Frontier Security Channel

1347 news (1347 unread) in 13 channels

• SecurityFocus Vulnerabilities (400 unread)
• MSDN: Security (10 unread)
• The Register - Security: Anti-Virus (75 unread)
• A Day in the Life of an Information Security Investigator (40 unread)
• Network Computing Security RSS Feed (34 unread)
• LinuxSecurity.com - Latest News (163 unread)
• IBM alphaWorks Emerging Technologies : : Privacy and security
• Help Net Security - Security World (320 unread)
• SecurityFocus News (150 unread)
• Network World on Firewalls (28 unread)
• News@Cisco: Latest Security News (24 unread)
• Cisco Security Advisories (63 unread)
• Cisco Security Notices (40 unread)

Help Net Security - Security World

• 

  Top internal network threats in 2008 so far

  Posted: July 25th, 2008, 5:20am CST

  Promisec announced its findings from security audits of more than 100,000 corporate endpoints. These audits were conducted in the first six months of 2008 in enterprises of different sizes and reveal...
• 

  IPsec security toolkit optimized for new Intel EP80579 integrated processors

  Posted: July 25th, 2008, 5:17am CST

  SafeNet announced that the companyÂ’s industry-proven IPsec security toolkit, QuickSec/IPsec, has been optimized specifically for the new Intel EP80579 Integrated Processor product line. The Intel...

SecurityFocus Vulnerabilities

• 

  Bugtraq: [SECURITY] [DSA 1616-1] new clamav packages fix denial of service

  Fetched: July 25th, 2008, 1:08am CST

  [SECURITY] [DSA 1616-1] new clamav packages fix denial of service
• 

  Bugtraq: CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit

  Fetched: July 25th, 2008, 1:08am CST

  CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
• 

  Bugtraq: [ MDVSA-2008:154 ] - Updated xemacs packages fix vulnerability

  Fetched: July 25th, 2008, 1:08am CST

  [ MDVSA-2008:154 ] - Updated xemacs packages fix vulnerability
• 

  Bugtraq: [Full-disclosure] [tool] SDT Cleaner 1.0

  Fetched: July 25th, 2008, 1:08am CST

  [Full-disclosure] [tool] SDT Cleaner 1.0

LinuxSecurity.com - Latest News

• 

  Network Security Toolkit Distribution Aids Network Security Administrators

  Posted: July 24th, 2008, 5:49pm CST

  LinuxSecurity.com: Network Security Toolkit is one of many live CD Linux distributions focusing on network monitoring, analysis, and security. NST was designed to give network security administrators easy access to a comprehensive set of open source network applications, many of which are among the top 100 security tools recommended by insecure.org. NST's latest version, 1.8.0, was released last month. You can download NST as a live CD ISO or as a VMware virtual machine from the author's site. Have you ever used a Live CD which is designed to be used for network monitoring? If so, do you have any favorites? This article likes at one Live CD distro called "Network Security Toolkit".

Help Net Security - Security World

• 

  Business websites attacked, office workers at risk, Web 2.0 threats

  Posted: July 24th, 2008, 12:59am CST

  Thousand of webpages belonging to Fortune 500 companies, government agencies and schools have been infected, putting visiting surfers at risk of infection and identity theft. High profile entertainmen...
• 

  Vulnerabilities in Anti-Virus Software - reaction to the McAfee Statement

  Posted: July 24th, 2008, 12:51am CST

  During the past few months, specialists from the n.runs AG, along with other security experts, have discovered approximately 800 vulnerabilities in anti-virus products. The conclusion: contrary to the...

SecurityFocus Vulnerabilities

• 

  Vuln: Drupal Multiple Remote Vulnerabilities

  Posted: July 24th, 2008, 12:00am CST

  Drupal Multiple Remote Vulnerabilities
• 

  Vuln: Perl Unicode '\Q...\E' Quoting Construct Regular Expression Buffer Overflow Vulnerability

  Posted: July 24th, 2008, 12:00am CST

  Perl Unicode '\Q...\E' Quoting Construct Regular Expression Buffer Overflow Vulnerability
• 

  Vuln: Perl Unicode Regular Expression Buffer Overflow Vulnerability

  Posted: July 24th, 2008, 12:00am CST

  Perl Unicode Regular Expression Buffer Overflow Vulnerability
• 

  Vuln: Perl Perl_sv_vcatpvfn Format String Integer Wrap Vulnerability

  Posted: July 24th, 2008, 12:00am CST

  Perl Perl_sv_vcatpvfn Format String Integer Wrap Vulnerability

LinuxSecurity.com - Latest News

• 

  HOWTO: Encrypt The System Manually Upon Installation

  Posted: July 23rd, 2008, 8:18pm CST

  LinuxSecurity.com: Another howto by me concerning encryption. However this one will be pretty intense on graphics. I have a step-by-step guide on how to do a manual full encryption of the system. Due to a bug current in the ubuntu installation, you cannot encrypt the swap partition directly during the manual install. The install will just hang. Here's a link to the bug report: https://bugs.launchpad.net/ubuntu/+bug/231451 This article is a step by step guide to do a full encryption of a Linux system. The author provides snapshots in showing you how to do this.

Help Net Security - Security World

• 

  TDM to IP converter with built-in ethernet switch

  Posted: July 23rd, 2008, 12:35pm CST

  Engage Communication released the latest version of T1/E1 to Ethernet/IP interface products. The Engage UNO is 1/3 the size of traditional standalone IP interface products and designed in an enclosure...
• 

  New SSL deployment technologies

  Posted: July 23rd, 2008, 7:19am CST

  GlobalSign announced "AutoCSR" and "One-Click SSL" two new SSL deployment technologies that will revolutionize the way hosting companies provision SSL Certificates to hosting customers. The new techno...
• 

  The Planet offers free backup, discounted data protection and firewalls

  Posted: July 23rd, 2008, 5:12am CST

  The Planet announced three new promotions that offer enhanced data protection and security for Planet Alpha dedicated server customers. For a limited time, new orders of Network Backup and EVault Back...
• 

  First wireless intrusion prevention software provider to support IPv6

  Posted: July 23rd, 2008, 5:11am CST

  AirDefense is the first wireless intrusion prevention system (WIPS) provider to add support for Internet Protocol Version 6 (IPv6). Over the next decade, IPv6 will replace IPv4, which has been in use ...
• 

  New bank card security system to support EMV2000 specifications

  Posted: July 23rd, 2008, 5:11am CST

  Prime Factors' new Bank Card Security System (BCSS) version 3.0 now supports the latest EMV2000 specifications for smart cards. The name EMV comes from the initial letters of Europay, MasterCard and V...
• 

  Open Source Database Survey: strong PostgreSQL adoption in enterprises

  Posted: July 23rd, 2008, 3:32am CST

  EnterpriseDB announced the results of the company's 2008 Open Source Database Survey, which collected the opinions of 500 corporate IT leaders on topics related to enterprise adoption of open source d...

SecurityFocus News

• 

  News: E-Gold pleads guilty to money laundering

  Posted: July 23rd, 2008, 12:00am CST

  E-Gold pleads guilty to money laundering

LinuxSecurity.com - Latest News

• 

  Security is No Secret

  Posted: July 22nd, 2008, 9:18pm CST

  LinuxSecurity.com: NSA takes its Flask architecture to the open-source community to offer an inexpensive route to trusted systems.Architecture created by the National Security Agency and expanded with help from the open-source community will save the Defense Department and intelligence agencies millions in hardware costs. With Flask, "we can guarantee that high-integrity data can't be corrupted by untrustworthy entities or that sensitive data doesn't leak to untrustworthy entities," said Stephen Smalley, one of the chief developers of Flask at NSA. The best part is that the technology requires no specialized hardware or operating system. What do you think about the Flask architecture? This article looks at this security architecture and how SELinux came about from it and it's impact on open source security.
• 

  Security Guide for VMware ESX: Helpful But Has Holes

  Posted: July 22nd, 2008, 5:00pm CST

  LinuxSecurity.com: With security becoming ever more important, I've been reviewing the various guides available to harden the VMware Virtual Infrastructure. So far the results have been disappointing, though I've looked at the CISecurity VMware ESX Benchmark and the VMware VI3 Hardening Guidelines. Now for the US Government's Defense Information Systems Agency's Security Technical Implementation Guide (STIG)-a long-awaited document that all levels of the U.S. government will follow to harden and protect their VMware VI3 installations. At first look at VM security you might think it's just like securing any hardware install OS. However, VM security come with it's own set of challenges. This likes at the security issues with hardening VMware ESX.

Network World on Firewalls

• 

  IPNetSentryX 1.6.5

  Posted: July 22nd, 2008, 8:00am CST

  OS X includes a basic firewall that helps to protect your Mac from a variety of outside intruders, such as hackers trying to run spam-spewing robots. In Leopard, though, the firewall-which is disabled by default-offers very little in the way of customization. At most you can specify programs and services (such as file sharing and screen sharing) to which outside connections are explicitly permitted or blocked. IPNetSentryX stands at the opposite end of the firewall software spectrum. The program from Sustainable Softworks has every bell and whistle that even the geekiest Mac user could hope for-and a complex user interface to match.

A Day in the Life of an Information Security Investigator

• 

  Unemployed? Employed But Looking?

  Posted: July 22nd, 2008, 3:29am CST

  Out of curiosity - how many of you would be interested in seeing real security / investigator job postings appear here with my breakdown and commentary?

  As of today, nearly 25% of the E-mail I receive is job related... so I'm noticing a trend!

  If you're interested in seeing what types of jobs are being posted out there and what the monkey's take is on the position, post a comment below.

  NOTE: This is for discussion purposes between myself and my readers. No headhunters

LinuxSecurity.com - Latest News

• 

  Gibraltar Firewall 2.6 Launched

  Posted: July 22nd, 2008, 12:55am CST

  LinuxSecurity.com: Gibraltar Firewall 2.6, a Linux firewall distribution based on Debian, was launched yesterday as announced by Rene Mayrhofer. This will be the last release that will use the Linux kernel 2.4, as the next Gibraltar editions will use the 2.6 kernel. Among other things, this edition of Gibraltar offers improved traffic shaping performance (the iptables marking rules were re-ordered and the pre-defined traffic classes were improved), and allows SSL Explorer plugins to be installed. Have you ever used the Gibraltar Firewall? Gibraltar provides the user with a web interface for setting up their firewall. Now it's available for the Linux 2.6 kernel. Also in this release they added full WLAN access point functionality.

SecurityFocus News

• 

  Brief: Kerfuffle erupts as DNS flaw described

  Posted: July 22nd, 2008, 12:00am CST

  Kerfuffle erupts as DNS flaw described

A Day in the Life of an Information Security Investigator

• 

  Banana Cupboard Story: When Worms Attack!!

  Posted: July 21st, 2008, 11:37pm CST

  Happy Monday everyone. Sorry about taking last week off. I'll try to make up for it this week. :-)

  Reader AW shared a killer Banana Cupboard story with me. This is a must read - and I'm sure some of you will be able to relate to AW's anguish in this story.

  I work for a small software house which produces client-server and web applications. We're quite keen on doing absolutely everything ourse

LinuxSecurity.com - Latest News

• 

  Critical Security Issues Found in the Spring Framework

  Posted: July 21st, 2008, 4:55pm CST

  LinuxSecurity.com: A recent security assessment of an application by Ounce Labs has resulted in the discovery of two vulnerabilities that can affect Java Web applications that use the Spring Framework. Spring has been downloaded more than 5 million times to date, which means the security vulnerabilities identified could affect countless companies that use this framework."One of the problems is there's no default checking to make sure the users are only submitting fields that are visible in the form," Berg said. "That means someone can submit additional data in a request and put it into the Java bean." "The vulnerabilities are not flaws [in the framework]. The issue is developers not understanding the complexity of the framework they're using." Ryan Berg Chief scientist, co-founder, Ounce Labs. So is this a security flaw in the framework or how developers are using it?

SecurityFocus Vulnerabilities

• 

  Bugtraq: Oracle Database Local Untrusted Library Path Vulnerability

  Fetched: July 21st, 2008, 10:18am CST

  Oracle Database Local Untrusted Library Path Vulnerability
• 

  Bugtraq: rPSA-2008-0231-1 bind bind-utils

  Fetched: July 21st, 2008, 10:18am CST

  rPSA-2008-0231-1 bind bind-utils
• 

  Bugtraq: [security bulletin] HPSBUX02351 SSRT080058 rev.2 - HP-UX Running BIND, Remote DNS Cache Poisoning

  Fetched: July 21st, 2008, 10:18am CST

  [security bulletin] HPSBUX02351 SSRT080058 rev.2 - HP-UX Running BIND, Remote DNS Cache Poisoning
• 

  Bugtraq: RE: Windows Vista Power Management & Local Security Policy

  Fetched: July 21st, 2008, 10:18am CST

  RE: Windows Vista Power Management & Local Security Policy

SecurityFocus News

• 

  Brief: Prosecutors criticized in pop-up porn case

  Posted: July 21st, 2008, 12:00am CST

  Prosecutors criticized in pop-up porn case
  
  >> Advertisement <<
  Can you answer the ERP quiz?
  These 10 questions determine if your Enterprise RP rollout gets an A+.
  [www.findtechinfo.com]

SecurityFocus Vulnerabilities

• 

  Vuln: MySQL MyISAM Table Privileges Secuity Bypass Vulnerability

  Posted: July 19th, 2008, 12:00am CST

  MySQL MyISAM Table Privileges Secuity Bypass Vulnerability
• 

  Vuln: Oracle July 2008 Critical Patch Update Multiple Vulnerabilities

  Posted: July 19th, 2008, 12:00am CST

  Oracle July 2008 Critical Patch Update Multiple Vulnerabilities
• 

  Vuln: Apache Tomcat Mod_JK.SO Arbitrary Code Execution Vulnerability

  Posted: July 19th, 2008, 12:00am CST

  Apache Tomcat Mod_JK.SO Arbitrary Code Execution Vulnerability
• 

  Vuln: Aprox CMS Engine 'index.php' SQL Injection Vulnerability

  Posted: July 19th, 2008, 12:00am CST

  Aprox CMS Engine 'index.php' SQL Injection Vulnerability

LinuxSecurity.com - Latest News

• 

  Openwall-Announce: John the Ripper Pro 1.7.3+ for Linux

  Posted: July 18th, 2008, 6:06pm CST

  LinuxSecurity.com: This is likely the last announcement posting for today, and maybe for this month. It is to announce availability of John the Ripper 1.7.3 Pro for Linux (stable release) and 1.7.3.1 Pro for Mac OS X (currently in public beta).I'd like to thank Alain Espinosa for the optimized NTLM code, and for kindly placing it in the public domain. This release of JtR Pro includes Alain's code with slight modifications, as well as replacement code for the password file loader; I am going to roll these into the next revision of the jumbo patch. Have you heard John the Ripper 1.7.3 Pro for Linux was just release? Test it out for yourself and let us know what you think about this release.
• 

  Openwall-Announce: Mod_auth_mysql with Support for phpass

  Posted: July 18th, 2008, 4:48pm CST

  LinuxSecurity.com: This is to announce several assorted items at once. I intend to post another announcement shortly, focusing on new JtR releases, so I have left those out of this one. A patched version of mod_auth_mysql with support for our PHP password hashing framework's (phpass) portable hashes has been added to the contributed resources list on the phpass homepage: http://www.openwall.com/phpass/ Do you use mod_auth_mysql? The openwall project released a interesting patch that adds support for PHP password hashing framework's.

Help Net Security - Security World

• 

  Spammers steal free e-mail providers' reputations

  Posted: July 18th, 2008, 12:15pm CST

  Roaring Penguin Software Inc. analyzed three weeks worth of data collected via its RPTN data-collection system and revealed a worrying trend: Spammers are increasingly using free e-mail providers to a...
• 

  WordPress logins made more secure than most online bank accounts

  Posted: July 18th, 2008, 3:32am CST

  Positive Networks announced that PhoneFactor, its phone-based authentication technology, is available as a free plug-in to WordPress, the largest self-hosted blogging tool in the world. With PhoneF...

SecurityFocus News

• 

  Infocus: Blocking Traffic by Country on Production Networks

  Fetched: July 18th, 2008, 1:55am CST

  Blocking Traffic by Country on Production Networks

SecurityFocus Vulnerabilities

• 

  Bugtraq: [USN-623-1] Firefox vulnerabilities

  Fetched: July 18th, 2008, 1:55am CST

  [USN-623-1] Firefox vulnerabilities
• 

  Bugtraq: HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access

  Fetched: July 18th, 2008, 1:55am CST

  HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
• 

  Bugtraq: [DSECRG-08-029] Local File Include in Dokeos E-Learning System 1.8.5

  Fetched: July 18th, 2008, 1:55am CST

  [DSECRG-08-029] Local File Include in Dokeos E-Learning System 1.8.5
• 

  Bugtraq: ekoparty security trainings (2008) announcement

  Fetched: July 18th, 2008, 1:55am CST

  ekoparty security trainings (2008) announcement

Help Net Security - Security World

• 

  Convenient security for ASUS ultra mobile portable PCs

  Posted: July 18th, 2008, 12:49am CST

  AuthenTec's small form factor AES1610 fingerprint sensor is now integrated as a standard feature on two new ASUS ultra mobile portable PCs (UMPCs). These new UMPCs are the latest in a growing number o...

LinuxSecurity.com - Latest News

• 

  Security Bugs and Full Disclosure

  Posted: July 17th, 2008, 4:10pm CST

  LinuxSecurity.com: In an announcement for the 2.6.25.10 stable kernel, Greg KH noted, "it contains a number of assorted bugfixes all over the tree. And once again, any users of the 2.6.25 kernel series are STRONGLY encouraged to upgrade to this release." The emphasis on the word strongly led to a lengthy discussion about how security fixes are handled in the Linux Kernel. Linus Torvalds replied, "I personally consider security bugs to be just 'normal bugs'. I don't cover them up, but I also don't have any reason what-so-ever to think it's a good idea to track them and announce them as something special." Later in the thread he went on to explain, "one reason I refuse to bother with the whole security circus is that I think it glorifies - and thus encourages - the wrong behavior. This article looks at the how the Linux kernel developers handles security fixes. What do you think about how the kernel team releases security updates? Is there a better way or model?

Help Net Security - Security World

• 

  Increasing threat of confidential information loss

  Posted: July 17th, 2008, 12:09pm CST

  A national security and privacy survey sponsored by CA showed that security threats from within an organization now are a bigger problem than attacks from external sources. At the same time, the numbe...
• 

  First ruggedized NAC appliance

  Posted: July 17th, 2008, 12:03pm CST

  Mirage Networks released a ruggedized appliance that is designed for environments where standard equipment cannot be deployed. The new appliance withstands temperature extremes, vibration and airborne...
• 

  Advanced VFS301 fingerprint sensor

  Posted: July 17th, 2008, 2:44am CST

  Validity Sensors launched the VFS301 fingerprint sensor. The durable and cost-effective VFS301 fingerprint sensor offers lower power, improved performance, a smaller form factor, and key customization...
• 

  PCI managed security suite accelerates PCI compliance

  Posted: July 17th, 2008, 2:38am CST

  Vendor Safe Technologies introduced its new PCI Managed Security Suite, a one-stop solution that enables restaurants and other merchants to comply with the credit card industryÂ’s PCI DSS requirements ...
• 

  Critical security issues in the open source Spring Framework

  Posted: July 17th, 2008, 2:10am CST

  Ounce Labs Advanced Research Team has documented two vulnerabilities that can affect Java web applications that utilize the Spring Framework.  With more than five million downloads of Spring to date, ...

SecurityFocus Vulnerabilities

• 

  Vuln: Microsoft Outlook Web Access for Exchange Server Email Field Cross-Site Scripting Vulnerability

  Posted: July 17th, 2008, 12:00am CST

  Microsoft Outlook Web Access for Exchange Server Email Field Cross-Site Scripting Vulnerability
• 

  Vuln: HP Select Identity Bidrectional LDAP Connector Remote Unauthorized Access Vulnerability

  Posted: July 17th, 2008, 12:00am CST

  HP Select Identity Bidrectional LDAP Connector Remote Unauthorized Access Vulnerability
• 

  Vuln: Microsoft DirectX WAV and AVI File Parsing Remote Code Execution Vulnerability

  Posted: July 17th, 2008, 12:00am CST

  Microsoft DirectX WAV and AVI File Parsing Remote Code Execution Vulnerability
• 

  Vuln: HockeySTATS Online 'index.php' Multiple SQL Injection Vulnerabilities

  Posted: July 17th, 2008, 12:00am CST

  HockeySTATS Online 'index.php' Multiple SQL Injection Vulnerabilities

SecurityFocus News

• 

  Brief: Mozilla shutters three Firefox flaws

  Posted: July 17th, 2008, 12:00am CST

  Mozilla shutters three Firefox flaws

LinuxSecurity.com - Latest News

• 

  Principle of Least Privilege Prevails, Says Red Hat Security Expert

  Posted: July 16th, 2008, 4:59pm CST

  LinuxSecurity.com: Linux security may seem daunting, but there are a host of best practices to simplify the maze. Recently, Steve Grubb of Red Hat Inc. outlined some important security principles, including minimizing admin access, the increasing sophistication of SELinux and the importance of auditing systems. Like many when I think about least privileges, I think about SELinux. What do you think about? This article is a interview with a Red Hat expert that answers questions about SELinux and least privileges.
• 

  Lynis - Security & System Auditing Tool for UNIX/Linux

  Posted: July 16th, 2008, 4:06pm CST

  LinuxSecurity.com: Lynis is an auditing tool for Unix (specialists). It scans the system and available software, to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes.This is a tool that might be useful for both penetration testers performing white box tests and system admins trying to secure their own systems. Have you ever heard about the Linux security program called Lynis. This was the first time I have read an article about it. What do you think about this project? Should Linux user test it out?

Help Net Security - Security World

• 

  New secure online backup service

  Posted: July 16th, 2008, 1:25pm CST

  Webroot announced the availability of Webroot Secure Backup, a new data backup solution for home PC users which protects digital photos, music and any other files from damage or loss. Webroot Secure B...
• 

  SD memory card for applications where recorded data must be unalterable

  Posted: July 16th, 2008, 1:25pm CST

  SanDisk Corporation introduced the SanDisk SDTM WORM Card, a Write Once Read Many (WORM) digital memory card intended for professional uses such as police investigations, court testimony, electronic v...

SecurityFocus News

• 

  Brief: Rogue admin blocks San Francisco network

  Posted: July 16th, 2008, 12:00am CST

  Rogue admin blocks San Francisco network
• 

  Brief: Cybercrime gets busy getting organized

  Posted: July 16th, 2008, 12:00am CST

  Cybercrime gets busy getting organized

LinuxSecurity.com - Latest News

• 

  Fedora's FreeIPA Offers Identity, Security Services

  Posted: July 15th, 2008, 5:00pm CST

  LinuxSecurity.com: Fedora 9, released last month, included the first release of FreeIPA, a new free/open source project that comes out of Red Hat with the goal of becoming a complete and integrated security information management solution. In this article we take a look at exactly what FreeIPA is, both what it can do now and what its developers hope it will be capable of in the future. It seems destined to become a key feature of Red Hat Enterprise Linux 6, and with Fedora 9 released and FreeIPA tightly integrated, now seems to be the perfect time to explore this new technology. From reading this article what do you think about this security project that Redhat introduced? I found it interesting that they used MIT Kerberos for authentication.

Help Net Security - Security World

• 

  Unified platform for endpoint security and compliance management

  Posted: July 15th, 2008, 3:42am CST

  McAfee announced enhancements to McAfee Total Protection (ToPS) for Endpoint, McAfee's flagship endpoint security solution. This release provides new and updated compliance and security functions, inc...
• 

  Social networking in the workplace may endanger corporate networks

  Posted: July 15th, 2008, 3:37am CST

  Trend Micro reported an increase in the number of employees who admit to visiting social networking sites on the Internet while connected to the corporate network, according to the results of a Trend ...
• 

  First European privacy seal awarded

  Posted: July 15th, 2008, 1:55am CST

  EuroPriSe today awards the first European Privacy Seal for ICT products and IT-based services. The seal guarantees compliance with the demanding EU laws and regulations on data security and privacy. ...
• 

  The Wireshark certification program

  Posted: July 15th, 2008, 1:52am CST

  CACE Technologies along with Wireshark University, announced the rollout of The Wireshark Certification Program. This new program strives to test a candidate's knowledge and ability to troubleshoot, o...
• 

  DoS vulnerability in popular VoIP product

  Posted: July 15th, 2008, 1:46am CST

  Mu Dynamics discovered and helped remediate a new programming flaw in ReSIProcate: A remotely exploitable Denial of Service vulnerability. The ReSIProcate components, particularly the SIP stack, is cu...
• 

  Face recognition middleware for embedded systems

  Posted: July 15th, 2008, 12:26am CST

  Oki Electric Industry announced its launch of a face recognition middleware for the surveillance market. The “FSE (Face Sensing Engine) Ver.4” for embedded systems can detect faces and identify specif...

SecurityFocus Vulnerabilities

• 

  Bugtraq: Re: New Paper: More than 600 million users surf at high risk

  Fetched: July 14th, 2008, 9:57pm CST

  Re: New Paper: More than 600 million users surf at high risk
• 

  Bugtraq: Re: Microsoft DNS patch KB951748 incompatible with Zonealarm

  Fetched: July 14th, 2008, 9:57pm CST

  Re: Microsoft DNS patch KB951748 incompatible with Zonealarm
• 

  Bugtraq: [ MDVSA-2008:144 ] - Updated openldap packages fix slapd DoS vulnerability

  Fetched: July 14th, 2008, 9:57pm CST

  [ MDVSA-2008:144 ] - Updated openldap packages fix slapd DoS vulnerability
• 

  Bugtraq: [ MDVSA-2008:138-1 ] - Updated OpenOffice.org packages fix vulnerability

  Fetched: July 14th, 2008, 9:57pm CST

  [ MDVSA-2008:138-1 ] - Updated OpenOffice.org packages fix vulnerability

LinuxSecurity.com - Latest News

• 

  Relay Server Attack Tactic Dupes Auto-reporting

  Posted: July 14th, 2008, 5:17pm CST

  LinuxSecurity.com: Sysadmins have begun noticing a coordinated attack on servers with open SSH ports that tries to stay under the radar by only attempting to guess a password three times from any compromised machine. Instead of mounting an attack form a single compromised host, hackers have worked out a means to relay a brute force attack between multiple assault machines. Do you have SSH open on your Linux machine? If so make sure that all your user's passwords are strong. Check out your system logs and see if attackers are trying to guess your passwords.
• 

  Latest VLC Patches Security Vulnerability, Fixes Other Bugs

  Posted: July 14th, 2008, 4:33pm CST

  LinuxSecurity.com: Users of the open source VLC media player should download version 0.8.6i to avoid a serious vulnerability in previous releases. According to a security advisory released by the VideoLAN project, a maliciously crafted WAV file could either crash VLC or cause the execution of arbitrary code. In common with so many vulnerabilities that can be exploited through media files, this is another buffer overflow problem. I use VLC because it supports so many different formats but, why did this security vulnerability got so much attention in the news?

Help Net Security - Security World

• 

  Comprehensive data flow and VoIP management

  Posted: July 14th, 2008, 12:03pm CST

  Packet Island released an enterprise-lite version of PacketSmart, the proven carrier-class VoIP-Data lifecycle management solution. The PacketSmart Enterprise-Lite Platform comes with software pre-ins...

SecurityFocus Vulnerabilities

• 

  Vuln: MySQL MyISAM Table Privileges Secuity Bypass Vulnerability

  Posted: July 14th, 2008, 12:00am CST

  MySQL MyISAM Table Privileges Secuity Bypass Vulnerability
• 

  Vuln: OpenOffice 'rtl_allocateMemory()' Heap Based Buffer Overflow Vulnerability

  Posted: July 14th, 2008, 12:00am CST

  OpenOffice 'rtl_allocateMemory()' Heap Based Buffer Overflow Vulnerability

SecurityFocus News

• 

  Brief: Apple rings up security with iPhone update

  Posted: July 14th, 2008, 12:00am CST

  Apple rings up security with iPhone update

SecurityFocus Vulnerabilities

• 

  Vuln: ITechBids Gold Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

  Posted: July 13th, 2008, 12:00am CST

  ITechBids Gold Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
• 

  Vuln: fuzzylime (cms) Arbitrary Script Injection and Local File Include Vulnerabilities

  Posted: July 13th, 2008, 12:00am CST

  fuzzylime (cms) Arbitrary Script Injection and Local File Include Vulnerabilities

The Register - Security: Anti-Virus

• 

  Malware authors declare start of World War III (again)

  Posted: July 12th, 2008, 8:32am CST

  Trojan apocalypse

  It beggars belief that anyone would think that they'd first hear of World War III through a spam email. But hackers are relying on such credulous fools in an attempt to spread a new Trojan.…

  

Help Net Security - Security World