SeekSecurity

Moth is a VMware image with a set of vulnerable Web Applications and scripts, that you may use for:

Testing Web Application Security Scanners
Testing Static Code Analysis tools (SCA)
Giving an introductory course to Web Application Security

Sqlninja 0.2.5 is available!! with new features:

* Upload mode is not limited to files of 64k bytes anymore
* Uploading files is also *massively* faster
* Proxy support (it was ***ing time!)
* Support for token kidnapping (thanks Cesar!)
* Lots of other minor improvements

BM has purchased Ounce Labs, a privately held software security provider, the companies said Tuesday.
Ounce Labs uses its technology to scan the source code of an application, hunting for security holes and compliance failures. Ounce tries to track down problems early on in a product's development when they're easier and cheaper to fix.

Apple today released QuickTime 7.6.2 with fixes for a variety of security vulnerabilities, some of which could lead to arbitrary code execution attacks.

Microsoft continued efforts to spread its own secure software development program with today's release of a free fuzzer and tool for analyzing binary code.

Writing skills are essential for succeeding in high school, college, and at a job. Writing is not just an end result, but also a process that helps us develop our ideas and think logically. Begin by brainstorming topics, collecting information, taking a lot of notes, and asking a lot of questions. Keep your notes and sources organized as you go.

Security firms and the U.S. Computer Emergency Readiness Team (US-CERT) warned this week of a series of attacks that has compromised Web sites and then used the infected sites to spread malware.

Takeaway: Failing to secure your switch architecture is like sending hackers an engraved invitation to attack your network. Yet security administrators often neglect to lock down Layer 2 of their network infrastructure. This comprehensive guide explains the essential procedures that will enable you to properly configure and secure your switch infrastructure.

IT professionals are under pressure from upper level executives to open the floodgates to the latest Web-based platforms, relaxing Web security policy, according to a new survey of 1,300 IT managers.