Microsoft continued efforts to spread its own secure software development program with today's release of a free fuzzer and tool for analyzing binary code.
Read more »Microsoft Gives Away Free Fuzzer, Secure Development Tool
Category: Products and Tools Tags:
Essential lockdowns for Layer 2 switch security
Takeaway: Failing to secure your switch architecture is like sending hackers an engraved invitation to attack your network. Yet security administrators often neglect to lock down Layer 2 of their network infrastructure. This comprehensive guide explains the essential procedures that will enable you to properly configure and secure your switch infrastructure.
Read more »Category: Network & Internet Security Tags:
Encrypting Internal PCI Network Traffic is a Good Thing
Internal networks are notoriously insecure so why wouldn’t you encrypt PCI data end to end? What makes an Internal Network somehow so inherently secure that encryption is not needed?
Read more »Category: Network & Internet Security Tags:
IBM acquires Ounce Labs
BM has purchased Ounce Labs, a privately held software security provider, the companies said Tuesday.
Ounce Labs uses its technology to scan the source code of an application, hunting for security holes and compliance failures. Ounce tries to track down problems early on in a product's development when they're easier and cheaper to fix.
Category: Products and Tools Tags:
Classic: Neighbour Stealing your wifi - Time to have some Phun!
Very funny!
My neighbours are stealing my wireless internet access. I could encrypt it or alternately I could have fun.
Researchers exploit SSL and domain flaws
Two researchers have independently uncovered flaws in the way domain names are verified on the internet, which could allow attackers to impersonate a site and steal information from unsuspecting surfers.
Read more »MAGEN technology automatically shields sensitive customer data
IBM Researchers in Israel have developed a new data masking technology that filters sensitive data from unauthorised viewers on the fly.. before it reaches their computer screens.
Read more »Category: Products and Tools Tags:
Not all apps equal in Iranian filtering
An analysis of the traffic patterns coming out of the Data Communication Company of Iran (DCI), Iran's state-run Internet provider, shows that the country has severely curtailed SSH, Flash and Bittorrent communications, a security researcher stated on Thursday.
Read more »Microsoft to release free antivirus
Microsoft to release free antivirus codenamed 'Morro'. It is to be available in public beta tuesday 23rd June 2009.
Read more »Category: Products and Tools Tags:
Penetration Testing Framework
A Visual Guide to penetration testing that can be used across penetration testing assignment.
Read more »Category: Network & Internet Security Tags:
What You Don't Know About the World's Worst Breaches
Verizon Business investigated 90 major data breaches in 2008, including 285 million compromised records. Nearly ¾ of those breaches were external hacks, and 99.9 percent of the records were compromised via servers and applications.
Read more »Category: Network & Internet Security Tags:
Results, Unicode Left/Right Pointing Double Angel Quotation Mark
A while back 3APA3A and Arian Evans (Director of Operations, WhiteHat Security) left off a full-disclosure thread about an interesting encoding bypass attack, Unicode Left/Right Pointing Double Angel Quotation Mark.
Read more »Category: Web Application Security Tags:
WHY PHISHERS LOVE FACEBOOK
Facebook is the new playground for phishers. Why? The social networking site has made things relatively easy for computer criminals. So far, the consequences have been relatively mild -- mostly, some annoying emails. But if Facebook and other social networking sites don't get a handle on security issues soon, a serious outbreak could occur.
Read more »What Obama's Cybersecurity Plans Mean for Businesses
Administration's new cybersecurity policies could yield new security regulations and incentives for enterprises, experts say.
Read more »Google Online Security Blog
The latest news and insights from Google on security and safety on the Internet
Read more »Defcon Media Archives
A treasure trove of presentations, video's from the Defcon Conferences, the next best thing to actually being there
Read more »Internet Banking Security Assessment Considerations
Category: Network & Internet Security Tags:
Apple plugs gaping QuickTime security holes
Apple today released QuickTime 7.6.2 with fixes for a variety of security vulnerabilities, some of which could lead to arbitrary code execution attacks.
Read more »Category: Products and Tools Tags:
Turkish 'm0sted' hackers infiltrated U.S. Army servers
Turkish hackers calling themselves m0sted were able to break into a U.S. Army server in January and previously hacked a server for the Army Corps of Engineers, according to InformationWeek.
Read more »President Obama: My campaign was hacked
It’s no secret that my presidential campaign harnessed the Internet and technology to transform our politics. What isn’t widely known is that during the general election hackers managed to penetrate our computer systems.
Read more »