The Network Security. Org

RSS Feed

Anatomy of a botnet

September 15th, 2008 · Comments Off

What if you wanted to build your own botnet to act as a spam relay or to launch a denial-of-service attack against an organization or a country? "It’s actually a lot of work," says Joe Stewart, director of malware research at SecureWorks.

[Read more →]

Tags: · , , ,

Microsoft Patch Tuesday Targets 26 Application Flaws

August 22nd, 2008 · Comments Off

Microsoft released its Patch Tuesday update today, which includes a fix for a zero-day flaw affecting Microsoft Office Access that has been targeted by hackers. Other fixes address issues in Microsoft Excel, PowerPoint, Windows and other products.

[Read more →]

Tags: · , , ,

SSL VPNs might not be as secure as you think

August 22nd, 2008 · Comments Off

SSL VPNs can be compromised in a way that enables them to take over remote users’ machines and potentially cause mischief inside the networks they attach to, according to research presented at the Black Hat conference.

[Read more →]

Tags: · ,

Onus on IP address owner to prove innocence

August 22nd, 2008 · Comments Off

The onus is on you to prove your cyber innocence. If someone has used your email or computer to send any illegal communication, then the laws of the country put you in a bit of a spot.

[Read more →]

Tags: · ,

Several vulnerabilities closed in the Linux kernel

July 15th, 2008 · Comments Off

Linux developers have strongly recommended anyone who uses Linux kernel 2.6.25 on multi-user x86-64 systems to upgrade to version 2.6.25.11. It appears that users with restricted privileges are able to escalate their access privileges. While Greg Kroah-Hartman did not give any further details when announcing the new kernel version, the problem is likely to be [...]

[Read more →]

Tags: · , , ,

8 Best Practices for Encryption Key Management and Data Security

July 15th, 2008 · Comments Off

Data encryption is an important element of an organization’s response to security threats and regulatory mandates. What many organizations are finding is that while encryption is not difficult to achieve, managing the associated encryption keys across their lifecycle quickly becomes a problem that creates a new set of security vulnerabilities and risks making important data [...]

[Read more →]

Tags: · , , , ,

Red Hat releases free security code

March 26th, 2008 · Comments Off

Red Hat is freeing up the source code behind its identity management and security system in a bid to show that open source software is more secure than rival technologies..

[Read more →]

Tags: · , ,

The top 10 security land mines

March 21st, 2008 · Comments Off

Many companies spend a small fortune and deploy a small army to secure themselves from the many security threats lurking these days. But all those efforts can come to naught when making any of these common mistakes. The results can range from embarrassing to devastating, but security experts say that all are easily avoidable.

[Read more →]

Tags: ·

Microsoft Patches 12 Office Security Holes

March 12th, 2008 · Comments Off

Microsoft today issued four updates to fix at least a dozen security vulnerabilities in its Office software products. All of the updates earned Microsoft’s "critical" label, meaning attackers could exploit the flaws to break into Windows systems with little or no help from users.

[Read more →]

Tags: · ,

Security holes in VLC media player patched

March 4th, 2008 · Comments Off

The developers of the open source media player VLC have closed several security holes. These would have allowed attackers to inject and execute malicious code using manipulated Realtime data streams or crafted video files. The latest version, 0.8.6e, is available to download and fixes the flaws.

[Read more →]

Tags: · , ,

-->