bugtraq - Weekly Web Hacking Incidents update for Feb 19th

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-id: <09bc01c9923e$729b7c70$57d27550$@com>
Date: Thu, 19 Feb 2009 05:02:03 +0200
From: Ofer Shezaf <ofer@...zaf.com>
To: Bugtraq <bugtraq@...urityfocus.com>
Subject: Weekly Web Hacking Incidents update for Feb 19th

The Web Hacking Incidents Database (http://whid.webappsec.org), or WHID for
short, is a Web Application Security Consortium (http://www.webappsec.org)
project dedicated to maintaining a list of web applications related security
incidents. WHID goal is to serve as a tool for raising awareness of the web
application security problem and provide information for statistical
analysis of web applications security incidents.

The last week was very rich in Web Hacking Incidents. Too rich. The
following incidents where added to WHID last week:

* WHID 2009-26: F-Secure Joins The Breached AV Vendors Club
	http://whid.webappsec.org/whid/2009/26/f-secure_breached
* WHID 2009-20: BitDefender joins Kasperski on the Breached side
	http://whid.webappsec.org/whid/2009/20/bitdefender_joins_kasperski
	The duo join Kasperski which was breached last week.

* WHID 2009-25: Zone-H defaced
	http://whid.webappsec.org/whid/2009/25/zone-h_defaced
	The defacements archive site got defaced itself.

* WHID 2009-24: New Phishing Attacks Combine Wildcard DNS and XSS
	http://whid.webappsec.org/whid/2009/24/phishing_combine_dns_xss
	A new blended attack threat interesting for the techies among us

* WHID 2009-23: Miley Cyrus Twitter Account Hit By Sex-Obsessed Hacker 
	http://whid.webappsec.org/whid/2009/23/miley_cyrus_twitter_hacked
	Twitter again. A Celebrity Again.

* WHID 2009-22: Federal Travel Booking Site Spreads Malware
	
http://whid.webappsec.org/whid/2009/22/fed_travel_site_spreads_malware
	One of the more serious iframe planting cases recently

* WHID 2009-21: This Time Uno is after the Herald Tribute
	http://whid.webappsec.org/whid/2009/21/uno_is_after_the_tribute

~ Ofer

Ofer Shezaf [shezaf@...m.com, +972-54-4431119, www.xiom.com]

Founder, Xiom.com, Proactive Web Application Security, http://www.xiom.com
Leader, WASC Web Hacking Incidents Database Project
Chairman, OWASP Israel