Browse by Tags - HP Application Security Center Community
United States-English

Browse by Tags


» In "cyberspace"... no one can hear your database scream

It's 2:34am, local time. You're snoring up a storm after a hard day at the office. You've patched all your servers, your lockdown scripts have been verified, and your IDS is humming along perfectly. Oh, and by the way, someone named "R0kk1t" just stole your customer database. A...
Posted to Following the White Rabbit (Weblog) by Rafal Los on 04-09-2008

» The Politics of Getting Hacked

It's the words that keep IT Security Managers up at night - "We have a problem, I think we've been hacked". Of course, there are few possible responses... Acknowledge Responsibly - You can acknowledge what has happened, open an investigation, and communicate with the public and your...
Posted to Following the White Rabbit (Weblog) by Rafal Los on 04-06-2008

» XSS+phishing in Italian bank hack

Netcraft is reporting today about a phishing attack leveraging XSS against an Italian bank. From the article (emphasis mine) An extremely convincing phishing attack is using a cross-site scripting vulnerability on an Italian Bank's own website to attempt to steal customers' bank account details...
Posted to The HP Security Laboratory (Weblog) by Billy on 01-10-2008
Page 1 of 1 (3 items)
Information disclosed in this community becomes public. Exercise caution when deciding to disclose your personal information. HP reserves the right, but is not obligated to, edit or remove your comment if it contains personally identifiable information or other content HP deems unacceptable.  Opinions expressed are your personal opinions or those of the original authors, and not of HP. Please see HP's web Terms of Use for more details.