Help Net Security - Security World

NEWS

Spam served as visual poetry

IT security spending on the rise

Aladdin Knowledge Systems acquires SafeWord product line

Secure Computing to acquire Securify

The RFID Security Alliance (RFIDSA) formed

ARTICLES

Discovery and Fuzzing for SQL injections with Web 2.0 Applications

Rootkit Evolution

Application Security Matters: Deploying Enterprise Software Securely

Security Risks for Mobile Computing on Public WLANs: Hotspot Registration

Reverse Engineering: Smashing the Signature

THE WIRE

CIA, FBI push 'Facebook for spies'

Minimizing Directory Service audit event noise

Whitepaper - Best practices for securing Exchange email

Bruce Schneier: How to create the perfect fake identity

Discovery and fuzzing for SQL injections with Web 2.0 applications

Reverse Engineer's Swiss Army Knife

REVIEWS

Security Power Tools

Network Warrior

Google Apps Hacks

Crimeware: Understanding New Attacks and Defenses

Big Book of Windows Hacks

MALWARE

Computers increasingly being infected by fake antivirus products

The state of malware - August 2008 edition

Weekly malware report: keylogger, autorun worm and exchanger trojan

More malware blocked in July 2008 than in the whole of 2007

Malware of the week: AIM worm, spammer trojan and fake p2p apps

ADVISORIES

Mandriva Linux Security Update Advisory - python (MDVSA-2008:186)

Gentoo Linux Security Advisory - MySQL: Privilege bypass (GLSA 200809-04)

Gentoo Linux Security Advisory - RealPlayer: Buffer overflow (GLSA 200809-03)

VULNERABILITIES

vBulletin "$newpm[title]" Parameter Cross-Site Scripting

NOAH Unspecified Cross-Site Scripting

GPicView Multiple Local Security Vulnerabilities

GFI: Detect intruders on your network through event log analysis. It’s easy with GFI EventsManager! Download your free trial.

Security World

Browse

or

Published in the last 10 days
(contribute press releases)

05 September 2008	Spam served as visual poetry IT security spending on the rise
04 September 2008	Aladdin Knowledge Systems acquires SafeWord product line Secure Computing to acquire Securify
03 September 2008	The RFID Security Alliance (RFIDSA) formed Taking e-mail archiving to another level Industry’s first 65nm all-CMOS implementation Market’s first IEEE 1149.7 cJTAG semiconductor IP core
02 September 2008	Patch assessment and remediation of your complete virtual world Combat rising risk in virtualized environments Data leakage prevention for Windows ENISA publishes updated awareness guide
01 September 2008	High-speed gigabit IP network equipment LSI

Qualys: This free security guide describes the scanning requirements for PCI-DSS and provides a quick-reference requirements matrix for both Merchants and Service Providers of all levels.

Vulnerability Scanning

Network Vulnerabilities

Event Log Security