d

2600: The Hacker Quarterly

• SPECIAL EDITION OF "OFF THE WALL" TUESDAY
• Off the Hook show for March 21, 2007
• Off the Wall show for March 20, 2007
• POSTAL UPDATE: OVERSEAS ISSUES ARE STARTING TO APPEAR
• "URCHIN" PREMIERE SET FOR FEBRUARY 17
• POST OFFICE LOSES OUR LATEST ISSUE
• 'OFF THE HOOK' RAISES OVER $11,000 IN A SINGLE HOUR
• HOTEL PENN THREATENED WITH DEMOLITION - HOPE CONFERENCES IN JEOPARDY
• WINTER ISSUE OF 2600 RELEASED
• NEW "PRIVACY IS DEAD" DVDS AVAILABLE

A Day in the Life of an Information Security Investigator

• Premium Podcast: Winning The War On Image Spam
• Raiding Your Cupboards
• Give Me Back My Confidential Data!
• Didier Rocks: 0wned by a QT Movie Update
• How To 0wn An Apartment Complex
• SecurityMonkey Podcast #17
• Begging Bigger Budgets
• On The Scene: Professional Monkey Manners Matter
• Monkey Misc.
• What's In Your Banana Cupboard?

Black Hat Announcements

• Black Hat Europe 2007 online registration closing Soon!
• Black Hat USA 2007 Training Classes now open!
• Black Hat Europe 2007 Hotel rate extended.
• Online registration for Black Hat DC 2007 has closed
• Black Hat USA 2007 Call for Papers is now open!
• Black Hat Europe 2007 Speakers Now Selected!
• Hacking Exposed VoIP
• New Black Hat Europe 2007 Training classes
• Black Hat Europe 2007 Briefings and Training Update
• Black Hat Europe 2007 CFP Closing Soon!

Black Hat Briefings, Las Vegas 2005 [Video] Presentations from the security conference

• Blackhat Vegas 2005: Gilman Louie,Investing in Our Nation's Security
• Blackhat Vegas 2005: Akshay Aggarwal,Rapid Threat Modeling
• Blackhat Vegas 2005: Panel, The Future of Personal Information
• Blackhat Vegas 2005: Ofir Arkin, A New Hybrid Approach for Infrastructure Discovery, Monitoring and Control
• Blackhat Vegas 2005: Darrin Barrall and David Dewey, Plug and Root, the USB Key to the Kingdom
• Blackhat Vegas 2005: Darrin Barrall,Shakespearean Shellcode
• Blackhat Vegas 2005: Bruce Potter and Beetle, Rogue Squadron: Evil Twins, 802.11intel, Radical RADIUS, and Wireless Weaponry for Windows
• Blackhat Vegas 2005: Renaud Bidou, A Dirty BlackMail DoS Story
• Blackhat Vegas 2005: Adam Boileau,Trust Transience: Post Intrusion SSH Hijacking
• Blackhat Vegas 2005: Kevin Cardwell,Toolkits: All-in-One Approach to Security

Bleeding Edge Threats

• Guzi Trojan Rules
• Another Allaple Rule
• SnortSam Documentation Moved to the Wiki
• Asterisk DOS Rule Added
• Bleeding Edge Documentation Wiki out of Beta
• Unknown P2P Traffic
• Bleeding Edge Documentation Wiki Beta Online!
• New Ares P2P Protocol Sig
• Trend Micro Auth Bypass Signature
• BASE 1.3.5 Released

CGISecurity.com: Your Web Site and Application Security Resource

• 3/25/2007 The bug disclosure debate continues
• 3/24/2007 JavaScript bug hunting tool demonstrated, and ethical release of POC code
• 3/23/2007 There is no Data, there is only XUL: Using XUL to spoof a web browser and next generation UIML phishing attacks
• 3/17/2007 Javascript is everywhere
• 3/15/2007 Big trouble if PCI-DSS requires CSRF
• 3/12/2007 Compliance As Kick-Starter
• 3/12/2007 Security Development Lifecycle (SDL) Banned Function Calls

Darknet - The Darkside

• Hackers Attack Root Servers and Slow Internet Key Traffic
• ObiWaN - Web Server Brute Forcing from Phenoelit
• Check Point VPN-1 Power VSX NGX - Virtual Firewalls Get Clustered
• Backup Platinum - CD, FTP & LAN Backup Software Review
• Technika - Automate Common Exploit Tasks
• Up to a Quarter of Internet Connected Machines Could be Zombies
• ADN - Win32 Active Directory Navigator
• MSN Password Stealing Trojan Becomes Public
• Stompy - The Web Application Session Analyzer Tool
• Huge Online Loss by Swedish Bank Nordea - Claimed to be Biggest Loss?

Debian Security

• DSA-1272 tcpdump
• DSA-1271 openafs
• DSA-1270 openoffice.org
• DSA-1269 lookup-el
• DSA-1268 libwpd
• DSA-1266 gnupg
• DSA-1265 mozilla
• DSA-1264 php4
• DSA-1263 clamav
• DSA-1262 gnomemeeting

disLEXia 3000 blog

• Going Crazy with Datamatrix
• httpprint signatures
• Current best Practice Passwords and Entropy
• I love these days
• Teaching Programming
• Fingerprinting DNS clients: Source Ports
• Fun with DNS: The top 75 global companies?

Dutch Security Information Network

• The Sleuth Kit (TSK) for Windows released
• Web Application security
• Conceivable/Deceivable
• Internet Drivers License
• Telephony Firewalls
• Security Absurdity
• Announcement: The Web Hacking Incidents Database
• Antiphishing.org Trend Report
• The Nyxem Email Virus: Analysis and Inferences
• Microsoft releases patch for WMF-vulnerability

An error was detected

• The XML page cannot be displayed. Cannot view XML input using XSL style sheet. Please correct the error or try again later.

The Ethical Hacker Network RSS News Feed

• Smashing The Modern Stack For Fun And Profit
• TEMPEST, Conspiracy Theories and Tinfoil Dreams
• Charlotte's Web Site
• March 2007 Free Giveaway Sponsor - Port80 Software
• Video: Alternate Data Streams (ADS): Hiding In Plain Site
• So You Want To Hack For A Living?
• Programming Survival Skills
• How Do Hackers Break Into Computers?
• Jabber Takes a Swing at RichM
• Tutorial: MS Terminal Server Cracking

GNUCITIZEN

• Still Here
• ZombieMap
• Adobe Apollo Alpha1
• Sex, Candies and Bookmarklet Exploits
• VBScript to Rule IE
• Load AttackAPI Bookmarklet
• Firetest
• OWASP
• How I almost GOT Hacked
• PDF and History Hacks

An error was detected

• The XML page cannot be displayed. Cannot view XML input using XSL style sheet. Please correct the error or try again later.

ha.ckers.org web application security lab

• IE Sends Local Addresses in Referer Header
• JavaScript Spam
• Fierce 0.9.9 Multi-threading
• Fizzle Firefox Extension Vulnerability
• Internet Archiver Port Scanner
• Good Writeup On the GOZI Trojan
• Month of MySpace Bugs
• Jikto For Good or Jikto For Evil
• Tracking Back The Trackback Spam
• NoScript Plugin Beta Attempts To Stop XSS

Hackermedia Complete

• T.W.A.T. Radio - Episode 221: Binrev Remix #1 - Hackermedia
• Linux Action Show - The Linux Action Show! - Episode 40 - MP3
• Run Your Own Server - RYOS, Episode 11 - L.A.M.P.
• Run Your Own Server - RYOS, Episode 12 - Databases
• Run Your Own Server - RYOS, Episode 13 - DNS
• Run Your Own Server - RYOS, Episode 14 - Jobs
• Run Your Own Server - RYOS, Episode 15 - Monitoring
• SecThis - Podcast Special #1 - Shmoocon
• Hak.5 - Hak.5 Episode #6
• Hak.5 - Microshaft Mini

Hack In The Box

• Apple TV hacked to play XviD
• Windows Vista Caused Mac OS X Leopard Delay
• Exploit-for-sale hacker pins bug on Vista's e-mail app
• Security of Singaporean biometric passports in question
• Users skeptical as Microsoft denies claims of Xbox Live hacks
• Software detects lies in email and SMS
• Protect your children from online predators
• Security vendors must work together pleads expert
• Hole Found in Protocol Handling Vital National Infrastructure
• Hackers access DFSA myPay accounts

WEB Search

Help Net Security - Advisories

• Mandriva Linux Security Update Advisory - inkscape vulnerability (MDKSA-2007:069)
• Debian Security Advisory - tcpdump vulnerability (DSA 1272-1 )
• Mandriva Linux Security Update Advisory - squid (MDKSA-2007:068)
• Mandriva Linux Security Update Advisory - file (MDKSA-2007:067)
• Ubuntu Security Notice - file vulnerability (USN-439-1)
• Ubuntu Security Notice - mysql-dfsg-5.0 vulnerability (USN-440-1)
• Gentoo Linux Security Advisory - Mozilla Network Security Service: Remote execution of arbitrary code (GLSA 200703-22)
• SUSE Security Announcement - OpenOffice_org,libwpd (SUSE-SA:2007:023)
• Gentoo Linux Security Advisory - WordPress: Multiple vulnerabilities (GLSA 200703-23)
• Turbolinux Security Announcement - kdelibs, php (21/Mar/2007)

Help Net Security - Articles

• Web Application Security with Jeremiah Grossman
• HNS Podcast: Common Mistakes Made By IT Administrators
• Biometrics: What and How
• RSS Security Threats With Financial Services
• Practical Tips for Safer Computing
• Modifications for Stopping phpBB Forum Spambots
• Top 10 WordPress Anti Spam Plugins
• Richard Rushing, AirDefense CSO, on Wireless Security
• HNS Podcast: Data Auditing
• Interview with Kurt Sauer, CSO of Skype

Help Net Security - Linux Software

• TCPDUMP 3.9.5
• Dazuko 2.3.3
• ArpAlert 2.0.5
• yaSSL 1.6.0
• Prelude Manager 0.9.7.2
• KisKis 0.21.1
• IPCop 1.4.14
• Firewall Builder 2.1.10
• Dropbear SSH Server 0.49
• Sussen 0.35

An error was detected

• The XML page cannot be displayed. Cannot view XML input using XSL style sheet. Please correct the error or try again later.

Help Net Security - Security World

• Easy way to software developers to create secure update patches for their products
• Outpost Security Suite Pro public beta-release
• CrossTec to release an audit logging solution
• FamilyPak Edition of CyberDefender home computer security suite
• Novell Delivers Next-Generation Security Information solution
• Intrusion prevention and detection patent granted to Vanguard
• SenSage support of Symantec Messaging Security
• Significant enterprise concern over increasing data leakage from endpoints
• Network security is top of mind for executives
• Internet security product bundled with USRobotics modems

Help Net Security - Reviews

• GFI EndPointSecurity 3
• Advanced Host Intrusion Prevention with CSA
• Acunetix Web Vulnerability Scanner 4.0
• How Personal & Internet Security Works
• Trustware BufferZone 1.6
• GFI LANguard Network Security Scanner 6
• The Art of Computer Virus Research and Defense
• The CISM Prep Guide: Mastering the Five Domains of Information Security Management
• Trend Micro InterScan Web Security Suite (IWSS)
• Privacy: What Developers and IT Professionals Should Know

Help Net Security - Windows Software

• SSL-Explorer 0.2.11.01
• SpamWeasel Pro 1.0.44
• HijackThis 2.0 beta
• Netstat Agent 1.7
• SpywareBlaster 3.5.1
• Anti-keylogger 7.4
• WebGoat 5.0
• ZOC 5.08
• TightVNC 1.3.8
• Security Administrator 11.1

Honeypots (honeypots) Mailing List

• Call For Papers - DFRWS 2007 - Reminder
• SyScan07 - Call for Paper - NEW UPDATES
• Re: MODERATOR: Updated Posting Requirement
• Re: MODERATOR: Updated Posting Requirement
• SpyBye 0.2 released
• MODERATOR: Updated Posting Requirement
• honeypot not respon with nmap
• Malware Capture - TAIPS-net
• SyScan07 - CFP
• Know Your Enemy: Web Application Threats

Info Security News (isn) Mailing List

• Windows weakness can lead to network traffic hijacks
• DOD investigates hacking of troops personal computers
• Espionage trial may be window on Chinese intel
• Ten dangerous claims about smart phone security
• US company offers Wi-Fi-proof paint
• Linux Advisory Watch - March 23rd 2007
• Hackers on a plane
• Police hold 7 for hacking networks
• India, Mauritius to beef up info security
• Oracle sues SAP on spying charges

(IN)SECURE Magazine Notifications RSS

• (IN)SECURE Magazine Issue 10
• (IN)SECURE Magazine Issue 9
• (IN)SECURE Magazine Issue 8
• (IN)SECURE Magazine Issue 7
• (IN)SECURE Magazine Issue 6
• (IN)SECURE Magazine Issue 5
• (IN)SECURE Magazine Issue 4
• (IN)SECURE Magazine Issue 3
• (IN)SECURE Magazine Issue 2
• (IN)SECURE Magazine Issue 1

An error was detected

• The XML page cannot be displayed. Cannot view XML input using XSL style sheet. Please correct the error or try again later.

Latest Virus Descriptions

• Trojan.JS.Wincrash.d
• Trojan-Spy.Win32.Banker.cmp
• Trojan-Proxy.Win32.Xorpix.ar
• Trojan-PSW.Win32.LdPinch.bik
• VirTool.MSWord.ZSZPE
• Trojan.Win32.Pandora.l
• Trojan-Spy.Win32.Dks.131.a
• Trojan-Proxy.Win32.Xorpix.v
• Trojan-Spy.Win32.KeyLogger.p
• Trojan-Spy.Win32.KeyLogger.h

Linux Exposed

• Google Tricks and hacks *UPDATED*
• Internet Privacy and you
• Memory management :: inside the kernel
• Database Security Explained
• Samba to the Resque
• Forget your password? Be google!
• The Apache HTTP Server
• Case of a wireless hack
• Mail Bombing : Theoretical Denial of Service Attack
• Introduction to Python.

Operation n

• Inter-Protocol Communication
• RSnake opens company
• modsecurity hack
• Al-Qaeda Plotting to Bring Down the Internet in the UK
• Web Spider with Microsoft Visio
• SQL Injection: Sleeping Giant
• DNS-IP Tunneling
• WordPress is Backdoored
• Phishing with Text Messaging
• Trusted Browser Security Model

Microsoft Security Bulletins

• MS07-016: Cumulative Security Update for Internet Explorer (928090)
• MS07-015: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554)
• MS07-014: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (929434)
• MS07-013: Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution (918118)
• MS07-012: Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667)
• MS07-011: Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436)
• MS07-010: Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution (932135)
• MS07-009: Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (927779)
• MS07-008: Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)
• MS07-007: Vulnerability in Windows Image Acquisition Service Could Allow Elevation of Privilege (927802)

milw0rm.com

• FreeBSD mcweject 0.9 (eject) Local Root Buffer Overflow Exploit
• MS Internet Explorer Recordset Double Free Memory Exploit (MS07-009)
• PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit
• Frontbase <= 4.2.7 Remote Buffer Overflow Exploit (windows)
• PBlang 4.66z Remote Code Execution Exploit
• PHP <= 4.4.4 / 5.2.1 / 5.1.6 readfile() Safe Mode Bypass Vulnerability
• PHP < 4.4.5 / 5.2.1 _SESSION Deserialization Overwrite Exploit
• PHP < 4.4.5 / 5.2.1 _SESSION unset() Local Exploit
• WarFTP 1.65 (USER) Remote Buffer Overlow Exploit (multiple targets)
• PBlang <= 4.66z Remote Create Admin Exploit

MSDN: Security

• Cutting Edge: Validating ASP.NET Query Strings
• ASP.NET 2.0: Manage Web Users With Custom Profile Providers
• .NET Security: Support Certificates In Your Applications With The .NET Framework 2.0
• Security Briefs: Using Protocol Transition—Tips from the Trenches
• Desktop Security: Create Custom Login Experiences With Credential Providers For Windows Vista
• Least Privilege: Teach Your Apps To Play Nicely With Windows Vista User Account Control
• Security Briefs: Limited User Problems and Split Knowledge
• SQL Security: New SQL Truncation Attacks And How To Avoid Them
• Extending SDL: Documenting And Evaluating The Security Guarantees Of Your Apps
• Smart Storage: Protect Your Data Via Managed Code And The Windows Vista Smart Card APIs

Nessus.org Plugins

• Helix Server LoadTestPassword field Overflow Vulnerability
• Firefox < 1.5.0.11 / 2.0.0.3
• Moodle moodledata Information Disclosure Vulnerability
• Squid < 2.6.STABLE12
• Takebishi Electric DeviceXPlorer OPC Server Multiple Vulnerabilities
• Insecure Logical Drive FileSystem
• Squid < 2.6.STABLE7
• [GLSA-200703-20] LSAT: Insecure temporary file creation
• [GLSA-200703-19] LTSP: Authentication bypass in included LibVNCServer code
• [GLSA-200703-18] Mozilla Thunderbird: Multiple vulnerabilities

OSVDB Most Recent Stable Entries

• PHPRunner PHPRunner.ini Database Credential Local Cleartext Disclosure - Mon, 13 Nov 2006 07:04:05 EST
• Mac OS X crashdump Local Privilege Escalation - Sun, 28 Jan 2007 04:12:15 EST
• madwifi Multiple Unspecified Issues - Mon, 19 Mar 2007 23:25:08 EDT
• EasyMail Objects IMAP4 Component Connect Method Remote Overflow - Thu, 15 Feb 2007 05:49:35 EST
• TYPOlight webCMS Unspecified Major Security Issue - Mon, 19 Mar 2007 08:18:58 EDT
• osCommerce admin/products_attributes.php Multiple Variable XSS - Tue, 21 Nov 2006 18:18:58 EST
• Mac OS X Software Update .swutmp Filename Format String - Wed, 24 Jan 2007 04:10:38 EST
• WGS-PPC (PPC Search Engine) paypalipn/ipnprocess.php INC Variable Remote File Inclusion - Fri, 23 Feb 2007 01:13:34 EST
• WGS-PPC (PPC Search Engine) main/ppcbannerclick.php INC Variable Remote File Inclusion - Fri, 23 Feb 2007 01:13:34 EST
• WGS-PPC (PPC Search Engine) members/registration.php INC Variable Remote File Inclusion - Fri, 23 Feb 2007 01:13:34 EST

Packet Storm Security Last 20

• 03.23.07-2.txt
• 03.23.07-1.txt
• Fuzzled-1.0.tar.gz
• dproxy.pm.txt
• AKLINK-SA-2007-001.txt
• phpftp.txt
• vista-pwn.txt
• dsa-1272-1.txt
• cpg-rfi.txt
• NB07-17.txt

Passivemode

• WindowsVista Mail Client Side Code Execution Vulnerability
• Real-ID: Costs And Benefits
• Thieves' New Tool: Caller ID? WTF?
• Kevin Mitnick & The Well
• VMWare for Mac Beta 2
• Analysis of the Gozi Trojan
• Xbox Live Fraud
• Hackers Selling IDs for $14, Symantec Says
• Review of the FBI use of National Security Letters
• Int’l Hacking Ring Busted in Metro

An error was detected

• The XML page cannot be displayed. Cannot view XML input using XSL style sheet. Please correct the error or try again later.

www.rootkit.com

• Int 2Ah - KiGetTickCount
• Vbootkit: Compromising Windows Vista Security
• Int 2Dh debugger detection and code obfuscation
• New version of Helios rootkit detector
• zdot's blog: help
• venona's blog: malware srcs and saturday thinking...
• hoglund's blog: Firefly
• Audez's blog: help
• Audez's blog: in the beginning
• bugcheck's blog: Im still alive...

SANS Information Security Reading Room

• SANS 2007 Annual Conference - March 29 - April 6
• CyberLaw 101: A primer on US laws related to honeypot deployments
• Secure use of LDAP for Naming Services with Solaris
• Using Oracle Forensics to determine vulnerability to Zero Day exploits
• Server Security in a Citrix Presentation/Terminal Server Environment
• Sudo for Windows (sudowin)
• Phishing and Pharming - The Evil Twins
• VPNScan: Extending the Audit and Compliance Perimeter
• Pros and Cons of using Linux and Windows Live CDs in Incident Handling and Forensics
• Security Issues and Countermeasure for VoIP

SANS Internet Storm Center, InfoCON: green

• Infocon: green
• SANS Software Security Institute, (Mon, Mar 26th)
• The first day in the life of a website, (Mon, Mar 26th)
• A Possible Data Breach at Romanian Finance Ministry? Maybe Not., (Sat, Mar 24th)
• Vista's Windows Mail - program execution - CVE-2007-1658 , (Sat, Mar 24th)
• Domain Appraisal Scam Targets Domain Name Owners, (Sat, Mar 24th)
• The missing Microsoft patches, (Fri, Jan 5th)
• Tracking Publicly-Announced Data Breaches, (Sat, Mar 24th)
• Gozi Trojan Steals SSL Encrypted Data for Fun and Profit, (Fri, Mar 23rd)
• The rise of the botnets, (Fri, Mar 23rd)

An error was detected

• The XML page cannot be displayed. Cannot view XML input using XSL style sheet. Please correct the error or try again later.

SecGuru -

• Hackers control bug disclosure
• DOD investigates hacking of troops personal computers
• Preparing for Security Event Management
• Web server botnets and server farms as attack platforms
• Penetration Testing with SILICA
• How to Write a Rootkit
• When Perl is not Quite Fast Enough
• Stration variant spreading through Skype
• 80 per cent of corporate fraud involves employees
• Tools Fight Forensics

Securityvulns news channel

• Microsoft Data Access Components code execution, updated since 13.02.2007
• GlowWorm FW DoS
• NetSievben SSH library SFTP DoS
• TinyMUX DoS
• X.Org libx11 library buffer overflow
• Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
• Real Networks Helix RTSP Server buffer overflow
• PHP variables unset use after free vulnerability
• PHP unserialize() function information leak
• pcapsipdump SIP packets DoS

SecurityFocus News

• News: Oracle sues rival for hacking, data theft
• News: Account pretexters plague Xbox Live
• News: Anti-spyware bill could mean tougher fines
• News: Tor hack proposed to catch criminals
• Brief: Microsoft confirms Xbox Live pretexting issues
• Brief: Hacking contest takes aim at Apple
• Brief: Microsoft: Xbox Live 'issues' not our fault
• Brief: Bots surge ahead in March
• News: China becomes bot-net epicenter
• News: Phisher 'Vladuz' dodges eBay's defenses

SecurityFocus Vulnerabilities

• Vuln: LibWPD Library Multiple Buffer Overflow Vulnerabilities
• Vuln: Linux Kernel IPv6 TCP Sockets Local Denial of Service Vulnerability
• Vuln: Apple Mac OS X Multiple Applications Multiple Vulnerabilities
• Vuln: WFTPD Server APPE Command Buffer Overflow Vulnerability
• Bugtraq: Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion
• Bugtraq: Libero.it (italian ISP) XSS vulnerability
• Bugtraq: Multiple XSS in IronMail
• Bugtraq: Playstation 3 "Remote Play" Remote DoS Exploit
• More rss feeds from SecurityFocus

Security-Protocols

• Fuzzled - Perl fuzzing framework released
• Links for 2007-03-22 [Digg]
• PS3 Folding@Home already showing results
• AuctionAds is down!
• A nice day in Silicon Valley
• PS3 versus disease
• Links for 2007-03-08 [Digg]
• Links for 2007-03-08 [Digg]
• AuctionAds eBay! Advertising Widget Launches Today!
• Links for 2007-03-04 [Digg]

TREND MICRO VirusAlert

• Newest Pattern: 4.367.00
• BKDR_HUPIGON.EAE
• WORM_AUTOIT.AF
• POSSIBLE_BGLZP
• WORM_STRATION.EP
• TROJ_VUNDO.XN
• TROJ_YABE.BX
• BKDR_AGENT.ORX
• TROJ_VUNDO.XM
• BKDR_PCCLIENT.XC

US-CERT Cyber Security Tips

• ST04-005: Understanding Anti-Virus Software
• ST04-004: Understanding Firewalls
• ST04-003: Good Security Habits
• ST04-002: Choosing and Protecting Passwords
• ST04-001: Why is Cyber Security a Problem?
• ST06-009: Coordinating Virus and Spyware Defense
• ST06-008: Safeguarding Your Data
• ST06-007: Defending Cell Phones and PDAs Against Attack
• ST06-006: Understanding Hidden Threats: Corrupted Software Files
• ST06-005: Dealing with Cyberbullies

US-CERT Technical Cyber Security Alerts

• TA07-072A: Apple Updates for Multiple Vulnerabilities
• TA07-065A: Apple Releases Security Updates for QuickTime
• TA07-059A: Sun Solaris Telnet Worm
• TA07-050A: Sourcefire Snort DCE/RPC Preprocessor Buffer Overflow
• TA07-047A: Apple Updates for Multiple Vulnerabilities
• TA07-044A: Microsoft Updates for Multiple Vulnerabilities
• TA07-024A: Cisco IOS is Affected by Multiple Vulnerabilities
• TA07-022A: Sun Updates for Multiple Vulnerabilities in Java
• TA07-017A: Oracle Releases Patches for Multiple Vulnerabilities
• TA07-009B: MIT Kerberos Vulnerabilities

Vulnerability Development (vuln-dev) Mailing List

• MS07-012 Not Fixed
• ARCserve msgeng.exe buffer overflow exploit (win2k SP4)
• TOOL: LLTD implementation in Perl
• newline injection in multipartform-data
• A common bug in comment preview that leads to an XSS attack
• buffer overflow - basic help needed (aleph1)
• Call for Papers: DeepSec IDSC 2007 EuropeVienna: 20-23 Nov 2007
• Re: vd_proftpd.pm Metasploit module for ProFTPD stack overflow
• SyScan07 - Call for Paper - NEW UPDATES
• MS07-016 FTP Response DOS PoC

VulnWatch (vulnwatch) Mailing List

• cftp 0.12 (readrc) Local buffer overflow vulnerability
• dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability
• Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability
• iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities
• LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow
• QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow
• iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability
• iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability
• CORE-2007-0219: OpenBSDs IPv6 mbufs remote kernel buffer overflow
• Unrarlib 0.4.0 (urarlib_get) Local buffer overflow

WindowSecurity.com

• Profiling an Operating System (Part 1)
• Controlling Block (GPO) Inheritance via Delegation
• Is your website hackable? Why you need to worry
• Product Review: GFI EndPointSecurity
• Reverse Engineering Malware (Part 4)
• Best practice security guide to built-in device control in Windows (Part 1)
• The True Nature of Web Application Security: The Role and Function of Black Box Scanners
• Reverse Engineering Malware (Part 3)

hacker - Everyone's Tagged Photos

aussierupe posted a photo:

Alton Brown, eat your heart out!