ATTENTION! If You're from the US and You'd like to buy a subscribtion please contact us directly at email: ewa.duranc@hakin9.org
Dear Readers, Welcome to this year’s first issue of Hakin9 Extra. For this special occasion, we decided to take up a special topic. This month, we are focusing on the most recent release of the famous Linux distibution – BackTrack 5 r3. Our first issue on BackTrack appeared to be the magazine you appreciated the […]
Read more
A Trojan (identified as Trojan-Downloader.Win32.VB.aoff) is targeting Windows-based systems by removing built-in AV software and clearing a path for cybercriminals to silently steal online banking credentials. The Trojan affects ‘ntldr’ the default boot loader in Windows.The Trojan is propagating as an attachment on an email. This attack vector relies on the victim clicking on the […]
Read more
Latest News From IT Security World By Armando Romeo, eLearnSecurity and ID Theft Protect Duqu: The Precursor Stuxnet Attack By Rebecca Wynn Duqu is essentially the precursor to a future Stuxnet-like attack. The threat was written by the same authors, or those that have access to the Stuxnet source code, and the recovered samples have […]
Read more
Advanced SystemCare 5: IObit Debuts The New Release Of Its Flagship Software Suite. Advanced SystemCare is one of the most downloaded Windows utility programs; version 5 of the software sees new functionality and features, making it one of the most comprehensive PC maintenance and optimization suites available today. SAN FRANCISCO15th November 2011–The number of PC […]
Read more
Most of Julian’s (http://julianevansblog.com) readers probably have a Facebook account, and some of you might also have a Twitter and foursquare account. Given Julian’s blog is all about protecting your online and offline identity you might want to reconsider posting social media status updates (and amending your privacy settings), sharing your geo-location and uploading holiday […]
Read more
The major UK banks and card schemes are a list of 26 companies that are working with the UK government on the creation of a new personal identity system for consumers transacting online. The ‘Midata‘ initiative is an online replacement of the abandoned UK national identity card scheme. The Midata concept plans to release all […]
Read more
Cracking Java Applications Using AOP Exploits (part 2) By Daniel Drozdzewski AOP has been used in the domain of Software Security before. Its use was mainly for validation, auditing and authorization purposes, which in turn improve software security as a whole. Those crosscutting concerns are being woven into the existing software after the fully functional […]
Read more
SpyEye has been observed trying to trick users into reassigning their cellphone numbers to receive one-time passwords (OTP) from their banks by SMS. The social engineering scam (assuming SpyEye has already infected the target PC) is found on fraudulent pages injected into a users online banking session that falsely claim they have been assigned a […]
Read more
The city of Yverdon-les-Bains will host by end of October the 2011 edition of the Application Security Forum – Western Switzerland conference. For this second edition, an exceptional lineup consisting of: 19 speakers and trainers, both locally and internationally recognized, will share their knowledge, best practices and experience on all sensitive topics related to application […]
Read more
Adobe is released a security update on (Sept. 21) to fix critical flaws in its Flash Player program that are being exploited in online attacks. The security issues include a cross-site scripting vulnerability that leaves Flash open to malicious script injections, and is currently being exploited “in the wild in targeted attacks. At ID Theft […]
Read more
Event: Cyber Security: SCADA Systems A technical exploration of protecting SCADA, smart grid and real-time systems Date: 2 December 2011 Venue: IET London: Savoy Place www.theiet.org/scada Join us at our exciting Cyber Security: SCADA Systems seminar to explore the technical world of protecting SCADA, Smart Grid and Real Time Systems, plus demonstration workshops and a […]
Read more
The SpitMo SpyEye hacking toolkit app is targeting smartphones running on the Android operating system according to security vendor Trusteer. The SpitMo is primarily targeting banking web pages. When a user browses to the targeted bank a message is injected, presenting a ‘new’ mandatory security measure, enforced by the bank, in order to use its […]
Read more
