Last week, a user in Jordan reported seeing a fake certificate for torproject.org. The user did not report any errors when browsing to sites such as Gmail, Facebook, and Twitter, which suggests that this was a targeted attack. The certificate was issued by a company called Cyberoam. We first believed that this incident was similar to that of Comodo and DigiNotar, and that Cyberoam had been tricked to issue a fake certificate for our website.




After a bit of research, we learned that Cyberoam make a range of devices used for Deep Packet Inspection (DPI). The user was not just seeing a fake certificate for torproject.org, his connection was actually being intercepted by one of their devices. While investigating this further, Ben Laurie and I found a security vulnerability affecting all Cyberoam DPI devices.

Examination of a certificate chain generated by a Cyberoam DPI device shows that all such devices share the same CA certificate and hence the same private key. It is therefore possible to intercept traffic from any victim of a Cyberoam device with any other Cyberoam device - or to extract the key from the device and import it into other DPI devices, and use those for interception.

Ben and I wrote a security advisory and notified Cyberoam of this vulnerability at 17:00 UTC on Saturday, June 30. We made it clear that we intended to publish this blog post and the security advisory on Tuesday, July 3, and encouraged them to respond promptly if they had any comments. At the same time, we notified browser vendors and asked that they blacklist the Cyberoam CA certificate in their browsers.
Cyberoam have not yet commented on this issue, apart from acknowledging our first email and saying that they are looking into it. The Cyberoam CA certificate is not trusted, and so browsers will show users a warning (unless someone has already installed the certificate). Users with the Tor Browser Bundle are not affected.

Originally Blogged at: https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372

The patches are no the way due tuesday for the three Critical and six Important issues in Microsoft Products.  Only three of the nine security bulletins are ranked Critical, while the remaining six are rated as Important.
An Intresting thing to notice is that one of the Critical Issue is with IE9 , the flag ship of the Windows Browsers. Now the thing is that it only effects the latest version not any older one. That really means that new mistakes are being found.

"

Many are expecting a patch for CVE-2012-1889: a vulnerability in Microsoft XML Core Services, which is currently being exploited in the wild

," says Marcus Carey @http://www.net-security.org/secworld.php?id=13206

Arab Anonymous hackers on Sunday showed hundreds of Israeli email addresses and their passwords on the website of Anonymous Arab. It is yet unclear which website was hacked to obtain the the emails and passwords.

There was apparently penetration of an Israeli site which cannot be determined at this stage, a site that requires identification by email address and a password, as is usual at forum, content and commercial sites.

[Sources: http://thehackernews.com/2012/07/islamic-anonymous-hacker-post-hundreds.html]

Well here is a master piece. Dariusz Ganski, of Sunny Bank, Kingswood used his Rocket mind and some equipment to tap into BT phone boxes and made 648 calls lasting 43 hours. These calls were worth atleast £1000 and ended up him in Jail for 18 months. It was revealved this guy was making calls for game credits n all that stuff.. It kind a lame. But still he ended up famous!

Japanese legislature had approved a bill that would be a big blow to the Piracy in the country, with penalties on the downloading of the copyrighted material. Once a Law it could end up some lads in jail for two years and fine of $25,000. Now that was enough to make the Anonymous angry.... The Robin Hood of internet freedom and .. you can say now piracy freedom too, Hacked many Japanease Govt Site!

Anonymous took the full responsibility of the attack over their Twitter channed @op_japan . They hit many sites including finance ministry , Supreme court and some political Parties Sites.
They said following in the message :

"To the government of Japan and the Recording Industry Association of Japan, you can now expect us the same way we have come to expect you in violating our basic rights to privacy and to an open internet.

According to the Recording Industry Association of Japan, 4.36 billion files were illegally downloaded in the country in 2010. So all the guys who were worried they should know some one is there for them , when rain is falling down (Read it > Bill is falling down!)