Vulnerabilities / Threats

1/10/2008
07:55 AM
50%
50%

Hacking and the Academy Awards

Fortify Software documentary illustrates impact of cybercrime on consumers, business

5:55 PM -- Is hacking becoming, well, telegenic? First we saw CourtTV's "Tiger Team" reality TV program (see The Perfect Jewelry Heist and Pen Testing Goes Reality TV), and now the upcoming screening (yes, an actual screening) of a documentary called "The New Face of Cybercrime,” filmed by Academy Award-nominated filmmaker Frederic Golding.

Fortify Software, which hired Golding for the production, has released a trailer on YouTube of the approximately 30-minute film, which looks at cybercrime's impact on consumers and businesses.

Judging from the trailer, it's a slick production, with some impressive industry, government, and business personalities weighing in on the cybercrime evolution, including firewall pioneer Marcus Ranum; James Routh, CISO of The Depository Trust & Clearing Corp.; Air Force Col. Jeff Salyards, director of the Defense Computer Forensics Laboratory; and Mike Ullman, chairman and CEO of JC Penney.

Cigital CTO Gary McGraw is also interviewed in the film, and the trailer includes RSnake (aka Robert Hansen, founder of SecTheory) showing how he can inject "anything" he wants onto the domains.aol.com page due to a cross-site scripting flaw on it.

"It's amazing the number of folks we were able to get to open up about this [cybercrime] topic," says Clark Newby, vice president of marketing for Fortify. "The story had not been all told together and put in front of folks... so that people can really get an understanding of what's going on inside the hacker ecology."

Newby says no bad guys appear in the film, but he hinted that some may have served as off-camera sources. "They're not in the film. I'll just say that," he says.

(Neither is our telegenic site editor, Tim Wilson, who filmed a segment with Golding that apparently ended up on the cutting-room floor. Star quality is tough to define.)

There are no plans for a Hollywood premiere of "The New Face of Cybercrime." Fortify will post portions of the film on its Website, as well as provide copies to its customers and business partners.

"Our goal is to educate folks about the threat and challenges," Newby says. The invitation-only screenings will be held in San Francisco, New York, and London.

— Kelly Jackson Higgins, Senior Editor, Dark Reading

  • Fortify Software Inc.
  • Cigital Inc.

    Comment  | 
    Print  | 
    More Insights
  • Comments
    Threaded  |  Newest First  |  Oldest First
    Russia Hacked Clinton's Computers Five Hours After Trump's Call
    Robert Lemos, Technology Journalist/Data Researcher,  4/19/2019
    Tips for the Aftermath of a Cyberattack
    Kelly Sheridan, Staff Editor, Dark Reading,  4/17/2019
    Register for Dark Reading Newsletters
    White Papers
    Video
    Cartoon
    Current Issue
    5 Emerging Cyber Threats to Watch for in 2019
    Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
    Flash Poll
    Twitter Feed
    Dark Reading - Bug Report
    Bug Report
    Enterprise Vulnerabilities
    From DHS/US-CERT's National Vulnerability Database
    CVE-2019-11378
    PUBLISHED: 2019-04-20
    An issue was discovered in ProjectSend r1053. upload-process-form.php allows finished_files[]=../ directory traversal. It is possible for users to read arbitrary files and (potentially) access the supporting database, delete arbitrary files, access user passwords, or run arbitrary code.
    CVE-2019-11372
    PUBLISHED: 2019-04-20
    An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
    CVE-2019-11373
    PUBLISHED: 2019-04-20
    An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
    CVE-2019-11374
    PUBLISHED: 2019-04-20
    74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.
    CVE-2019-11375
    PUBLISHED: 2019-04-20
    Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.