Dark Reading
Risky Business
Do more than just cursory scans. Develop
a holistic approach to app security.
Find out how!
Learn to take the ambiguity out of managing IT so you can guide your business forward.
Download now!
Use these tips from Gartner to identify the EPP solution that best suits your business.
Download now!
Ukranian Suspect Could Help Break TJX Case
Details of the TJX hack begin to rapidly unfold thanks to a recent arrestAug 22, 2007 | 02:47 AM
By Kelly Jackson HigginsDarkReading
The layers of the TJX hack may be closer to unfolding: A Ukrainian man recently arrested in Turkey could bring authorities a step closer to identifying the masterminds behind the breach, where hackers stole files on millions of credit and debit card number accounts from TJX's network, according to published reports. (See The Face of Identity Theft and Hacking the Real TJX Story.)
Maksym Yastremskiy, a 24-year-old who was arrested by Turkish authorities a few weeks ago, is suspected of allegedly selling some of the credit and debit card numbers that were stolen from TJX transaction-payment processing systems. A U.S. Postal Inspection Service official told reporters that it appears that Yastremskiy could be a big-time trafficker in the stolen data -- including data from the TJX breach.
He allegedly sold the stolen account numbers online, according to reports, and the hope is he will lead authorities to the actual ringleaders of the TJX breach.
The break-in left around 45.7 million TJX customer credit card and debit card accounts at risk, and TJX has said it will cost the company around $118 million.
Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.
Hackers Miss Their Target -- By About 2,000 Miles 09/03/2010
Qualys Releases QualysGuard PCI 5.0 with New Dashboard and Interactive Workflows 09/03/2010
DNS DDOS Threats and Corresponding Mitigation Strategies 03/23/2010
Spoofing Server - to - Server Communication: How You Can Prevent It 03/11/2010
DIGITAL ASSETS
Extend Security to the Edge with Web App Security
09/02/2010
Subscribe to RSSHackers Miss Their Target -- By About 2,000 Miles
Firewalls Top Purchase Priority In 2010, Survey Says
Misconfigured Networks Are Easiest Prey, Hacker Survey Says
MORE KEYHOLE
Published:2010-08-19
Severity:High
Description:Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to samples/wsdl_first_pure_xml, a similar issue to CVE-2010-1632.
Published:2010-08-19
Severity:Medium
Description:Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
Published:2010-08-19
Severity:Medium
Description:Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
Published:2010-08-19
Severity:Medium
Description:Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.
Published:2010-08-19
Severity:Low
Description:Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
|
