-->
#1 Trusted Cybersecurity News Platform
Followed by 5.80+ million
The Hacker News Logo
Get Updates
cybersecurity

The Hacker News | #1 Trusted Source for Cybersecurity News — Index Page

Nepal Telecommunications Authority Hacked by w3bd3f4c3r

Nepal Telecommunications Authority Hacked by w3bd3f4c3r

Aug 21, 2011
Nepal Telecommunications Authority Hacked by w3bd3f4c3r Hacker with name "w3bd3f4c3r" or "T34mT!g3R" today hack into the Nepal Telecommunications Authority website using SQL injection Vulnerability. The Vulnerability Information and screenshot is posted by hacker on pastebin : The Leaked info include the various database and tables of Nepal Telecommunications Authority website and Administrator password in Hashes as shown below:
Skype zero day HTML/(Javascript) code injection

Skype zero day HTML/(Javascript) code injection

Aug 21, 2011
Skype zero day HTML/(Javascript) code injection Noptri Public Security Advisory has publised a working skype zero day vulnerability with POC for skype. Skype users need be aware of this vulnerability. Affected Software: Software: Skype <= 5.5.0.113 Affected Platforms: Windows (XP, Vista, 7) Problem Description: Skype suffers from a persistent code injection vulnerability due to a lack of input validation and output sanitization of following profile entries:     [+] home     [+] office     [+] mobile Proof of Concept: The following HTML codes can be used to trigger the described vulnerability: --- SNIP ---     [+] Home Phone Number:     <b>INJECTION HERE</b>     [+] Office Phone Number:     <center><i>INJECTION HERE</i></center>     [+] Mobile Phone Number:     <a href="#">INJECTION HERE</a> Impact: An attacker could for ...
Libya Registry & Telecom websites hacked by Electr0n

Libya Registry & Telecom websites hacked by Electr0n

Aug 21, 2011
Libya Registry & Telecom websites hacked by Electr0n A Hacker with codename " Electr0n " has deface the two Important websites of Libya. One is Domain Registry website and Other one is Telecom Website . Both sites had same deface page as shown above. You can check cache link here . Its not confirm that  Electr0n is in support of Anonymous or not, But According to Defacement page, the hack is performed for some other reason, rather than operation Libya by Anonymous.
cyber security

AI Says the Homework Is Done. A Forensic Examiner Checks It Anyway.

websiteSANS InstituteAI Security / Training
SANS Fellow Heather Barnhart on validating AI findings in DFIR, and the training that builds the skill.
cyber security

Know Your Enemy: The Attacker Toolkits Getting Past Security Controls

websitePush SecurityPhishing / Enterprise Security
Find out which toolkits bypass controls to reach your users most often. Join the webinar, Dec 2nd.
Israel Radio is hacked by Egyptian hacker

Israel Radio is hacked by Egyptian hacker

Aug 21, 2011
Israel Radio is hacked by  Egyptian hacker Egyptian hacker defaced the website of  Israel Radio  , and Write a message on homepage as shown: Hi to greatest son of the bitches of the world ... This Msg From Egypt " Mother Of The World "We Never Forgot And Never Forgive Any Isrealian Bitch3Z you Started The War Attack Us 0n The borders of Egypt For Nothing Reason .. So You Have Bear Our Attacks Fuck To All Isreal ./3x!t
Idea Cellular Web Portal Hacked, Customers Info may be exposed !

Idea Cellular Web Portal Hacked, Customers Info may be exposed !

Aug 20, 2011
Idea Cellular Web Portal Hacked, Customers Info may be exposed ! Again a critical SQL Injection Vulnerability has been discovered by zSecure Team in a high profile web portal. This time it's Ideacellular web portal which compromises the entire site database. Any malicious smart black hats can create much more devastating attacks using this critical flaw such as: complete access to various database’s as shown in screen-shots under proof of vulnerability which can later be misused to access various confidential information; complete database dump; possibility of uploading shell (not fully certain) and much more. Target Website :  http://www.ideacellular.com Attack Type : Hidden SQL Injection Vulnerability Database Type :   MySql 5.0.27 Alert Level : Critical Threats : Database Access, Database Dump Credit : zSecure Team     Previous Vulnerability Discolsures:  Dukascopy, Sify, TimesofMoney, Sharekhan Proof of Vulnerability : About the Company Ide...
⚡ Top Stories This Week
Expert Insights Articles Videos
Cybersecurity Resources