Security

New variant on MPACK hacking

Tuesday, August 26th, 2008

I thought these villains had been quiet for too long and then, last night, I happened to notice a support ticket in our queue from a customer claiming that we had hijacked his site, or the server it was on. The ticket had already been pushed up the line to one of our senior techs [...]

Joomla! 1.5.* Vulnerability

Thursday, August 14th, 2008

Project: Joomla! SubProject: com_user Severity: Critical Versions: 1.5.5 and all previous 1.5 releases Exploit type: Password Reset Forgery Reported Date: 2008-August-12 Fixed Date: 2008-August-12 Description A flaw in the reset token validation mechanism allows for non-validating tokens to be forged. This will allow an unauthenticated, unauthorized user to reset the password of the first enabled [...]

DNS Vulnerability – Cache Poisoning

Saturday, July 19th, 2008

Recently a new DNS vulnerability has been discovered (Read the story here) which allows a malicious hacker to poison a DNS cache. The ability to poison a cache allows someone to redirect traffic (web, ftp, email, etc) away from intended sites to a hacker’s own site(s), which may host virii, trojans, bot-inserters, etc, so it [...]

Another hacker attack

Friday, October 19th, 2007

I seem to be writing more and more about hackers getting into sites, and just today I got this from one of our UK suppliers … We are writing to inform you that we have recently discovered evidence of a network intrusion involving a ###### server. We have reason to believe that the intruder has [...]

Continuing MPack hack attacks

Tuesday, October 2nd, 2007

And so it goes on … The Register reports today that the Chinese Internet Security Response Team web site (www.cisrt.org) is the latest high-profile site to fall foul of the hackers. Read the full story here Tagged as:chinese internet hackers internet security security response team

‘Professional’ hackers at large

Thursday, September 20th, 2007

A bunch of hackers using a commercial hacking program (MPack) are on the loose, and causing some considerable concerns amongst web-site owners and hosting companies. They are accessing multiple web sites to add a single line of code directly to the main index pages, which closes down the browser window and brings up a pop-up [...]