by Aaron Titus The FTC recently announced new guidelines requiring bloggers to disclose when they get freebies in exchange for reviews. Adopted by a vote of 4-0, this is the first update of the FTC's Guides ...

Authorities in Vancouver Canada staged a mock terror attack Tuesday in an effort to prepare for the real thing during the 2010 Olympic Games. The make-believe was part of the final formal security drill ...

Thanks to everyone who attended the Bejtlich and Bradley Webcast for SANS yesterday. We recorded that Webcast audio is now available) to start a discussion concerning professional incident detection. ...

The UK maybe still in the midst of a recession, but these times are proving anything but a recession for cybercriminals, as UK Online Banking fraud is sky rocketing at the moment. The ‘Financial Fraud ...

Last week on Twitter, Jeremiah Grossman, Whitehat Security, asked if there was a simple way to perform asset valuation. Since then there have been posts from Russell Cameron Thomas, Andrew Jaquith, and ...

Next week I will be speaking at the 7th Annual Ohio Information Security Summit on Enterprise Open Source Intelligence Gathering.  Here is the talk abstract: What does the Internet say about your company?  ...

There are apparently many people being held without charges by Iranian government. But as far as I know, I've only ever met one of them, and so wanted to draw attention to his case: During this entire ...

Black Hat was kind enough to invite me back to teach multiple sessions of my 2-day course this year. First up is Black Hat DC 2010 Training on 31 January and 01 February 2010 at Grand Hyatt Crystal City ...

Yesterday was the first day of RSA Europe 2009 and I enjoyed it a great deal. I ran into Brian Honan first thing in the morning and Craig Balding shortly thereafter. I attended both opening keynotes and ...

Spammers are always looking for techniques that can beat the spam filters. We have been seeing various techniques for spamming like obfuscating words, embedded text in images, spoofing urls, abusing social ...

Class action lawsuits should be introduced in Scotland, according to a Government-commissioned review of the Scottish legal system. If accepted, the review's recommendations could make Scotland the first ...

Payroll services provider PayChoice took its Web-based service offline for the second time in a month on Wednesday in response to yet another data breach caused by hackers. Moorestown, N.J. based PayChoice, ...

by James Costello A friend of mine recently had a very Dilbertesque experience at work.  The company my friend works for has been acquired twice in the last three years and all of the dust seemed to be ...

Im just about to launch 2.1 version of Sphere Of Influence. I have added a summary page. Here I took a typical 800X600 window and made each pixel represent appx 164 ports. I wanted to visualize the entire ...

A blog reader recently asked: I've been tasked with reevaluating our current NSM / SIEM implementation, and I see that you posted about a NetFlow book you are techediting for Lucas. My question is this, ...

Cyber Exercise Over this past weekend I attended Cyberdawn, a cyber exercise that was hosted by Battlefield High School in Haymarket, Virginia. Sidebar: What is a Cyber Exercise? “A cyber exercise is a ...

SecuraBit Episode 41 Speaking of Cons, and forensics Part 1: Marcus Carey Dojocon http://www.dojocon.org/ @dojocon November 6 7, 2009 Capitol College Maryland Part 2: Scott Moulton http://www.microforensics.com/pages/software-mercury.php ...

Ah, deja vu! How is it possible that the Scope Group money mule recruitment group acting as the employer for the interviewed mule has been "set up in 1990 in New York, the USA by three enthusiasts who ...

by LysergicBliss ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------   ...

By Donald Nelson Spam is one of the curses of the Internet age. But if the clogging of mail boxes with useless emails was bad enough, unsolicited emails aimed at tricking you into giving your valuable ...

By William Hugh Murray Article pulled from Security-Protocols From: WHMurray@DOCKMASTER.NCSC.MIL ...

By Declan McCullagh Article pulled from Security-Protocols Given this paper's Rimmesque, hysterical tone, unsupported assertions, and wildly inaccurate conclusions, I'd like to think it's a joke. Unfortunately, ...

By security-protocols.com Article pulled from Security-Protocols Until a few years ago Internet security wasn't even recognized as a need. The culture of the Internet encouraged the sharing of ...

By Dan Rahmel Internet Systems , April 1997 Systems and Methodologies for Identifying and Protecting Weak Spots in Your Web-Enabled Database -- Before Someone Else Does. As the use of the Web grows on ...

Every day, all over the world, computer networks and hosts are being broken into.   The level of sophistication of these attacks varies widely; while it is generally believed that most break-ins succeed ...

This is addition to the most excellent: Net Abuse FAQ (posted to news.admin.net-abuse.misc, alt.current- events.net-abuse etc...), brought to you by J.D. Falk  <jdfalk@cybernothing.org> : http://www.cybernothing.org/faqs/net-abuse-faq.html ...

by Jody Melbourne and David Jorm last updated June 16, 2003  This is the first in a series of three articles on penetration testing for Web applications. The first installment provides the penetration ...

By Andre Bacard, Author of Article pulled from Security-Protocols This article offers a nontechnical overview of anonymous remailers to help you decide whether to use these computer services to enhance ...

By Hal Finney Article pulled from Security-Protocols From sue@mec.com Sun Feb 21 14:13:20 1993 How to use the Cypherpunks Remailers ------------------------------------ by Hal Finney First written: ...

...  Any Scott Tiger Oracle 8i all internal oracle oracle - - - - oracle - - - - oracle co. Database engines every sys change_on_install Osicom(Datacom) ...

By Mitchell Krell, Scott Mann, Ellen Mitchell  Article is provided courtesy of Addison Wesley Professional Vulnerability Survey ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ ...

By Mikkkeee The Complete Information Gathering Tutorial  Written by Mikkkeee (mikkkeee@box.sk) Converted to XML by SpiderMan (spiderman@witty.com) Blacksun Research Facility http://blacksun.box.sk   ...

By suid@suid.edu suid@suid.edu - the dangers of ftp conversions on misconfigured systems/ftpd (specifically wu-ftpd) Summary: There exists a vulnerability with certain configurations of     certain ...

Lance Spitzner Organizations throughout the world are adopting Linux as their production platform. By connecting to the Internet to provide critical services, they also become targets of opportunity. ...

...  about ISS (Internet Security Scanner), email cklaus@shadow.net. Acknowledgements: Thanks to the crew on IRC, Dan Farmer, Wietse Venema, Alec Muffet, Scott Miles, Scott Yelich, and Henri De Valois. ...

By Joaquin A. Trinanes  During all ages, pirates hunted for treasures. Violence was usually involved to acquire them. In today’s economy, corporation databases symbolize one of the most valuable ...

By Scott C. Nevins Bankers would be considered negligent if they locked a bank's outer doors and left the vault's doors open at night. Likewise, it doesn't make sense for an enterprise to lock down ...

... Rating: First tagged "databases" by Scott D. Smith Customer tags: t-sql(2), database object, sql server, sql, paul turley, databases, data management system, sql server 2008, transact-sql, ...

Java Security (2nd Edition) (Paperback) By Scott Oaks Buy new: $46.46 31 used and new from $15.75 Customer Rating: First tagged "encryption" by P. Renaghan  ...

Computer and Information Security Handbook (The Morgan Kaufmann Series in Computer Security) (Hardcover) By John R. Vacca Buy new: $95.99 28 used and new from $91.98 Customer ...

Computer and Information Security Handbook (The Morgan Kaufmann Series in Computer Security) (Hardcover) By John R. Vacca Buy new: $95.99 27 used and new from $52.95 Customer ...

Cryptographic Security Architecture: Design and Verification (Hardcover) By Peter Gutmann Buy new: $66.45 26 used and new from $21.75 First tagged "encryption" ...

At Large: the Strange Case of the World's Biggest Internet Invasion (Hardcover) By Charles C. Mann Buy new: $18.72 87 used and new from $0.01 Customer Rating:  ...

The Rational Guide to: SQL Server Reporting Services (Rational Guides) (Paperback) By A. T. Mann Buy new: $9.99 25 used and new from $5.56 Customer Rating: First ...

Data on the Web: From Relations to Semistructured Data and XML (The Morgan Kaufmann Series in Data Management Systems) (Hardcover) By Serge Abiteboul Buy new: $68.95 36 used ...

Upgrading and Repairing Microsoft Windows (2nd Edition) (Paperback) By Scott Mueller Buy new: $31.49 53 used and new from $30.75 Customer Rating: First tagged ...