Ramadan has successfully found vulnerabilities in major service providers like Google, Facebook, Twitter, Microsoft etc. and has been rewarded with bug bounty reward by them. An XXE (XML External Entity ) is a method that exploits a weak XML parsing mechanism. you’re free to read more about these fixeshere. Facebook had clarified that it had fixed all of its servers so finding another XXE vulnerability seemed highly unlikely. Yet Ramadan decided to continue his quest....

Table Of Contents Your fingerprints can be lifted from your public images without your knowledge! If you thought biometrics, the fingerprints part, was the ultimate tool in personal safety than think again. He simply scanned her thumb in photos that have been made public by media outlets. To make the fingerprint a perfect match, he used additional close-range photographs as well. During the presentation, Starbug explained the importance of this tolerance in fingerprint identification software....

Legal toil and trouble… While it is true, Finnish citizens may have a right to refuse extradition to other countries. Ryan is no stranger to the FBI. Reportedly after placing their order, six armed law enforcement officers and two FBI agents raided the hotel room. Ryan claims the FBI raided the hotel room because they suspected him to be behind thousands of hacks. Of course the details are not clear....

https://t.co/e3zRKnJJQOseems to have been blocked in India. If you are from India and unable to visit Pastebin, kindly email us. No prior information, no explanations, no notice, simple block. The ISPs in India are setting a bad precedent of freedom of speech . @githubdown in India! Like GitHub, Pastebin also is a very popular tool for developers and students. The Pastebin web service provides anyone to store pastes in plain text and almost all popular coding languages....

https://twitter.com/LizardMafia/status/548525026027507712 Lizard Squad then signed up some 3000 Tor relays on the Tor connection. At least for an hour, many users didnt use Tor believing the Tor data pipe had been hacked. Was Tor hacked by Lizard Squad or were they really trying to hack it? But is it that simple? The same can be seen from the image embedded in the above tweet from Nadim Kobeissi. These relays are shown using less bandwidth....

Countries tend to use specifically written software for most purposes, to enhance security and independence. Core Security sells its products to clients who want to test their own security mechanisms. That is in part because commercial programs could be traced back to specific customers. Using the Core security program however, adds a new twist to the tale. Evron has said that they have detected attacks dating back as far as April....

This is done by pointing the target to a certain Facebook page that leads to a malicious location. This is an official BlackBerry App maintained by BlackBerry. Trend Micro then contacted BlackBerry about their findings. However, it attempts to take advantage of the trusted BlackBerry brand name by using our Facebook web app. BlackBerry is continuously working with Trend Micro and Facebook to detect and mitigate this attack. Note that the issue is not a result of an exploit to Blackberrys hardware, software, or connection....

Cyphort Labs detected an infection at the website of ISC (Internet Systems Consortium, Inc.). ISC is the developer of internet tools BIND, ISC DHCP, OpenReg, ISC AFTR etc. ISC also operates one of the 13 global authoritative DNS root servers, F-root. This is a WordPress issue, ftp.isc.org, kb.isc.org and our other data pipe resources are unaffected. We have not had any reports of any client machines that have been infected from our website....

But not before torrent sites had a field day with the film. source: www.techworm.net

Data leak of 130,000 China Railway passengers including usernames, passwords, and e-mail addresses Personal data of more than 130,000 customers who purchased train tickets on Chinas official online railway ticketing site, 12306.cn, were leaked due to an unknown reason. The travellers whose data has been leaked are panicking as such data can be used for identity theft, online fraud or any other illegal activity. Real-name registration must be provided to purchase tickets via the official website....

The price, 3000 Mega premium vouchers. Kim Dotcom (@KimDotcom)December 26, 2014 A Christmas Miracle. How@MegaPrivacysaved@Xbox&@PlayStationfrom the@LizardMafiaattack. Though a few still experienced outages, it was largely due to the previous attacks. Lizard Squad also tweeted as to how it managed to bring both Sony and Microsoft to its heels. @xxbratwurst@LizardMafiaAttacks stopped. The length of downtime depends on xbox or playstation. 6'2 1?64 (@JupiterEU)December 26, 2014 Read More source: www.techworm.net

President Barack Obama had authorised the individual and sectoral sanctions against Crimea last week. The United States action comes after Russia annexed the Crimean peninsula in March 2014. The economic blockade of Crimea is part of that support to Ukraine government. Russia seized the opportunity and captured the Crimean territory from Ukraine. Since then, Russia has been embattled with sanctions from western powers against its offensive against a weaker Ukraine....

Table Of Contents Lizard Squad or technical glitch? The premier foe of both the online gaming networks, Lizard Squad has claimed responsibility for DDoSing them. The hide and seek involving Lizard Squad and the two gaming networks continued over the Christmas eve into today. We are aware that there have been issues reported with PSN. Thanks for your patience as we investigate. It seems to have fulfilled its promise. Anyways heres tweet that just came in...