Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos network security services platform







Bugtraq: New WHID web hacking incidents

New WHID web hacking incidents

From: Ofer Shezaf <ofer_at_shezaf.com>
Date: Tue, 06 Jan 2009 15:55:05 +0200

After a way too long negligence, I am updating again the Web Hacking
Incidents Database (WHID). I hope to close the gap shortly in order to be
able to issue the WHID 2008 report. One of the obstacle facing WHID was a
lack of proper content management system forcing me to edit a lot of HTML to
add every new incident. WHID now moved to a proper (though admittedly less
secure) system and the new address is http://www.xiom.com/whid. The new
system allows you to join in and comment and discuss the incidents.

The first incidents reports for 2009 are:
* WHID 2009-2: Prominent Twitter accounts hacked
(http://www.xiom.com/whid-2009-2)
* WHID 2009-1: Gaza conflict cyber war (http://www.xiom.com/whid-2009-1)

Other incidents of interest added recently to WHID:
* WHID 2008-43: Russian nuclear power web sites attacked amid accident
rumors
* WHID 2008-36: RBS WorldPay Data Breach Hits 1.5 Million
* And lastly, the big TJX hack, that finally got into WHID as new reports
suggest that web hacking also had a role in it, WHID 2007-89: The big TJX
hack

~ Ofer

Ofer Shezaf
shezaf_at_xiom.com, +972-54-4431119

Founder, Xiom.com, Proactive Web Application Security, http://www.xiom.com
Chairman, OWASP Israel
Leader, WASC Web Hacking Incidents Database Project
Received on Jan 06 2009

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]