Click here to RSVP to WHIR Events: Chicago – April 22, 2010 Toronto – May 20, 2010 Boston – June 17, 2010 Five Most Recent Posts News: Liquid Web Launches Worlds First Feature Complete Hybrid Cloud News: UK Firms Ill-prepared for New Carbon Laws: Study Blogs: Wordpress infection spreads between hosters now – target name identified.. News: Hackers Hijack Web Servers For More Powerful DDoS Attacks News: AT&T Launches New Small Business Hosting Plans (WEB HOST INDUSTRY REVIEW) — Instead of using bot-infected PCs, a new generation of distributed denial of service attacks are leveraging the power of web servers, according to research from security firm Imperva ( www.imperva.com ).

Researcher Demonstrates How To Counterattack Against A Targeted Attack Targeted attacks might be tough to prevent, but what if you could fight back against the attacker once he’s infiltrated your network? A researcher has come up with a proof-of-concept (PoC) that does just that by finding vulnerabilities in the attacker’s malware and using it against him. Security consultant Andrzej Dereszowski last week at Black Hat Europe demonstrated how it’s possible to wage a counterattack in a targeted attack: His PoC was based on some fuzzing and reverse-engineering he conducted against malware used in an infected PDF that was sent to a pharmaceutical company

Click here to RSVP to WHIR Events: Chicago – April 22, 2010 Toronto – May 20, 2010 Boston – June 17, 2010 Five Most Recent Posts News: FusionStorm Acquires Assets of GNi News: Apache Project Servers Infiltrated Via XSS Bug, Passwords Compromised News: Q&A: FireHost Founder and CEO Chris Drake News: Modius Releases Data Center Software OpenData v3.2 (WEB HOST INDUSTRY REVIEW) — Hackers gained access to a server used by the Apache Software Foundation ( www.apache.org ) to keep track of software bugs in an attack that exploited a cross-site scripting bug. According to an incident report from Apache.org , hackers using a compromised Slicehost server opened a new issue, containing a URL that redirected back to the Apache instance of JIRA, at a special URL containing a cross site scripting attack crafted to steal the session cookie from the user logged-in to JIRA

Web hosting firm Network Solutions has been forced to ramp up security for its Wordpress hosting customers, following a mass hacking over the weekend. The company today issued a set of instructions to help affected users repair their sites, following reports that Wordpress databases were being hijacked to bounce surfers to a malicious web site. It seems insecure file permissions were to blame .

Security bug opens Google Buzz to hackers A common Web programming error could give hackers a way to take over Google Buzz accounts, a security expert said Tuesday.