Blogger templates

Showing posts with label Cyber News. Show all posts
Showing posts with label Cyber News. Show all posts

Gentoo-based Sabayon Linux 8 available for download.



The Sabayon development team announced the availability of version 8 this week, acknowledging the challenge to allow “the bleeding edge and reliability to coexist.” Gentoo-based Sabayon touts its variety of packages and installations to choose from, and even though their FAQ mentions its appropriateness for new Linux users, it’s aimed at more experienced users who want to customize to their hearts’ content.

Here is what’s available:
  • Sabayon GNOME
  • KDE
  • Xfce
  • SpinBase (bare-metal flavour for building your own ISO images)
  • ServerBase (same but with server-optimized kernel)
  • CoreCDX, for those liking Fluxbox 
Some of the new features included are:
  • The first Extreme-Rolling Release distribution, with automated repository package version bumping, thanks to Entropy Matter ebuild tracker
  • Always up-to-date Linux Kernel 3.2 (and experimental “Fusion” Kernels available in repositories)
  • Providing extra Server-oriented Linux kernels (OpenVZ, Vserver, Generic Server)
  • GNOME 3.2.2 Visual Environment
  • KDE 4.7.4 Desktop Environment (4.8.0 available in a few days)
  • Improved Xfce 4.8 out-of-the-box experience (for those missing GNOME2)
  • Improved LibreOffice integration, updated to 3.4.4
  • Cinnamon and Razor Qt available in repositories

To download, check out the Mirror List here.
READMORE
 

Microsoft Share Point Service.

Windows SharePoint Services is a versatile technology that organizations and business units of all sizes can use to increase the efficiency of business processes and improve team productivity. With tools for collaboration that help people stay connected across organizational and geographic boundaries, Windows SharePoint Services gives people access to information they need.


Built on Microsoft Windows Server 2003, Windows SharePoint Services also provides a foundation platform for building Web-based business applications that can flex and scale easily to meet the changing and growing needs of your business. Robust administrative controls for managing storage and Web infrastructure give IT departments a cost-effective way to implement and manage a high-performance collaboration environment. With a familiar, Web-based interface and close integration with everyday tools including the 2007 Microsoft Office system, Windows SharePoint Server is easy to use and can be deployed rapidly.
                                 
Installation over Windows Small Business Server: If you intend to install Windows SharePoint Services 3.0 on a server that is running Windows Small Business Server 2003, please read “Installing Windows SharePoint Services 3.0 on a Server Running Windows Small Business Server 2003”. This white paper contains important installation steps and procedures that you must perform to ensure a successful deployment. Caution: If you do not follow the instructions in this white paper, your configuration of Windows Small Business Server 2003 and Windows SharePoint Services 3.0 may not function properly or might not be supported.

Search Server 2008 Express: If you’re using Windows SharePoint Services, you can easily add search capabilities to your collaboration environment across SharePoint sites, file shares, web sites, Exchange Public Folders, and third party repositories using Microsoft Search Server 2008 Express. Click here to download.

System requirements

Supported Operating Systems: Windows Server 2003 Service Pack 1
Minimum hardware requirements:

Server with a processor speed of at least 2.5 GHz
1 GB RAM
The following is also required:

Microsoft .NET Framework 3.0
For further deployment and information and requirements, consult the Deployment for Windows SharePoint Services 3.0 technology site.


Take Tour of Windows Share Point:http://office.microsoft.com/en-us/windows-sharepoint-services-help/demo-tour-a-windows-sharepoint-services-3-0-site-HA010205563.aspx
 

Download:http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=14117

READMORE
 

Finally Microsoft unveil Windows 8 on Feb 29.


BANGALORE, INDIA: It seems Microsoft was waiting for a perfect date to launch its upcoming operating system code named Windows 8.
So, a consumer preview of the Windows 8 operating system has been scheduled on February 29 in Barcelona, Spain, at a mobile industry show.
Inviting journalists for the big event, Redmond-based company Microsoft plans to give an update about the latest operating system during the two-hour session.
Windows 8 operating system comes with a new user interface (UI), which Microsoft calls as "Metro" and the new UI is compatible for three screens- smartphones, tablet PCs, and laptops/desktop PCs.
However, the company has declined to say when Windows 8 will be officially released.
It may be noted that last year in October Micorost had given an opportunity for the developer community to preview the latest operating system to download and develop application based on it.
Some of the features of Windows 8 include:
* 360 degrees change in the Start
* Control panel in Metro interface
* Includes Internet Explorer 10
* Metro style apps which are tablet specific, like PaintPlay and Ink Pad.
READMORE
 

Satellite phones vulnerable to eavesdropping.


Security researchers in Germany cracked two encryption standards used for protecting satellite phone signals, giving the ability to eavesdrop on calls over an entire continent.

Researchers at Ruhr University Bochum in Germany cracked the encryption algorithms , known as GMR-1 and GMR-2, are standards used across satellite phone operators, including Thuraya, a leading providers. Their technology is widely used in the Middle East and Africa, including in some military applications.

"We were able to completely reverse engineer the encryption algorithms employed," The Daily Telegraph quoted Benedikt Driessen and Ralf Hund of the university as saying, "Don't Trust Satellite Phones".

According to the Telegraph report, the equipment and software needed to intercept and decrypt satellite phone calls from hundreds of thousands of users would cost as little as $2,000.

The demo takes up to half-an-hour to decipher a call, but a more powerful computer would allow eavesdropping in real time, Mr Driessen said.

The Ministry of Defence has said the crack of the A5-GMR-1 and A5-GMR-2 encryption algorithms will not affect military operations.

"All military users of mobile satellite communication systems are aware of the potential threats to such systems and are briefed explicitly that they are only authorised to pass unclassified information (both voice and data) over these systems," an MoD spokeswoman said in an email statement. "Protected information is never sent over an unclassified system, unless it is being employed in conjunction with an accredited secure device."
READMORE
 

University of Washington Vulnerable and Database Leaked by Hacker.

University of Washington Vulnerable and Database Leaked by Hacker
University+of+Washington+Vulnerable+and+Database+Leaked+by+Hacker

A few days back, a Team INTRA member hacked into the University of Washington database and released much data. Today, N0B0DY and N0LIFE hacked into it again, releasing the most recent passwords on Pastebin.

The root MySQL password was also released, as well as many other MySQL users. The information_schema database was accessed, and they released the COLUMNS table completely, having 6363 records. Hackers also expose the vulnerable links in Pastebin note.
READMORE
 

Raising your kids to have cyber security awareness.

Raising your kids to have cyber security awareness

In our Last Month Magazine Issue, Lee Ives from London, England and Admin of Security-FAQs - talk about internet security for your children and what to watch out for and how to protect them and yourself. You can Download Here Special Magazine January 2012 Edition.

Have a look the interesting Article shared by Lee :

The one thing that is great about the internet is that just like many of the other major mediums it has content for all different types of age groups. If you have older people that you need to entertain then you will be able to find something for them to be entertained by on the web. If you have younger kids that you have to entertain then you will find something for them as well. But unlike the other major mediums such as TV, you have a more diverse stock from which to pick from. With the internet you are getting content from all around the world and no matter which age group you need to entertain, you will be able to find something for them to watch until their heart is content.
READMORE
 

Key Logger for LINUX UBUNTU.


I am searching for a keylogger for Ubuntu Linux. Finally I found it in sourceforge.net. Here are the simple steps for keylogger in ubuntu

What is Keylogger?

Keystroke logger is the practice of noting (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are being monitored. There are numerous keylogging methods, ranging from hardware- and software-based to electromagnetic and acoustic analysis.


keylogger in Linux
We have an opensource software available for Linux called lkl (Linux Key Logger).
LKL is a userspace keylogger that runs under linux–x86/arch. LKL sniffs and logs everything passes trought the hardware keyboard port (0×60).
Download key logger here

How to Install?

Step 1
Unzip or untar the file you have downloaded
Step 2
Change in to directory by typing cd lkl
Step 3
Give the below command ./confiure
This will check all the required resurces it needs
Step 4
Type `make‘ to compile the package.
Step 5
Optionally, type `make check’ to run any self-tests that come with the package.
Step 6
Type `sudo make install‘ to install the programs
Now you are done with the installation
How to use?
You can send argument with the command lkl
-h help
-l start to log the 0×60 port (keyboard)
-b debug mode
-k <km_file> set a keymap file
-o <o_file> set an output file
-m <email> send logs to <email>
-t <host> hostname for sendmail. Default is localhost
Example: lkl -l -k us_km -o log.file // use USA kb and put logs in ‘log.file’

Please comment on the same if it doesn’t works for you
READMORE
 

Next Genration File System For Opensource.

  Next Generation File System For Open Source

Hii..Guys i got some great stuff thats want to share with you hope you will like..
 
Open Source treats everything as either a file or a directory. Even hardware is considered a file and is kept in a directory. Therefore, a file system is an organization of data and metadata on a storage device and is expected to provide quick transfer and storage of data without corrupting it. Linux file system interface is implemented as a layered architecture, separating the user interface layer from the file system implementation from the drivers that control the storage devices. To begin with Linux file systems are expected to perform your day to day tasks with some of the latest file systems. 

Some of the key next gen file systems for open source are discussed below:-
 
BTRFS:
BTRFS is also known as B-tree file system and is a popular next gen file system for Linux, available with a GPL license. It is developed by Oracle in association with contributors from the Linux community. BTRFS provides a number of features that make it a very attractive file system solution for local storage. It is designed for
large files and file system and helps in easy administration, integrated raid and volume engagement. It also detects and fixes data and files system corruption, improves backup operations, easy searching for files and allows quick rollback of software and OS upgrades, improves storage capacity.
BTRFS is intended to address the lack of pooling, snapshots, checksums and integral multi-device spanning in Linux file systems as the use of Linux scales upward into larger storage configurations common in the enterprise. It is structured as several layers of trees, all using the same B-tree implementation to store their various data types as generic items sorted on a 136-bit key. The first 64 bits of the key are a unique object ID. The middle 8 bits is an item type field; its use is hardwired into code as an item filter in tree lookups. Objects can have multiple items of multiple types. The remaining right-hand 64 bits are used in type-specific ways.
 
ZFS:
ZFS is the feature rich file system developed by Sun for its UNIX version, Solaris. ZFS allows quick and easy snapshots of data, data check summing, and integration of several tools to manage disks and file systems. It is based upon a copy-on-write design that writes a new copy of the data every time it changes. Once the new version of the data is written the old version is marked as deleted and the space can be reclaimed. To implement a snapshot system you need to instruct the OS to not mark the old data as deleted and changes are preserved.
All data that is written to a ZFS file system is check summed to ensure its validity. Hard drive corrupting data has always been an issue but due exponential growth in storage requirements data corruption has become a common phenomenon. To help mitigate the risk of silent data corruption ZFS stores a checksum of all the data it stores and validates the data again before relaying it onto the operating system. If one copy of the data has been corrupted it is identified on read and seamlessly copied from another source.
                               
 NILFS-2:
NILFS-2 is a reprisal of a log-structured file system developed by Nippon Telegraph and Telephone. The first version of NILFS appeared in 2005 but lacked any form of trash collection. In mid-2007, version 2 was first released, which included a trash collector and the ability to create and maintain multiple snapshots. The NILFS-2 file system entered the mainline kernel and can be enabled simply by installing its loadable module.
An interesting aspect of NILFS-2 is its technique of continuous snap-shooting. As NILFS is log structured, new data is written to the head of the log while old data still exists. Because the old data is there, you can step back in time to inspect epochs of the file system. These epochs are called checkpoints in NILFS-2 and are an integral part of the file system. NILFS-2 creates these checkpoints as changes are made. It is one of the many file systems that incorporate snapshot behaviour. Other file systems that include snapshots are ZFS, LFS etc.

CEPH:
CEPH is a distributed network storage and file system created to provide excellent performance, reliability, and scalability. CEPH is based on a reliable and scalable distributed object store, with a distributed metadata management cluster layered on top to provide a distributed file system with POSIX semantics. CEPH is released under the terms of the LGPL, which means it is free. CEPH will provide a variety of key features that are generally lacking from existing open-source file systems, including the ability to simply add disks to expand volumes, intelligent load balancing, and efficient, easy to use snapshot functionality.
CEPH is designed to seamlessly and gracefully scale from gigabytes to petabytes and beyond. Scalability is considered in terms of workload as well as total storage. CEPH is designed to handle workloads in which tens thousands of clients or more simultaneously access the same file, or write to the same directory.
                          
EXOFS:
EXOFS (Extended Object File System) is a traditional Linux file system built over an object storage system. EXOFS was initially developed by IBM and at that time was called the OSD file system, or OSDFS. Panasas, an object storage systems company, has since taken over the project and renamed it EXOFS based on its ext2 file system ancestry.
EXOFS is a file system that uses an OSD and exports the API of a normal Linux file system. Users can access EXOFS like any other local file system, and EXOFS will in turn issue commands to the local OSD initiator. OSD is a new T10 command set that views storage devices not as a flat array of sectors but as a container of objects, each having a length, quota and time attributes. Each object is addressed by a 64bit ID, and is contained in a 64bit ID partition.
 
Next3:
Next3 was developed by CTERA Networks, which has started shipping it on its C200 network storage device. It is not just an addition to ext3, but works by creating a special, magic file to represent a snapshot of the file system. The files have the same apparent size as the storage volume as a whole, but they are thin files, so they take almost no space at the beginning.
When a change is made to a block on disk, the file system must first check to see whether that block has been saved in the most recent snapshot already. If not, the affected block is moved over to the snapshot file, and a new block is allocated to replace it. Thus, over time, disk blocks migrate to the snapshot file as they are rewritten with new contents. Deleting a snapshot requires moving changed blocks into the previous snapshot, if it exists, because the deleted snapshot holds blocks which are logically part of the earlier snapshots.
                              
REISER 4:
REISER 4 uses B-trees in conjunction with the dancing tree balancing approach, in which under populated nodes will not be merged until a flush to disk except under memory pressure or when a transaction completes. Such a system also allows REISER 4 to create files and directories without having to waste time and space through fixed blocks. As of 2004, synthetic benchmarks performed by Namesys show that REISER 4 is 10 to 15 times faster than its most serious competitor ext3 working on files smaller than 1 KB. The benchmarks suggest that it is twice the performance of ext3 for general-purpose file system usage patterns.
As of 2012, REISER 4 hasnâ??t been merged into the core Linux kernel and is still not supported on many Linux distributions; however, its predecessor REISER FS v3 has been widely adopted. REISER 4 is also available from Andrew Morton's mm kernel sources, and from Zen patch set.

Thats all guys.. love to get your comment on dis..

READMORE
 

Dedicated Search Engine for Exploit.

 Exploitsearch.net - Exploit & Vulnerability Search Engine


This is a online search for Exploits currently utilizing data from NVD, OSVDB, SecurityFocus, Exploit-DB, Metasploit, Nessus, OpenVAS, and PacketStorm.Well search engine does the work but this is a specific search engine for better results. There not much to write about just visit the site and all your queries will be answered.
VISIT : http://www.exploitsearch.net/
READMORE
 

Microsoft Windows 8 with Resilient File System (ReFS)

Microsoft Windows 8 with Resilient File System (ReFS)
Microsoft+Windows+8+with+Resilient+File+System+%2528ReFS%25291


Microsoft is switching to the Resilient File System for Windows 8, but only the server edition will support the new and more robust file system. While Windows 8 client machines will continue to use the NTFS filesystem. ReFS is meant to maintain compatibility with the most frequently-used features of NTFS, including Bitlocker encryption compatibility, Access Control Lists (ACLs) to control permissions, change notifications, symbolic links, and others, while shedding legacy features and picking up new ones to make it more useful and versatile on today's drives.

Also, in its current state ReFS cannot be used for removable media, or for any partition used to boot Windows – it is purely a file system solution for data storage right now. Windows 8 clients will be able to access and read ReFS partitions from launch though.
Microsoft+Windows+8+with+Resilient+File+System+%2528ReFS%2529

According to a blog post from the Windows engineering team, the key goals of ReFS are:
  • ‘a high degree’ of compatibility with NTFS
  • the ability to verify and autocorrect data
  • scalable structures for everything
  • keeping the file system online even when problems occur
  • providing resilience when used with Storage Spaces.
However, this file system is not compatible with removable media and cannot be used for the booting of an operating system. It is just made for storage, for the time being.
READMORE
 

4 Ways to Identify Safe Websites on the Internet

                                            

On the whole Internet, there are approximately more than 150 million active websites up and running. As a result, it often becomes a real challenge for the users to identify safe websites that are trustworthy and reputed. Have you ever wondered to know the reputation of a website before placing the order? Need to know whether a given website is child safe? Well, here are some of the ways to identify safe websites on the Web.


1. WOT or Web Of Trust (www.mywot.com):

WOT is a great place to test the reputation of your favorite website. WOT gives real-time ratings for every website based on the feedback that it gets from millions of trustworthy users across the globe and trusted sources, such as phishing and malware blacklists. Each domain name is evaluated based on this data and ratings are applied to them accordingly. A snapshot of WOT ratings for gohacking.com is shown below:



As shown in the above snapshot, the reputation of each website is shown in terms of 4 components where green means excellent, yellow warns users to be cautious and red indicates potential danger.


Trustworthiness signifies the overall safety of the website. A poor rating may indicate that the site is associated with threats like Internet scams, phishing, identity theft risks and malware. For more information on phishing, you may refer my other post on how to identify and avoid phishing scams.


Vendor reliability tells you whether a given site is safe for carrying out buy and sell transactions with it. An excellent rating indicates superior customer satisfaction while a poor rating indicates possible scam or bad shopping experience.


Privacy indicates about “to what extent the site respects the privacy of it’s users and protects their personal identity and data”.


Child Safety indicates whether the content of a given site is appropriate for children. Site contents like sexual material, nudity and vulgarity will have a poor Child Safety rating.


In most cases, the WOT ratings are found to be highly accurate. To check the reputation of any given website, just visit www.mywot.com type-in the address of your favorite website and click on “Check now”. This tool alone can tell you a lot about the reputation and safety level of a website. However, in addition to this, I am giving you another 3 handy tools to identify safe websites on the Web.

2. McCafee SiteAdvisor:

McCafee SiteAdvisor is a free tool that is available as a browser add-on. It adds safety ratings to your browser and search engine results. You can download it from www.siteadvisor.com.

3. StopBadware:

Using this tool, you can check whether a given site is said to have involved in malware activity in the past. To check this, go to http://www.stopbadware.org/home/reportsearch and enter the URL or domain name of a website and click on “Search Clearinghouse ”. If the search does not return any result, that means the site was never involved in any of the malware activity in the past.

4. Google Pagerank:

Google PageRank is another great tool to check the reputation and popularity of a website. The PageRank tool rates every webpage on a scale of 1 to 10 which indicates Google’s view of importance of the page. If a given website has a PageRank of less than 3, then it is said to be less popular among the other sites on the Internet.


However, PageRank will only tell you how much popular a given website is and has nothing to do with the safety level of a website. So, this tool alone cannot be used to evaluate a website’s safety and other factors.


PageRank feature is available as a part of Google Toolbar. You can install Google Toolbar from http://www.google.com/intl/en_uk/toolbar/ie/index.html.
READMORE
 

How Antivirus Software Works



How antivirus works
Due to ever increasing threat from virus and other malicious programs, almost every computer today comes with a pre-installed antivirus software on it. In fact, an antivirus has become one of the most essential software package for every computer. Even though every one of us have an antivirus software installed on our computers, only a few really bother to understand how it actually works! Well if you are one among those few who would really bother to understand how an antivirus works, then this article is for you.

How Antivirus Works

An antivirus software typically uses a variety of strategies in detecting and removing viruses, worms and other malware programs. The following are the two most widely employed identification methods:

1. Signature-based dectection (Dictionary approach)

This is the most commonly employed method which involves searching for known patterns of virus within a given file. Every antivirus software will have a dictionary of sample malware codes called signatures in it’s database. Whenever a file is examined, the antivirus refers to the dictionary of sample codes present within it’s database and compares the same with the current file. If the piece of code within the file matches with the one in it’s dictionary then it is flagged and proper action is taken immediately so as to stop the virus from further replicating. The antivirus may choose to repair the file, quarantine or delete it permanently based on it’s potential risk. 
As new viruses and malwares are created and released every day, this method of detection cannot defend against new malwares unless their samples are collected and signatures are released by the antivirus software company. Some companies may also encourage the users to upload new viruses or variants, so that the virus can be analyzed and the signature can be added to the dictionary.
Signature based detection can be very effective, but requires frequent updates of the virus signature dictionary. Hence the users must update their antivirus software on a regular basis so as to defend against new threats that are released daily.

2. Heuristic-based detection (Suspicious behaviour approach)

Heuristic-based detection involves identifying suspicious behaviour from any given program which might indicate a potential risk. This approach is used by some of the sophisticated antivirus softwares to identify new malware and variants of known malware. Unlike the signature based approach, here the antivirus doesn’t attempt to identify known viruses, but instead monitors the behavior of all programs.
For example, malicious behaviours like a program trying to write data to an executable program is flagged and the user is alerted about this action. This method of detection gives an additional level of security from unidentified threats.
File emulation: This is another type of heuristic-based approach where a given program is executed in a virtual environment and the actions performed by it are logged. Based on the actions logged, the antivirus software can determine if the program is malicious or not and carry out necessary actions in order to clean the infection.
Most commercial antivirus softwares use a combination of both signature-based and heuristic-based approaches to combat malware.

Issues of concern

Zero-day threats: A zero-day (zero-hour ) threat or attack is where a malware tries to exploit computer application vulnerabilities that are yet unidentified by the antivirus software companies. These attacks are used to cause damage to the computer even before they are identified. Since patches are not yet released for these kind of new threats, they can easily manage to bypass the antivirus software and carry out malicious actions. However most of the threats are identified after a day or two of it’s release, but damage caused by them before identification is quite inevitable.
Daily Updates: Since new viruses and threats are released everyday, it is most essential to update the antivirus software so as to keep the virus definitions up-to-date. Most softwares will have an auto-update feature so that the virus definitions are updated whenever the computer is connected to the Internet.
Effectiveness: Even though an antivirus software can catch almost every malware, it is still not 100% foolproof against all kinds of threats. As explained earlier, a zero-day threat can easily bypass the protective shield of the antivirus software. Also virus authors have tried to stay a step ahead by writing “oligomorphic“, “polymorphic” and, more recently, “metamorphic” virus codes, which will encrypt parts of themselves or otherwise modify themselves as a method of disguise, so as to not match virus signatures in the dictionary.
Thus user education is as important as antivirus software; users must be trained to practice safe surfing habits such as downloading files only from trusted websites and not blindly executing a program that is unknown or obtained from an untrusted source. I hope this article will help you understand the working of an antivirus software.
READMORE
 

FatCal - Automatic SQL Injection tool


FatCat is an automatic SQL injection tool. This tool is useful for testing SQLI vulnerabilities of a web application. This tool can extract whole database data. FatCat Features that help you to extract the Database information, Table information, and Column information from web application. Only If it is vulnerable to SQL Injection Vulnerability.



Features:  
1)  Normal SQL Injection 
2)  Double Query SQL Injection   


In Next Version:   
1)  WAF bypass 
2)  Cookie Header passing 
3)  Load File 3) Generating XSS from SQL   


Requirement:  
1)  PHP Verison 5.3.0 
2)  Enable file_get_function  


Download:
http://code.google.com/p/fatcat-sql-injector/downloads/list
READMORE
 

Call of Duty, Spider-Man and other 7 Largest Video Game Sites Hacked


Today Turkish Hackers from group "GrayHatz" hack and Deface Call of Duty, Spider-Man and other 7 Largest Video Game Sites.

Hacked Sites Include:- Call of Duty® Official Video Game Site : Link and Mirror
- X-Men Origins: Wolverine Official Video Game Site : Link and Mirror
- Spider-Man: Edge of Time Official Game Website
- Transformers: Fall of Cybertron Official Video Game Site : Link and Mirror
- Prototype 2 Official Video Game Site : Link and Mirror
- Infinity Ward Developer of Call of Duty : Link and Mirror
- The Quantum Of Solace Game Official Video Game : Link and Mirror
- DJ Hero 2 | Available Now Official Site : Link and Mirror
- Guitar Hero Official Site : Link and Mirror
READMORE
 

NASA and Pentagon Hacker - TinKode Arrested in Romania

NASA and Pentagon Hacker - TinKode Arrested in Romania
NASA+and+Pentagon+Hacker+-+TinKode+Arrested+in+Romania

Romanian police have arrested a man believed to be TinKode, the notorious hacker responsible for several daring, high-profile cyberattacks, including last year's breach of NASA's servers, Royal Navy, The European Space Agency and MySQL.com. The 20-year-old man, named as Razvan Manole Cernaianu, allegedly attacked Pentagon and NASA computer systems, revealed security holes, and published information about SQL injection vulnerabilities he had discovered, the Romanian Directorate for Investigating Organized Crime and Terrorist (DIICOT) said in a press release.

He also posted a video on his blog demonstrating an attack he carried out against the U.S. government, and created and offered for sale a computer program used to hack Web sites. Through his exploits, Cernaianu blocked access to systems and seriously disabled their proper functioning, authorities said.
Currently, Cernăianu is being taken to Bucharest for questioning and he is charged with breaching a computing system without authorization, unauthorized transfer of data from a computing system, and the disruption of a computing system. Romanian authorities said the FBI and NASA took part in the investigation.
READMORE
 

Anonymous Hacks FBI and Records Conference Call


Anonymous+Hacks+FBI+and+Records+Conference+Call

Earlier today, Anonymous released a confidential conference call between the FBI and law enforcement officers in the UK. The 16-minute call discusses ongoing investigations into hackers associated with Anonymous, AntiSec, and LulzSec.

From all appearances, Anonymous retrieved the sensitive access code information and a list of attendees from an FBI email account. The group released a roughly 15-minute-long recording of what appears to be a Jan. 17 conference call devoted to tracking and prosecuting members of the loose-knit hacking group.

The email, titled “Anon-Lulz International Coordination Call”, was published on pastebin earlier today: http://pastebin.com/8G4jLha8 . The email with details for accessing the call was sent to law enforcement officials in Britain, France, the Netherlands and others but the only people who identify themselves on the call are from the FBI and Scotland Yard.In a message on Twitter, Anonymous posted links to the audio recording and said the FBI "might be curious how we're able to continuously read their internal comms for some time now."

The initial link to the conference call was for an mp3 download, but it was also made available to stream on YouTube.


The FBI and Scotland Yard have now confirmed that their internal conference call describing their investigation into Anonymous hackers was illegally intercepted, as was the email containing the conference call details. The Metropolitan Police also confirmed it, saying:“We are aware of the video which relates to an FBI conference call involving a PCeU representative. The matter is being investigated by the FBI. We continue to carry out a full assessment. We are not prepared to discuss further.”

Karen Todner, a lawyer for Cleary, said that the recording could be “incredibly sensitive” and warned that such data breaches had the potential to derail the police’s work.“If they haven’t secured their email it could potentially prejudice the investigation,” she told. Following a spate of arrests across the world, the group and its various offshoots have focused their attention on law enforcement agencies in general and the FBI in particular.
READMORE