HomeSearch
Login
Welcome to  sysinfosec.net
Wednesday, November 05 2014 @ 11:30 PM CST
Patches coming available for ShellShock tracked by US CERT
Thursday, September 25 2014 @ 10:25 PM CDT
Views: 319
Patches becoming available for the bash shell related to the ShellShock attackUS CERT is tracking suppliers and available patches at the following link:
  http://www.kb.cert.org/vuls/byvendor?searchview&Query=FIELD+Reference=252743&SearchOrder=4
 
Note that this vulnerability is not necessarily limited to *nix platforms.  There are distributions of the bash shell for many platforms including Windows that maybe / are vulnerable to this attack.
 
--moderator
Consumer appliance Nest vulnerability results in unauthorized access to consumer personal and financial data
Tuesday, September 16 2014 @ 12:32 PM CDT
Views: 154
via open source intelligence...
September 15, Securityweek – Vulnerabilities found in website of Google-owned Nest.
 
According to a story published by SecurityWeek, a security researcher identified and reported several security vulnerabilities in the Web site of consumer home automation company Nest.  The vulnerabilties included a file upload vulnerability that would possibly allow a malicious actor to upload a shell program and gain access to personal and financial details of customers including credentials, payment card information and scanned copies of identification documents.  Google, Nest's parent company, states that the issue was addressed by restricting access to the affected domain and redirecting visitors to a different domain.
 
Source: http://www.securityweek.com/vulnerabilities-found-website-google-owned-nest
Social Engineering scammers targeting unsuspecting individuals posing as US Treasury or IRS agents
Thursday, June 19 2014 @ 01:07 AM CDT
Views: 484
The Social Engineers are at it once again.  Well done story and video from local television station outlines a scam where individuals are targetted at threatened with arrest.  Thieves send unsuspecting indiviuals to by a prepaid card and provide them the codes from the card as payment for back taxes.
 
 
-- Moderator 

 
IRS scammers target 9NEWS anchor 

Denver is the target of a sophisticated IRS scam in which thieves posing as IRS agents threaten to arrest taxpayers.
Read more (8 words)
Microsoft announces Zero Day vulnerability in Internet Explorer
Monday, April 28 2014 @ 09:52 PM CDT
Views: 1,698
Internet Explorer Zero Day vulnerability being used in limited attacks against users
Microsoft Security Advisory 2963983
Microsoft's venerable Internet Explorer is reportedly vulnerable to a Zero Day attack that could allow an attacker that is in a position to place malware to remotely execute arbitratry code on users running Internet Explorer 6, 7, 8, 9, 10, and 11.
 
Emergency fix is now available here MS14-021.  Surprisingly it includes a fix for WinXP...
Read more (275 words)
NCCIC Advisory on "Heartbleed" OpenSSL Vulnerability CVE-2014-0160
Thursday