What if you wanted to build your own botnet to act as a spam relay or to launch a denial-of-service attack against an organization or a country? "It’s actually a lot of work," says Joe Stewart, director of malware research at SecureWorks.
Anatomy of a botnet
September 15th, 2008 · Comments Off
Tags: · botnet, Hacking, Malware, security
Microsoft Patch Tuesday Targets 26 Application Flaws
August 22nd, 2008 · Comments Off
Microsoft released its Patch Tuesday update today, which includes a fix for a zero-day flaw affecting Microsoft Office Access that has been targeted by hackers. Other fixes address issues in Microsoft Excel, PowerPoint, Windows and other products.
Tags: · flaws, Internet Explorer, Microsoft, security
SSL VPNs might not be as secure as you think
August 22nd, 2008 · Comments Off
SSL VPNs can be compromised in a way that enables them to take over remote users’ machines and potentially cause mischief inside the networks they attach to, according to research presented at the Black Hat conference.
Onus on IP address owner to prove innocence
August 22nd, 2008 · Comments Off
The onus is on you to prove your cyber innocence. If someone has used your email or computer to send any illegal communication, then the laws of the country put you in a bit of a spot.
Tags: · cyber crime, security
Several vulnerabilities closed in the Linux kernel
July 15th, 2008 · Comments Off
Linux developers have strongly recommended anyone who uses Linux kernel 2.6.25 on multi-user x86-64 systems to upgrade to version 2.6.25.11. It appears that users with restricted privileges are able to escalate their access privileges. While Greg Kroah-Hartman did not give any further details when announcing the new kernel version, the problem is likely to be [...]
Tags: · Linux kernel, Local Descriptor Table, security, Vulnerability
8 Best Practices for Encryption Key Management and Data Security
July 15th, 2008 · Comments Off
Data encryption is an important element of an organization’s response to security threats and regulatory mandates. What many organizations are finding is that while encryption is not difficult to achieve, managing the associated encryption keys across their lifecycle quickly becomes a problem that creates a new set of security vulnerabilities and risks making important data [...]
Tags: · Data Security, Encryption, Network Security, security, Vulnerability
Red Hat releases free security code
March 26th, 2008 · Comments Off
Red Hat is freeing up the source code behind its identity management and security system in a bid to show that open source software is more secure than rival technologies..
Tags: · Network Security, Red Hat, security
The top 10 security land mines
March 21st, 2008 · Comments Off
Many companies spend a small fortune and deploy a small army to secure themselves from the many security threats lurking these days. But all those efforts can come to naught when making any of these common mistakes. The results can range from embarrassing to devastating, but security experts say that all are easily avoidable.
Tags: · security
Microsoft Patches 12 Office Security Holes
March 12th, 2008 · Comments Off
Microsoft today issued four updates to fix at least a dozen security vulnerabilities in its Office software products. All of the updates earned Microsoft’s "critical" label, meaning attackers could exploit the flaws to break into Windows systems with little or no help from users.
Security holes in VLC media player patched
March 4th, 2008 · Comments Off
The developers of the open source media player VLC have closed several security holes. These would have allowed attackers to inject and execute malicious code using manipulated Realtime data streams or crafted video files. The latest version, 0.8.6e, is available to download and fixes the flaws.
Tags: · media player, security, VLC