|
|
|
Nokia developer forum hacked and defaced in antisec attack |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Nokia developer forum hacked and defaced in antisec attack Par SecurityLe [2011-08-29] à 23:49:44
Présentation : Nokia has issued a statement confirming that the security of its developer forum website was compromised by an attacker who successfully obtained a database table with user account information. Nokia has taken down its developer community site while it conducts further analysis. The attack exploited a SQL injection vulnerability in the website's forum software. The statement issued by Nokia indicates that the attackers gained more account records than the company initially believed, but that the information was not particularly sensitive in nature. The breached data includes user e-mail addresses and public profile information, but apparently not passwords or password hashes. Nokia says that only 7 percent of the forum users had supplied profile information, which may include instant messaging usernames and date of birth. The only material threat posed to individual users, according to Nokia, is unsolicited e-mail. The company apologized for the incident and sent out messages to inform users. The Nokia developer community website was also defaced changed to display a picture of cartoon character Homer Simpson and a message indicating that the site was Owned by pr0tect0r AKA mrNRG. It has also had a text marquee which chastised Nokia for its lax Web security and warning that the company could be a future antisec target if it doesn't seek to improve. The end of the message says that there will be no dumping or leaking, suggesting that the attacker doesn't intend to publish the compromised data. The individual or group that identifies itself as pr0tect0r is also connected with a recent attack against Defense.pk, an independent news and forum website that discusses Pakistan's military. The attack is an embarrassment for Nokia, but doesn't appear to pose any major threats to the users of the company's developer community site. The situation would have been worse if the target was one of Nokia's more sensitive sites such as Nokia's Ovi Store, which keeps credit card information on file. Read the comments on this post
Les mots clés de la revue de presse pour cet article : nokia attack
Les videos sur SecuObs pour les mots clés : nokia attack
Les éléments de la revue Twitter pour les mots clé : attack
Les derniers articles du site "Security" :
- Using ASAN as a protection
- Execute without read
- Together, we can make a difference
- Internet Bug Bounty issues its first 10,000 reward
- vtable protections fast and thorough
- Exploiting 64-bit Linux like a boss
- Exile for the BBC Micro some elegant solutions
- Using ASAN as a protection
- Execute without read
- Together, we can make a difference
- Internet Bug Bounty issues its first 10,000 reward
- vtable protections fast and thorough
- Exploiting 64-bit Linux like a boss
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.190.17.190 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.190.17.190 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
