SQL injection attack conceded by Kaspersky U.S.; subsequent attack on BitDefender Portugal still awaiting confirmation
 

By Tim Wilson -DarkReading

A single Romanian hacker claims he has broken through the Website defenses of two prominent security vendors in an attempt to show vulnerabilities in their security.

Kaspersky, one of the industry's best-known antivirus and security software makers, today gave a press conference confirming that a Romanian hacker had launched an SQL injection attack on its newly implemented U.S. customer support site, exposing a potentially data-threatening vulnerability in its Website. The attacker did not publish any sensitive data, even though he could have gained access to it, Kaspersky said.


The hacker, known as "unu," claims to have launched a similar SQL injection attack on the Website of security vendor BitDefender in Portugal. "It seems Kaspersky aren't the only ones who need to secure their database. Bitdefender has the same problems," unu said in an online message. As of this posting, BitDefender had not confirmed whether unu's claims were accurate.

continue reading