Navigation
Recent blog posts
- H1N1: a physical safety/security threat with high attack rate, low probability of serious impact
- CNet does a 2 part Q&A with Jeff Moss on cybersecurity & government
- Twitter: @mikkohypponen, Vee have veys of makink you not talk.
- Is catch-and-release of botnets ethical?
- We need more than just a month for Cyber Security Awareness
- Fanning the flames: "Cyberattacks could have been mitigated"
- MyDoom variant dropping Trojan used for US and S.Korean targetted DDoS
- Zbot FTP credential dump taken down - over 68K accounts compromised
- Rogers turns on content injection again
- Japanese researchers recreate "shockwave" traffic jams
Advisories | Vulns
- Vuln: Xerox WorkCentre PJL Daemon Buffer Overflow Vulnerability
- Vuln: TYPO3 Diocese of Portsmouth Calendar Unspecified SQL Injection Vulnerability
- New Message from ANZ National Bank - ANZ
- Bugtraq: Re: Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation?
- Bugtraq: VUPEN Security Research - Google Chrome Focus Processing Memory Corruption Vulnerability (VUPEN-SR-2010-249)
- Bugtraq: [SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution
- Bugtraq: [ MDVSA-2010:170 ] wget
- More rss feeds from SecurityFocus
- APPLE-SA-2010-09-01-1 iTunes 10
- c&c, zeus, rogue, fastflux, exploitpack domains
Blogs | Commentary
- Infocon: green
- What's not to Like about "Like?", (Sat, Sep 4th)
- Investigating Malicious Website Reports, (Sat, Sep 4th)
- Friday Squid Blogging: Squid Car
- Apple Releases Two Security Updates (One for OSX, One for iTunes) : http://support.apple.com/kb/HT4312 and http://support.apple.com/kb/HT4328, (Fri, Sep 3rd)
- VMware Tools for Windows Local Binary Planting Vulnerability
- VMware Tools for Windows Remote Binary Planting Vulnerability
- UAE Man-in-the-Middle Attack Against SSL
- The Inside Scoop on DoD Thinking
- Review of Hacking Exposed: Wireless, 2nd Ed Posted
Code | Tools
Email Lists | Forums
- Cross-subdomain Session Fixation
- Snoop Dogg joins cybercrime fight because 'hack is wack'
- Botnet takedown may yield valuable data
- Russian Trojan blamed for credit card losses at US diner
- Secunia Weekly Summary - Issue: 2010-35
- News of the World faces fresh phone hacking charge
- Russian government email servers hacked
- DARPA Soliciting Bids On Insider Threat Prevention
- Iran's Cyber Army Hacks 1, 000 US, British, French Gov't Websites
- Darpa’s Star Hacker Looks to WikiLeak-Proof Pentagon
Media | News
- Scam targets south Georgia man
- Gunter Ollmann: Time to Squish SQL Injection
- Mark Rasch: Lazy Workers May Be Deemed Hackers
- Adam O'Donnell: The Scale of Security
- Mark Rasch: Hacker-Tool Law Still Does Little
- Infocus: Enterprise Intrusion Analysis, Part One
- Infocus: Responding to a Brute Force SSH Attack
- Infocus: Data Recovery on Linux and <i>ext3</i>
- Infocus: WiMax: Just Another Security Challenge?
- More rss feeds from SecurityFocus

