows how this vulnerability can be

Heartland Sniffer Hid In Unallocated Portion Of Disk

2009-01-29T07:40:00.001-05:00

While I was surfing online today, this news was something really interesting.“The sniffer malware that surreptitiously siphoned tons of payment card data from card processor Heartland Payment Systems hid in an unallocated portion of a server’s disk. The malware, which was ultimately detected courtesy of a trail of temp files, was hidden so well that it eluded two different teams of forensic

FBI, CIA and NSA websites susceptible to XSS attacks.

2009-01-22T07:02:00.000-05:00

Popular xss archive website xssed.com is reporting that government websites like FBI.gov, CIA.gov and NSA.gov are susceptible to XSS attacks found by independent researchers. Cross site scripting attacks are not new and have been causing damage since 2007, numerous trainings, presentations and books have been in market since its time of discovery but this has still been around like the SQL

MD5 Practically Attacked

2009-01-01T03:39:00.009-05:00