bugtraq - Weekly Web Hacking Incidents update for Feb 25th

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 01 Mar 2009 09:54:34 +0200
From: Ofer Shezaf <ofer@...zaf.com>
To: Bugtraq <bugtraq@...urityfocus.com>
Subject: Weekly Web Hacking Incidents update for Feb 25th

The Web Hacking Incidents Database (http://whid.webappsec.org), or WHID for
short, is a Web Application Security Consortium (http://www.webappsec.org)
project dedicated to maintaining a list of web applications related security
incidents. WHID goal is to serve as a tool for raising awareness of the web
application security problem and provide information for statistical
analysis of web applications security incidents.

To continuously learn about new incidents, subscribe to the WHID RSS at
http://whid.webappsec.org/whid/rss.

The following incidents where added to WHID last week:

* WHID 2009-31: Double Clickjacking Worm on Twitter
	http://whid.webappsec.org/whid/2009/31/twitter_clickjacking
	The 1st Clickjacking incident, but far from the being the 1st
Twitter incident

* WHID 2009-30: Sage SaaS Withdrawn Due to Security Flaws
	http://whid.webappsec.org/whid/2009/30/sage_saas_vulnerable
	Cloud computing gets to the center of the stage, security-wise.

* WHID 2009-29: FBI & Secret Service warn of a sophisticated HSM attack
	http://whid.webappsec.org/whid/2009/29/HSM_Attack
	An intriguing report on a highly sophisticated attack. Does somebody
knows which attack it is?

* WHID 2009-28: Serious Leakage on Mac clone Maker's site
	http://whid.webappsec.org/whid/2009/28/mac_cloner_leaking

* WHID 2009-27: Panasonic Products for Cheap
	http://whid.webappsec.org/whid/2009/27/panasonic_uk_hacked

~ Ofer

Ofer Shezaf [shezaf@...m.com, +972-54-4431119, www.xiom.com]

Founder, Xiom.com, Proactive Web Application Security, http://www.xiom.com
Leader, WASC Web Hacking Incidents Database Project
Chairman, OWASP Israel