Hack

Open-source ProFTPD FTP software hacked

December 3, 2010

The ProFTPD Project team is sorry to announce that the Project’s main FTP server, as well as all of the mirror servers, have carried compromised versions of the ProFTPD 1.3.3c source code, from the November 28 2010 to December 2 2010. All users who run versions of ProFTPD which have been downloaded and compiled in [...]

Read the full article →

The Pirate Bay Hacked

July 10, 2010

Brian Krebs reported on his blog that an Argentinian hacker named Ch Russo used security weaknesses in The Pirate Bay’s Web site to infiltrate and snatch the user names, e-mail and Internet addresses of more than 4 million users. Russo maintains that at no time did he or his associates alter or delete information in [...]

Read the full article →

Film review site hacked

December 18, 2009

The Register reports that hackers exploited a vulnerable PHP script on the movie review site, ‘Ain’t It Cool’, which redirected visitors over a 90-minute period on Thursday morning to a server containing a malicious Adobe Reader file. The booby-trapped PDF, according an analysis by researchers at Praetorian Prefect, exploited two vulnerabilities in Adobe Reader that [...]

Read the full article →

Twitter was hacked by the “Iranian Cyber Army”

December 18, 2009

Screenshots and commentary: http://www.techcrunch.com/2009/12/17/twitter-reportedly-hacked-by-iranian-cyber-army/ Quickly followed by; We are working to recovery from an unplanned downtime and will update more as we learn the cause of this outage. Update (11:28p): Twitter’s DNS records were temporarily compromised but have now been fixed. We are looking into the underlying cause and will update with more information soon. [...]

Read the full article →

Worm Author gets job

November 27, 2009

Graham Cluley’s blog. There are plenty of young coders out there who would not have acted so stupidly, are just as worthy of an opportunity inside a software development company, and are actually quite likely to be better coders than Towns who made a series of blunders with his code. Ikee worm author gets job [...]

Read the full article →

Symantec Website SQL injection

November 23, 2009

Romanian hacker Unu posted on his blog that he had located a critical SQL injection vulnerability in a website belonging to security company Symantec. If you remember, in February, Kaspersky faced with a sql injection. Then they had the courage to admit vulnerability, why have my admiration. There was fair play, they quickly secured vulnerable [...]

Read the full article →

Windows Live Hotmail phish

October 6, 2009

Over the weekend Microsoft learned that several thousand Windows Live Hotmail customers’ credentials were exposed on a third-party site due to a likely phishing scheme. Upon learning of the issue, we immediately requested that the credentials be removed and launched an investigation to determine the impact to customers. As part of that investigation, we determined [...]

Read the full article →

Four South Korean journalists ejected from Defcon

August 3, 2009

Conference representatives believe that three were on some sort of intelligence-gathering expedition. The South Korean “journalists” were not acting like press nor did their story add up. This kind of incident happens nearly every year, said one of the show’s senior organizers who goes by the name “Priest.” http://www.networkworld.com/news/2009/080309-korean-journalists-booted-from.html Certifiedbug August 10, 2008: Three French [...]

Read the full article →

100k websites deleted Sunday by hackers

June 9, 2009

Unknown hackers targeting a zero-day vulnerability in a virtualization application called HyperVM made by LXLabs were able to gain root access at UK-based Vaserv.com Sunday evening destroying data for as many as 100,000 websites. Half of Vaserv’s customers signed up for unmanaged service, which doesn’t include data backup. Log updates from Vaserv technicians as they [...]

Read the full article →

Hacker claims Kaspersky’s US servers breached

February 8, 2009

A blogger posted screen shots and other details Saturday to substantiate his claim that Kaspersky, the Moscow-based anti-virus company, did not secure its US servers from SQL Injection attacks and by altering one of the parameters the hacker gained access to “EVERYTHING: users, activation codes, lists of bugs, admins, shop, etc.” The Register: Kaspersky breach [...]

Read the full article →