websites

Booby trap threatCompromised websites are staying infected longer. Some infected sites stay up and running for as long as two months, according to an annual report from web security firm ScanSafe.… read more »
addto Add this link to... report Bury 
Chinese whispersSecurity researchers have unearthed more details about a Trojan that targets backend databases as well as desktop clients.… read more »
addto Add this link to... report Bury 
Websense Security Labs research has uncovered a case where a museum's compromised Web server is serving malicious code based on the referrer making the request. A referrer could be, for example, a search engine such as images.google.com. As interesting as the fact that they're doing this, however, is which referrers trigger the delivery of malicious content, when others do not. In this case, the malicious content is served only when the referrers for the request are certain high-profile image search sites. read more »
addto Add this link to... report Bury 
New levels of XSS for Boris'n'KenEthical hackers have discovered potentially serious vulnerabilities on the websites of the two principal candidates in today's London Mayoral election.… read more »
addto Add this link to... report Bury 
More SQL injection insanityThe miscreants who have poisoned more than half a million web pages aren't the only attackers thinking big. People behind a botnet known as Asprox have recently rejiggered their army to infect websites in a similar fashion.… read more »
addto Add this link to... report Bury 
Chinese hackers spread the silent loveThousands of websites in China have been booby trapped with code written to download Trojan software onto visitors who run vulnerable Windows PCs.… read more »
addto Add this link to... report Bury 
http://en.rian.ru/russia/20080523/108202288.html23/05/2008MOSCOW, May 23 (RIA Novosti) - Hackers attacked Russian nuclear power websites that allow users to check radiation background amid false rumors of a nuclear accident in northwest Russia, a nuclear industry official said on Friday.On Tuesday and Wednesday, several Internet forums carried reports of radioactive emissions from the Leningrad Nuclear Power Plant near St. Petersburg, and of a planned evacuation of local residents.A spokesman for the Rosat read more »
addto Add this link to... report Bury 
Beware of Belgians bearing card codesWe see a lot of lip service paid to the importance of complying with payment card industry standards when merchants accept credit and debit cards. But it seems plenty of websites still can't be bothered to follow the rules, which are designed to protect their customers against fraud and identity theft.… read more »
addto Add this link to... report Bury 
McAfee, Symantec and VeriSign plagued by XSS flawsSecurity researchers have identified cross-site scripting (XSS) issues on the websites of three IT security heavyweights. Coding flaws on the websites of McAfee, Symantec and VeriSign create a possible mechanism for hackers to launch phishing or malware attacks, according to security watchdog XSSed.… read more »
addto Add this link to... report Bury 
http://english.people.com.cn/90001/6433017.htmlPeople's Daily OnlineJune 19, 2008Four employees of a Shanghai-based Internet security company appeared before a Beijing court on Tuesday accused of attacking the website of an online games operator.At the hearing at Haidian district court, Luo Chun, general manager of the Shanghai Share Security Network Technology Co Ltd, and three of his employees, were said to have launched attacks on several online games operators in Beijing.They flooded targeted websites read more »
addto Add this link to... report Bury 
Insecure by designThe vast majority of US bank websites jeopardize the security of their online customers by including design flaws that expose passwords and are susceptible to tampering by attackers, researchers say.… read more »
addto Add this link to... report Bury