-
Digg Top Security N
-
Kaspersky News
- Kaspersky Lab detects new IM worms capable of spreading via almost all instant messengers
- Q2 2010: more than half a billion infection attempts
- Kaspersky Lab and Axigen Partner to Deliver Premium Email Security
- Kaspersky Internet Security 2011 and Kaspersky Anti-Virus 6.0 for Windows Workstations win VB100 awards for protection on Windows Vista Business Edition
- Kaspersky Internet Security 2011 and Kaspersky Anti-Virus 6.0 for Windows Workstations win VB100 awards for protection on Windows Vista Business Edition
-
RootSecure
- Renesys: House of Cards "What do you think would happen if another large and unusual routing announcement was made on the Internet?"
- Sophos: Did Gmail make you look like a spammer this week?
- Security-Shell: Ebay XSS
- ZDNet AU: Hackers accidentally give Microsoft their code "When hackers crash their systems while developing viruses, the code is often sent directly to Microsoft,"
- The Register: RIM proposes crypto forum to dodge India BlackBerry ban
-
SANS Forensics
- Why Teaching Matters – A Letter About FORENSICS 508 – Computer Forensic Investigations and Incident Response
- Digital Forensics Case Leads: An OS X based Live CD, a Free Forensics App for Windows, Spying, and High Performance Password Cracking
- SANS Institute Fall Events 2010
- Intro to Report Writing for Digital Forensics
- Computer Forensics: Armor For Your Feet
-
Cisco Security Advisories
- Cisco IOS XR Software Border Gateway Protocol Vulnerability
- Cisco Unified Communications Manager Denial of Service Vulnerabilities
- Cisco Unified Presence Denial of Service Vulnerabilities
- Cisco IOS Software TCP Denial of Service Vulnerability
- SQL Injection Vulnerability in Cisco Wireless Control System
-
Dancho Danchev
- Dissecting a Scareware-Serving Black Hat SEO Campaign Using Compromised .NL/.CH Sites
- Spamvertised Best Buy, Macy's, Evite and Target Themed Scareware/Exploits Serving Campaign
- Summarizing Zero Day's Posts for July
- ZeuS Crimeware Serving 123Greetings Ecard Themed Campaign in the Wild
- Dissecting the Xerox WorkCentre Pro Scanned Document Themed Campaign
-
Jeremiah Grossman
- Website Vulnerability Assessments: Good, Fast, or Cheap - Pick Two
- Breaking Browsers: Hacking Auto-Complete (All Materials Available)
- In Firefox we can’t read auto-complete, but we can write to it (a lot)!
- Patching auto-complete vulnerabilities not enough, Cookie Eviction to the rescue
- Stealing AutoComplete form data in Internet Explorer 6 & 7
-
SearchSecurity: Network Security Tactics
- Log management best practices: Five tips for success
- Security policy for PDF use: How to secure PDF files for the enterprise
- Fake antivirus pop-up scams: Forming a security awareness training plan
- FTP security best practices for the enterprise
- Using the Microsoft Sysinternals suite for a computer systems audit
-
SANS Internet Storm Center
- FTP Brute Password guessing attacks, (Fri, Aug 27th)
- DLL hijacking vulnerabilities, (Mon, Aug 23rd)
- Adobe released security update for Shockwave player that fix several CVEs: APSB1020, (Wed, Aug 25th)
- SCADA: A big challenge for information security professionals, (Sun, Aug 22nd)
- Firefox plugins to perform penetration testing activities, (Mon, Aug 23rd)
-
Microsoft Security Bulletins
- MS10-053 - Critical: Cumulative Security Update for Internet Explorer (2183461)
- MS10-059 - Important: Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)
- MS10-049 - Critical: Vulnerabilities in SChannel could allow Remote Code Execution (980436)
- MS10-058 - Important: Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)
- MS10-051 - Critical: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2079403)
