Blog | InfoSec

New Details on CitiGroup Compromise

Posted on June 14, 2011Link 

The Daily Mail has a short article about how the recent compromise of 200,000+ Citigroup accounts occurred. Of course there is not much technical detail but the vulnerability and exploit are pretty obvious if what the article says is correct: "They simply logged on to the part of the group's site reserved for credit card customers - and substituted their account...Continue reading 

How to Get Properly Owned

Posted on May 20, 2011Link 

Expose unnecessary ports via NAT and firewall rules to your DMZ. I'm talking SSH, telnet, HTTP/S, SNMP, MS-SQL, MySQL, YourSQL, NetBIOS.... everything. If you're really serious about getting compromised, NAT public addresses to your internal Active Directory servers and database.If you don't have a firewall or a DMZ, all the better.Make sure no effective firewall policies exist...Continue reading 

More SQL Injection: Barracuda Networks Hacked

Posted on April 12, 2011Link 

Barracuda Networks is latest on the list of security vendors/service providers to be compromised. The Malaysian group, "HMSec," used blind SQL injection to retrieve database contents including emails, CMS logins, and MD5-hashed passwords. A poston barracudalabs.com titled "Learning the Importance of WAF Technology – the Hard Way" explains that, "The Barracuda Web Application Firewall in front of the...Continue reading 

Have Questions?
Get Answers