Help Net Security - Contact

NEWS

Spam served as visual poetry

IT security spending on the rise

Aladdin Knowledge Systems acquires SafeWord product line

Secure Computing to acquire Securify

The RFID Security Alliance (RFIDSA) formed

ARTICLES

Discovery and Fuzzing for SQL injections with Web 2.0 Applications

Rootkit Evolution

Application Security Matters: Deploying Enterprise Software Securely

Security Risks for Mobile Computing on Public WLANs: Hotspot Registration

Reverse Engineering: Smashing the Signature

THE WIRE

CIA, FBI push 'Facebook for spies'

Minimizing Directory Service audit event noise

Whitepaper - Best practices for securing Exchange email

Bruce Schneier: How to create the perfect fake identity

Discovery and fuzzing for SQL injections with Web 2.0 applications

Reverse Engineer's Swiss Army Knife

REVIEWS

Security Power Tools

Network Warrior

Google Apps Hacks

Crimeware: Understanding New Attacks and Defenses

Big Book of Windows Hacks

MALWARE

Computers increasingly being infected by fake antivirus products

The state of malware - August 2008 edition

Weekly malware report: keylogger, autorun worm and exchanger trojan

More malware blocked in July 2008 than in the whole of 2007

Malware of the week: AIM worm, spammer trojan and fake p2p apps

ADVISORIES

Mandriva Linux Security Update Advisory - python (MDVSA-2008:186)

Gentoo Linux Security Advisory - MySQL: Privilege bypass (GLSA 200809-04)

Gentoo Linux Security Advisory - RealPlayer: Buffer overflow (GLSA 200809-03)

VULNERABILITIES

vBulletin "$newpm[title]" Parameter Cross-Site Scripting

NOAH Unspecified Cross-Site Scripting

GPicView Multiple Local Security Vulnerabilities

Vulnerability Scanning

Network Vulnerabilities

Event Log Security