Almost 300,000 Webpages Infect Visitors Through Invisible IFrame Link
A security researcher has identified a new attack that has infected almost 300,000 webpages with links that direct visitors to a potent cocktail of malicious exploits. The SQL injection attacks started...
View ArticleRockYou.com SQL Injection Flaw Exposes 32 Million Accounts Passwords
Millions of user passwords to social networking sites have been exposed, after a serious SQL injection flaw on the Rockyou.com website left login details – stored in plain text – up for grabs. RockYou...
View ArticleIntel Website Hacked, Personal Data Exposed Through SQL Injection
A Romanian hacker who goes by the handle “unu” has struck again: this time, he demonstrated how a SQL injection vulnerability left personal information in the form of passports exposed on an Intel...
View ArticleFox Sports Web Site Infected, Injected Code Serves Exploits
Security researchers warn that the Fox Sports website has been compromised by unknown attackers, who injected malicious code into a custom error page. There are two separate offensive script tags, each...
View ArticleUS Army Website Compromised Through SQL Injection
A Romanian grey hat hacker has disclosed an SQL inject (SQLi) vulnerability on a website belonging to the United States Army, which leads to full database compromise. The website, called Army Housing...
View ArticleWhirlpool’s Kitchenaid.com Remains Malware Infected For 5 Months
Domestic appliance manufacturer Whirlpool has come under fire for failing to clean up a malware infection on one of its sites, months after it was notified of a problem by UK anti-virus firm Sophos....
View ArticleUnknown Attack Compromised Hundreds Of WordPress Websites
Hundreds of WordPress-powered blog owners have recently found their websites inaccessible after a critical value has been altered in the database. The attack seems to affect even the latest version of...
View ArticleThousands Of High-Ranked Webpages Infected With Malware, Including...
More than 100,000 webpages, some belonging to newspapers, police departments, and other large organizations, have been hit by an attack over the past few days that redirected visitors to a website that...
View ArticleCritical Security Holes In OpenCart, Multiple osCommerce Websites Infected...
A security researcher claims he’s found a total of fourteen dangerous vulnerabilities in OpenCart. However, because the project’s lead developer is apparently unwilling to address security issues, he...
View ArticleThe Pirate Bay Compromised, Hacker Swipes Details Of 4 Million Users
The Pirate Bay has been compromised by an Argentinean hacker who made off with usernames, email and internet addresses of more than four million people signed up to the BitTorrent tracker site....
View ArticleNew Mass Injection Attack Adds Rogue Code To JS Files, Rackspace And Media...
Security researchers warn that a new mass injection attack affecting websites hosted at Rackspace and Media Temple. The compromises result in rogue JavaScript code being added to legit .js files used...
View ArticleMultiple TechCrunch Websites Compromised, Infect Visitors With Malware
Several websites from the TechCrunch Network, including TechCrunch Europe, MobileCrunch and CrunchGear fell victim to a code injection attack, which served malware to visitors. Founded in 2005,...
View ArticleMPAA-Run Copyprotected.com Website Defaced By Anonymous, Redirects To...
Members of the Anonymous collective have hacked copyprotected.com, a website run by the Motion Picture Association of America (MPAA) to provide information about the copy protection awareness icon. The...
View ArticleInternet Explorer 0-day Malware Infects Amnesty International Hong Kong...
Visitors to Amnesty International’s Hong Kong website are being bombarded with a host of lethal exploits, including one that attacks an unpatched vulnerability in Microsoft’s Internet Explorer browser,...
View ArticleSavannah Free Software Collaborative Development Platform Hacked, Accounts...
Savannah, the collaborative development platform maintained by the Free Software Foundation, was taken offline earlier this week after unknown attackers exploited an SQL injection vulnerability to...
View ArticleCitySights NY Website Breached, 110,000 Memebers Credit Card Details Stolen
CitySights NY, a company organizing sightseeing tours in New York, notified 110,000 former customers that their credit card details were compromised after unidentified individuals hacked its website....
View ArticleAccess To Hacked Government, Educational, Military Websites Sold On...
Security vendor Imperva warns that hackers are selling access to hacked websites and servers that belong to government, military and educational institutions. The company provides a screenshot of a...
View ArticleMySQL.com Database Compromised Through SQL Injection, Localized Website...
Hackers have compromised the database of MySQL.com, as well as the French, German, Italian, Japenese and other localized versions of the website, ironically by exploiting an SQL injection...
View ArticleEuropean Space Agency Website ESA.int Hacked, FTP And Email Passwords Leaked
The website of the European Space Agency (ESA) has been hacked into and a list of FTP accounts, as well as email addresses and passwords for administrators and editors have been leaked. The www.esa.int...
View ArticleGoal.com Parts Injected With Malware-Serving Code, Multiple Pages Including...
Security researchers from Armorize warn that attackers have managed to inject visitor infecting code into the popular soccer news website goal.com. The rogue iframe has been inserted, probably through...
View Article
