FortinetSecurity

Q&A with Bob Fortna President of Fortinet Federal Inc

Credit to Author: Shelly Scarpelli| Date: Mon, 04 Dec 2017 13:45:59 +0000

Bob Fortna joined Fortinet as president of Fortinet Federal Inc. earlier this year. We sat down with Bob to get his perspective on his new role and learn about what he envisions for Fortinet in supporting Federal agencies and partners.   As the Fortinet Federal Inc. leader, what do you see as the company’s role as a Federal agency partner? As prime targets for the most sophisticated adversaries seeking to impact national security, public safety, and civilian services, Federal Government agencies require the most comprehensive…

Read More
QuickHealSecurity

Beware of fake social media messages that talk about SMS-based Aadhaar-LIC linking

Credit to Author: Rajib Singha| Date: Mon, 04 Dec 2017 12:11:32 +0000

You might be aware that LIC policyholders must now link their Aadhaar and PAN to their policies according to a directive issued by the Government of India. The deadline for the Aadhaar-LIC linking is December 31, 2017. And unsurprisingly, fraudsters have started misusing news to their advantage. How? Read what…

Read More
IndependentKrebs

Hacked Password Service Leakbase Goes Dark

Credit to Author: BrianKrebs| Date: Mon, 04 Dec 2017 05:39:53 +0000

Leakbase, a Web site that indexed and sold access to billions of usernames and passwords stolen in some of the world largest data breaches, has closed up shop. A source close to the matter says the service was taken down in a law enforcement sting that may be tied to the Dutch police raid of the Hansa dark web market earlier this year.

Read More
FortinetSecurity

PowerDNS Recursor HTML/Script Injection Vulnerability – A Walkthrough

Credit to Author: Chris Navarrete| Date: Sat, 02 Dec 2017 15:50:59 +0000

PowerDNS Recursor is a high-end, high-performance resolving name server that powers the DNS resolution of at least a hundred million subscribers. The “Recursor” is one of two name server products whose primary goal is to act as resolving DNS server. On Aug. 7, 2017, I reported an XSS (cross-site scripting) vulnerability to PowerDNS and its Security Team. They assigned it the identifier CVE-2017-15092. In this report I will explain how I was able to identify and trigger the vulnerability.

Read More