- Vuln: Mahara Resume Blocktype Cross Site Scripting Vulnerability
- Vuln: Mahara Admin Password Reset Security Bypass Vulnerability
- Vuln: eCryptfs 'parse_tag_3_packet()' Packet Heap Based Buffer Overflow Vulnerability
- Vuln: Cisco VPN Client for Windows 'StartServiceCtrlDispatche' Local Denial of Service Vulnerability
- Vuln: HP OpenView Network Node Manager 'ovdbrun.exe' Denial of Service Vulnerability
- Vuln: PHP Versions Prior to 5.3.1 Multiple Vulnerabilities
- Vuln: KDE KDELibs 'dtoa()' Remote Code Execution Vulnerability
- Vuln: PEAR Sendmail 'From' Parameter Arbitrary Argument Injection Vulnerability
- Vuln: IBM Rational Products Multiple Cross Site Scripting Vulnerabilities
- Vuln: Microsoft Internet Explorer 'Style' Object Remote Code Execution Vulnerability
Search
Search Result
-
Best of Application Security (Friday, Nov. 20)
Category: Network Security & Hacking News/Latest Security News
... Announcing ModSecurity Handbook ESAPI Web Application Firewall released! OWASP Top Ten and ESAPI & Part 2 WhiteHat Security is a leading provider of website security services. Ten of ...Friday, 20 November 2009 -
Emails regarding updating your mailbox leads to the malware flashinstaller.exe
Category: Network Security & Hacking News/Latest Security News
... that disables firewall, steals sensitive financial data (credit card numbers, online banking login details), makes screen snapshots, downloads additional components, and provides a hacker with the remote ...Friday, 20 November 2009 -
New books: ModSecurity, Snow Leopard, social Web applications
Category: Network Security & Hacking News/Latest Security News
ModSecurity Handbook features an in-depth coverage of ModSecurity, an open source web application firewall. The main highlights are the following:Step-by-step instructions for those just starting... ModSecurity ...Wednesday, 18 November 2009 -
A Simplified Astaro UTM now FREE to businesses
Category: Network Security & Hacking News/Latest Security News
... Firewall Edition” is now FREE to any business that wants to run a copy. Essential Firewall Edition is basically a enterprise grade firewall w/ VPN and some reporting. Why I like this product ...Wednesday, 18 November 2009 -
Auditing 100,000 Hosts or More with Nessus
Category: Network Security & Hacking News/Latest Security News
... firewalls To be the most effective, a Nessus scanner needs to have unimpeded access to the hosts it is scanning. This often means that the scanners are deployed behind an organization’s firewall. Any ...Monday, 16 November 2009 -
Reverse SSH Tunnel Watchdog
Category: Network Security & Hacking News/Latest Security News
... any protocol. To a squid proxy, for example. I'll be using SSH to reverse-tunnel SSH, though, to allow SSH access to a server behind a firewall that I do not control. Here's how it'll work: Cron will ...Saturday, 14 November 2009 -
Blowfish in Fiction
Category: Network Security & Hacking News/Latest Security News
... to hammer past two firewalls and were getting to his final line of defense. Somebody had managed a zero day exploit on Blowfish. And more were coming in! Read Full Article ...Friday, 13 November 2009 -
Best of Application Security (Friday, Nov. 13)
Category: Network Security & Hacking News/Latest Security News
... Report Edit Presentation Securely deploying cross-domain policy files Vulnerability assessment integration with web application firewalls ModSecurity Core Rule Set (CRS) PHPIDS Smoketest Website Vulnerability ...Friday, 13 November 2009 -
Marcus Ranum Named "Industry Pioneer" By SC Magazine
Category: Network Security & Hacking News/Latest Security News
... “I like to think of myself as a filter for good ideas.” We also get some insight as to how he came up with the idea for building the world's first firewall: The firewall was really born on a day ...Thursday, 12 November 2009 -
Scanning Windows 7 With Nessus 4.2
Category: Network Security & Hacking News/Latest Security News
... the same challenges we always did. The built-in firewall was overhauled, but is still best supplemented by third-party tools. In addition, malware is reported to run great on Windows 7 despite controls ...Thursday, 12 November 2009 -
Key Aspects of Insider Threat
Category: Network Security & Hacking News/Latest Security News
... that they get caught. Why try to break through a firewall and gain access to a system with a private address, when you can find someone behind the firewall with full access to the system? I know it has ...Wednesday, 11 November 2009 -
We need to learn more about the RBS Worldpay ATM attack
Category: Network Security & Hacking News/Latest Security News
... of RBS Worldpay. The indictment states the attackers used a vulnerability in the RBS Worldpay computer network. This is about as vague as it gets. Was it a misconfigured firewall, a web application ...Wednesday, 11 November 2009 -
Apple ships 50+ security updates
Category: Network Security & Hacking News/Latest Security News
... updates for components like Adaptive Firewall, FTP server, QuickTime and Spotlight. The update applies to Snow Leopard (10.6.x) and Mac OS X Leopard (10.5.8) systems, as well as OS X Server versions of ...Tuesday, 10 November 2009 -
Is Antivirus Dead?
Category: Network Security & Hacking News/Latest Security News
... shouldn't click on, downloads things he probably shouldn't download, and doesn't understand the finer workings of Windows Personal Firewall. Certainly security would be improved if people used whitelisting ...Monday, 09 November 2009 -
DHL Tracking Number 3YMH6JJY contains trojan
Category: Network Security & Hacking News/Latest Security News
... The attachment is named 3YMH6JJY.zip and contains the file 3YMH6JJY.exe, 56 kB big. The threat has the characteristics of ZBot, a trojan that disables firewall, steals sensitive financial data makes screen ...Monday, 09 November 2009 -
Vuln: Apple Mac OS X Adaptive Firewall Security Bypass Vulnerability
Category: Network Security & Hacking News/Security Exploits and Security Patches
Apple Mac OS X Adaptive Firewall Security Bypass Vulnerability Read Full Article ...Monday, 09 November 2009 -
Ron Gula and Marcus Ranum DOJOCON 2009 Videos
Category: Network Security & Hacking News/Latest Security News
... we can do as users of information security technologies such as firewalls, vulnerability scanners, intrusion detection systems and so on to improve the overall state of network security monitoring. Watch ...Monday, 09 November 2009 -
Cenzic and Imperva Unite to Battle Web Application Threats
Category: Network Security & Hacking News/Latest Security News
... why bringing together vulnerability scanning services with Web Application Firewalls (WAF) is critical for application security. He also shares his views on what the future holds for application security ...Monday, 09 November 2009 -
How-to: Cloning a (Laptop) Hard Drive using DD over the network
Category: Network Security & Hacking News/Latest Security News
... time, but could be over Internet if both systems have access, and your firewall is set up accordingly) Linux on the slave computer (use your preferred distro) Linux on a stick, CD or memorycard of some ...Sunday, 08 November 2009 -
Peer-to-Peer Goes Both Ways
Category: Network Security & Hacking News/Global Security News
... by (among other things) adding antivirus, firewalling, watching network flows for P2P traffic, and usually outright banning of P2P applications. They may however, We all know the dangers of peer-to-peer ...Wednesday, 04 November 2009 -
My WAF went W00F!
Category: Network Security & Hacking News/Latest Security News
... it. Dessus created a tool that tries to detect what kind of web application firewall is used for protecting an application. It does that by sending an attack vector and testing response and comparing it ...Monday, 02 November 2009 -
New ransomware Trojan tricks victims to buy software fix
Category: Network Security & Hacking News/Latest Security News
... firewall configurations. Read Full Article ...Monday, 02 November 2009 -
Email regarding Facebook account update is a phish – part 2
Category: Network Security & Hacking News/Latest Security News
... ZBot is a banking trojan that disables firewall, steals sensitive financial data (credit card numbers, online banking login details), makes screen snapshots, downloads additional components, and provides ...Saturday, 31 October 2009 -
Internet Security 3 User - 2 Year Subscription (CD-ROM) newly tagged "computer security"
Category: Network Security & Hacking Products/Computer Security
... security" by NeuroSplicer Customer tags: computer security, avg, security software, anti-spyware, internet security, utilities, anti-rootkit, firewall, security, antivirus Read Full Article ...Saturday, 31 October 2009 -
Internet Security - 2 Year Subscription (CD-ROM) newly tagged "computer security"
Category: Network Security & Hacking Products/Computer Security
... by NeuroSplicer Customer tags: computer security, avg, security software, anti-spyware, internet security, utilities, anti-rootkit, firewall, security, antivirus Read Full Article ...Saturday, 31 October 2009 -
Risk Driven Security Testing
Category: Network Security & Hacking News/Latest Security News
... awesome speaker, it is worth the keynote talk 100% love his sense of humor and insight on the importance of the human firewall as way to mitigate social engineering, with facebook, generation Y and twitter ...Friday, 30 October 2009 -
Finjan says controlled access Web portals now prime target of cybercriminals
Category: Network Security & Hacking News/Latest Security News
... using web application firewalls and securing the backend database using database security tools, he explained, are a logical course of preparing to defend those IT resources that contain personal and business ...Friday, 30 October 2009 -
Finjan warns companies as China prepares for cyber-espionage
Category: Network Security & Hacking News/Latest Security News
... is the lack of knowledge and the false believe that their existing Firewalls and Anti-virus can do the job for them. Although that was the case 10-5 years ago, since cyber criminals introduced new attack ...Friday, 30 October 2009 -
Check Point Adds Windows 7 OS Support To Endpoint Security
Category: Network Security & Hacking News/Latest Security News
... security for data stored on laptops and desktops through a combination of pre-boot authentication and strong encryption algorithms - Award-winning firewall blocks unwanted traffic, prevents malware from ...Friday, 30 October 2009 -
Defeating Zombies: Five Ways To Improve Defenses
Category: Network Security & Hacking News/Latest Security News
... techniques. Tried and true defensive measures such as firewalls, anti-virus software, Intrusion Detection Systems provide "operational security", but even if this is running flawlessly, it is typically ...Friday, 30 October 2009 -
Black Box vs White Box. You are doing it wrong.
Category: Network Security & Hacking News/Latest Security News
... as one of the criteria, but again, not the testing methodology itself. Just as you wouldn’t compare the value of network pen-testing against patch management, firewalls against IPS, and so on. Understanding ...Wednesday, 28 October 2009 -
Wednesday is Last Day for Discounted SANS Registration
Category: Network Security & Hacking News/Latest Security News
... Forensics blogger. Michael Rash, Senior Security Architect for G2, Inc., author of Linux Firewalls and the psad, fwsnort, and fwknop security projects. Matt Richard, Malicious Code Operations Lead for ...Tuesday, 27 October 2009 -
Bredolab masked as Facebook Password Reset Confirmation
Category: Network Security & Hacking News/Latest Security News
... The Facebook Team Bredolab is a trojan horse that downloads and executes files from the Internet, such as rogue anti-spyware. To bypass firewalls, it injects its own code into legitimate processes svchost.exe ...Monday, 26 October 2009 -
IPv6 Tunneling Protocols: Good for Adoption, Not So Hot for Security
Category: Network Security & Hacking News/Latest Security News
... RFC devoted to security considerations (http://tools.ietf.org/html/rfc3964). Remember IPv4 firewall rules don’t do anything to IPv6 traffic. 6to4 tunneling requires that the user endpoint exist ...Monday, 26 October 2009 -
Day 1 in Sao Paulo Brazil -- I'm Back
Category: Network Security & Hacking News/Latest Security News
... picture. During today's customer and partner meetings I wasn't at all surprised by the great level of interest there is in protecting Web portals and critical applications with Web Application Firewalls ...Monday, 26 October 2009 -
Explore the new security features in Windows 7
Category: Network Security & Hacking News/Latest Security News
... and other unwanted software. · Windows Firewall - Windows Firewall can help protect your PC from hackers and malicious software. In Windows 7, it's powerful ...Wednesday, 21 October 2009 -
Information Asset Value: Some Cold-Hearted Calculations
Category: Network Security & Hacking News/Latest Security News
... application monitoring tools/firewalls (Strategy: chargeback of per-agent software costs, plus labor allocation) Intrusion detection External audit fees and consulting: (Strategy: direct ...Wednesday, 21 October 2009 -
Security Briefing – October 21st
Category: Network Security & Hacking News/Latest Security News
... No Nos ha.ckers Red and Tiger Team Chris Nickerson BruCON 2009 Security4all Methods to Bypass Web Application Firewalls Security-Sh3ll Ex Ford Engineer Charged With Morning message here. Click ...Wednesday, 21 October 2009 -
SQL Injection Attacks and Defense Book Review
Category: Network Security & Hacking News/Latest Security News
... PL/SQL injection via the web application. Uncommon != never. Unfortunately for most penetration testers access the TNS listener is usually firewalled off and exploitation Oracle through the web application ...Tuesday, 20 October 2009 -
Scrappy Information Security: A plain-English tour through the world of Intranets, the Internet, Packets, Headers, Ports, ACs, Routers, Bridges, Firewalls, ... Access Cards and Biometrics, which (Paperback) newly tagged "computer security"
Category: Network Security & Hacking Products/Computer Security
Scrappy Information Security: A plain-English tour through the world of Intranets, the Internet, Packets, Headers, Ports, ACs, Routers, Bridges, Firewalls, ... Access Cards and Biometrics, ...Tuesday, 20 October 2009 -
Fortify warns new WiFi Standard could pose major security threat
Category: Network Security & Hacking News/Latest Security News
... a smartphone inside a company, they then have a foothold with which to gain unauthorised access to the company network from the other side of the firewall and security software,” he added. Read ...Tuesday, 20 October 2009 -
Multifunction security appliances against network, application and data threats
Category: Network Security & Hacking News/Latest Security News
WatchGuard Technologies launched a series of new multifunction security appliances - the WatchGuard XTM 8 Series. Built for speed, it delivers 5Gbps firewall throughput, making it ideal for deman... WatchGuard ...Monday, 19 October 2009 -
Web Application Firewalls and Vulnerability Assessment
Category: Network Security & Hacking News/Latest Security News
... of 2009 Niel MacDonald from Gartner published the following blog entry titled "Security No-Brainer #9: Application Vulnerability Scanners Should Communicate with Application Firewalls" This is an interesting ...Monday, 19 October 2009 -
20/20 Hindsight – Walmart Lessons Learned for Tenable Customers
Category: Network Security & Hacking News/Latest Security News
... and received an IP address of 172.10.10.10, any other log that was sent to the Log Correlation Engine involving this IP would get tagged as belonging to “joesmith”. This includes firewall logs, intrusion ...Monday, 19 October 2009 -
Vuln: 3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Multiple Remote Vulnerabilities
Category: Network Security & Hacking News/Security Exploits and Security Patches
3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Multiple Remote Vulnerabilities Read Full Article ...Sunday, 18 October 2009 -
China clamps down on Tor
Category: Network Security & Hacking News/Latest Security News
It is a well known fact that the Chinese government is a big fan of Internet censorship. The Great Firewall of China (a system that blocks content by preventing IP addresses from being routed throug... ...Friday, 16 October 2009 -
Louisville Metro Infosec 2009
Category: Network Security & Hacking News/Latest Security News
... and bypassing web application firewalls available to attackers When attacking virtual hosting environments, an attacker will not think twice about breaking into a site hosted alongside your site to gain ...Thursday, 15 October 2009 -
Barracuda acquires Purewire, jumps into cloud computing
Category: Network Security & Hacking News/Latest Security News
... vendor, selling low-cost, on-premise network security appliances from firewalls to antispam devices. When I spoke to the Barracuda folks a few months back, they remained skeptical about the whole cloud ...Wednesday, 14 October 2009 -
One again - Patchanga!
Category: Network Security & Hacking News/Latest Security News
... that are most cost and time effective in terms of mitigating security related flaws in applications. In particular, I believe that investing resources in a web application firewall is much more effective ...Wednesday, 14 October 2009 -
ZBot variant masked as settings file for MS Outlook
Category: Network Security & Hacking News/Latest Security News
... Mal/Zbot-R (Sophos) or PWS:Win32/Zbot.gen!R (Microsoft). The file itself is about 92 kB big and has the name settings-file.exe. Regarding ZBot: it is a trojan that disables firewall, steals sensitive ...Wednesday, 14 October 2009
