The Hacker News | #1 Trusted Source for Cybersecurity News — Index Page

Indianmicrofinance.com Defaced By HEX786 ! Hacked Site :  www.indianmicrofinance.com Mirror :   http://mirror-az.com/mirror/?id=14910 News Source : HEX786

China Government Site Hacked By Team Grey Hat ! Hacked Site :  www.jssjj.gov.cn News Source : Napster 

17 websites Hacked by Angel 4k4 4d0r4b13  Hacked sites :  http://pastie.org/1670234  

OperationLeakS by Anonymous Hacker leaks Bank of America Emails ! We may soon find out whether it's possible to shame one of the big U.S. banks by exposing its mortgage missteps. A series of  messages  on Twitter Sunday evening promised the release of emails supposedly documenting "fraud and corruption" at Bank of America (BAC). The post, from the anonymous @OperationLeakS handle, said "leaked emails" from the bank would be posted at 5 a.m. London time, which is 1 a.m. in New York. The release will come three and a half months after Wikileaks founder Julian Assange breezily promised to "take down a bank or two" by releasing "either tens or hundreds of thousands of documents." Assange likened the documents to the ones that prosecutors used in bringing top executives of failed energy trader Enron to justice. The bank didn't immediately respond to a request for comment. The document dump, billed in the Twitter posts as " Blac...

Blogger.com vulnerability, Gaining Administrative Privileges on any Account ! In the last 2 months, Nir.Goldshlager  participated in Google reward program and found some High, Serious vulnerabilities. The vulnerability that  Nir.Goldshlager  want to share first, Is a critical vulnerability in Blogger (Google Service). That vulnerability could be used by an attacker to get administrator privilege over any blogger account (Permission Issue). Here are the details regarding the issue in Blogger service, Nir.Goldshlager found a HTTP Parameter Pollution vulnerability in Blogger that allow an attacker to add himself as an administrator on the victim's blogger account, Technical details: Here are the steps for getting admin control permissions over any blogger accounts. 1.) The attacker Use the invite author options in blogger (add authors): Vulnerability location: POST /add-authors.do HTTP/1.1 Request: security_token=attackertoken&blog...