Help Net Security - Security World

NEWS

Spam served as visual poetry

IT security spending on the rise

Aladdin Knowledge Systems acquires SafeWord product line

Secure Computing to acquire Securify

The RFID Security Alliance (RFIDSA) formed

ARTICLES

Discovery and Fuzzing for SQL injections with Web 2.0 Applications

Rootkit Evolution

Application Security Matters: Deploying Enterprise Software Securely

Security Risks for Mobile Computing on Public WLANs: Hotspot Registration

Reverse Engineering: Smashing the Signature

THE WIRE

Minimizing Directory Service audit event noise

Whitepaper - Best practices for securing Exchange email

Bruce Schneier: How to create the perfect fake identity

Discovery and fuzzing for SQL injections with Web 2.0 applications

Rootkit evolution

Reverse Engineer's Swiss Army Knife

REVIEWS

Security Power Tools

Network Warrior

Google Apps Hacks

Crimeware: Understanding New Attacks and Defenses

Big Book of Windows Hacks

MALWARE

Computers increasingly being infected by fake antivirus products

The state of malware - August 2008 edition

Weekly malware report: keylogger, autorun worm and exchanger trojan

More malware blocked in July 2008 than in the whole of 2007

Malware of the week: AIM worm, spammer trojan and fake p2p apps

ADVISORIES

Mandriva Linux Security Update Advisory - python (MDVSA-2008:186)

Gentoo Linux Security Advisory - MySQL: Privilege bypass (GLSA 200809-04)

Gentoo Linux Security Advisory - RealPlayer: Buffer overflow (GLSA 200809-03)

VULNERABILITIES

vBulletin "$newpm[title]" Parameter Cross-Site Scripting

NOAH Unspecified Cross-Site Scripting

GPicView Multiple Local Security Vulnerabilities

GFI: Detect intruders on your network through event log analysis. It’s easy with GFI EventsManager! Download your free trial.

Security World

Browse

or

Published in the last 10 days
(contribute press releases)

05 September 2008	Spam served as visual poetry IT security spending on the rise
04 September 2008	Aladdin Knowledge Systems acquires SafeWord product line Secure Computing to acquire Securify
03 September 2008	The RFID Security Alliance (RFIDSA) formed Taking e-mail archiving to another level Industry’s first 65nm all-CMOS implementation Market’s first IEEE 1149.7 cJTAG semiconductor IP core
02 September 2008	Patch assessment and remediation of your complete virtual world Combat rising risk in virtualized environments Data leakage prevention for Windows ENISA publishes updated awareness guide
01 September 2008	High-speed gigabit IP network equipment LSI
28 August 2008	Browser privacy in Internet Explorer 8 Beta Researchers’ new algorithm significantly boosts routing efficiency of networks Logitech video security cameras available in Europe New book: "High Performance MySQL, Second Edition" SSH key-based attacks A third of IT staff snoop at confidential data
27 August 2008	Panda Security launches its 2009 antivirus products BT enhances security monitoring service Wireless DTCP content protection specification
26 August 2008	HNS Book giveaway: "The Best of 2600 - A Hacker Odyssey" Most organizations fail to stop interior network threats A multivendor open automation framework External hard drives with RFID security key data encryption onboard

Qualys: This free security guide describes the scanning requirements for PCI-DSS and provides a quick-reference requirements matrix for both Merchants and Service Providers of all levels.

Vulnerability Scanning

Network Vulnerabilities

Event Log Security