Secu.be

Unread items (86)

Moreover Technologies - Computer security news

Emissions Trading Scheme suffers cyber attack

Fetched: February 8th, 2010, 10:48pm CET

Engineer Online Feb 8 2010 6:07PM GMT
Facebook on your mobile could give you a virus

Fetched: February 8th, 2010, 10:48pm CET

MSN UK Feb 8 2010 6:03PM GMT
China shuts a hacking school

Fetched: February 8th, 2010, 10:48pm CET

TheInquirer.net Feb 8 2010 6:02PM GMT
Chinese police shut down hacker trainers

Fetched: February 8th, 2010, 10:48pm CET

BigPond News Feb 8 2010 5:58PM GMT
SPYRUS Proud to Be Shipping Devices Implementing Higher Security XTS-AES Mode of AES Encryption Recently Added to FIPS 140-2

Fetched: February 8th, 2010, 10:48pm CET

Individual.com Feb 8 2010 5:56PM GMT
Security software maker Vitamin D exits beta

Fetched: February 8th, 2010, 10:48pm CET

CNET News.com Feb 8 2010 5:46PM GMT
Juniper Networks SSL VPN Solutions certified to UK Government CCTM standards

Fetched: February 8th, 2010, 10:48pm CET

Individual.com Feb 8 2010 5:46PM GMT
Chinese police raid hacker hub

Fetched: February 8th, 2010, 10:48pm CET

Globe and Mail Feb 8 2010 5:43PM GMT
China closes hacker training site, arrests three members

Fetched: February 8th, 2010, 10:48pm CET

InfoWorld Feb 8 2010 5:26PM GMT
Protecting The Enterprise Against The Looming DDoS Threat

Fetched: February 8th, 2010, 10:48pm CET

ChannelWeb Feb 8 2010 5:26PM GMT
Chinese police shut down hacker training business

Fetched: February 8th, 2010, 10:48pm CET

San Jose Mercury News Feb 8 2010 5:20PM GMT
China Says Hacker Training Site Closed

Fetched: February 8th, 2010, 10:48pm CET

Finance Tech Online Feb 8 2010 5:19PM GMT
China breaks up Black Hawk hacking ring

Fetched: February 8th, 2010, 10:48pm CET

CNET News.com Feb 8 2010 5:17PM GMT
China Shuts Down Hacker School

Fetched: February 8th, 2010, 10:48pm CET

EWeek Europe Feb 8 2010 5:15PM GMT

ZATAZ News

[nt]

Posted: February 8th, 2010, 10:42pm CET

Help Net Security - News

Automated malware analysis platform

Posted: February 8th, 2010, 9:52pm CET

HBGary released Responder Professional 2.0, a Windows physical memory and automated malware analysis platform that analyzes all programs in memory including malware to obtain the threat intelligence n...

Computerworld Security News

Poughkeepsie, N.Y. slams bank for $378,000 online theft

Posted: February 8th, 2010, 9:52pm CET

The theft of $378,000 from the town of Poughkeepsie, N.Y. is raising questions about the responsibility of banks to protect customer accounts from online criminals.

Help Net Security - News

Beyond the cloud: Common Assurance Metric

Posted: February 8th, 2010, 9:46pm CET

The Common Assurance Metric (CAM) launched today is a global initiative that aims to produce objective quantifiable metrics, to assure Information Security maturity in cloud, third party service provi...

Moreover Technologies - Computer security news

China closes major hacker ring, arrests three members

Fetched: February 8th, 2010, 9:35pm CET

TechSpot Feb 8 2010 7:52PM GMT
China Closes Hacker Training Site

Fetched: February 8th, 2010, 9:35pm CET

Information Week Feb 8 2010 7:48PM GMT
China Closes Hacker Training Site

Fetched: February 8th, 2010, 9:35pm CET

Information Week Feb 8 2010 7:48PM GMT
TCS falls prey to cyber attack

Fetched: February 8th, 2010, 9:35pm CET

Economictimes Feb 8 2010 7:48PM GMT
China cracks down on hacking website

Fetched: February 8th, 2010, 9:35pm CET

ABC Radio Australia News Feb 8 2010 7:47PM GMT
China Announces Arrests in Hacking Crackdown

Fetched: February 8th, 2010, 9:35pm CET

New York Times Feb 8 2010 7:47PM GMT
China Closes Hacker Training Site w/ 180K Users

Fetched: February 8th, 2010, 9:35pm CET

Tom's Hardware UK Feb 8 2010 7:43PM GMT
Symantec Norton AntiVirus Virus Definition 2/5/10 (Windows)

Fetched: February 8th, 2010, 9:35pm CET

ZDNet Feb 8 2010 7:39PM GMT
Panda Virus Signature File 5 February 2010 (Windows)

Fetched: February 8th, 2010, 9:35pm CET

ZDNet Feb 8 2010 7:39PM GMT
Protector Plus Virus Database 8.0.G94 (Windows)

Fetched: February 8th, 2010, 9:35pm CET

ZDNet Feb 8 2010 7:39PM GMT
Trend Micro Virus Controlled Pattern File 6.827 (Windows)

Fetched: February 8th, 2010, 9:35pm CET

ZDNet Feb 8 2010 7:39PM GMT
Website restored by TCS after hackers put it up for sale

Fetched: February 8th, 2010, 9:35pm CET

Topnews.in Feb 8 2010 7:38PM GMT
InfoGuard expands range of Multilink/Multiprotocol Encryption Devices to meet the need for lower bandwidths and tighter budgets

Fetched: February 8th, 2010, 9:35pm CET

IT Backbones Feb 8 2010 7:29PM GMT
Chinese Hacker Training Web Site Shut Down

Fetched: February 8th, 2010, 9:35pm CET

Datamation Feb 8 2010 7:26PM GMT
Utilities to bolster smart grid cybersecurity

Fetched: February 8th, 2010, 9:35pm CET

Security Info Watch Feb 8 2010 7:24PM GMT
Containing Stealthy Worms

Fetched: February 8th, 2010, 9:35pm CET

Dr. Dobb's Feb 8 2010 7:21PM GMT
Sweden to prosecute alleged Cisco, NASA hacker

Fetched: February 8th, 2010, 9:35pm CET

The Register Feb 8 2010 6:58PM GMT
Hackers who beg, borrow and steal

Fetched: February 8th, 2010, 9:35pm CET

Sydney Morning Herald Feb 8 2010 6:57PM GMT
How Hacker-Proof Are Your Banking Passwords?

Fetched: February 8th, 2010, 9:35pm CET

Minyanville Feb 8 2010 6:51PM GMT
Containing Stealthy Worms

Fetched: February 8th, 2010, 9:35pm CET

DDJ Feb 8 2010 6:42PM GMT
China Heralds Bust of Major Hacker Ring

Fetched: February 8th, 2010, 9:35pm CET

TechSpot Feb 8 2010 6:40PM GMT
China Cracks Down On Country's Biggest Hacker Training Centre

Fetched: February 8th, 2010, 9:35pm CET

ITProPortal.com Feb 8 2010 6:34PM GMT
China pulls plug on hacker website

Fetched: February 8th, 2010, 9:35pm CET

Al Jazeera Feb 8 2010 6:33PM GMT
McAfee makes upgrades

Fetched: February 8th, 2010, 9:35pm CET

Technology Digital Feb 8 2010 6:29PM GMT
Facebook on your mobile could give you a virus

Fetched: February 8th, 2010, 9:35pm CET

TechRadar.com Feb 8 2010 6:24PM GMT
Juniper Networks SSL VPN Solutions certified to UK Government CCTM standards

Fetched: February 8th, 2010, 9:35pm CET

TradingMarkets Feb 8 2010 6:20PM GMT
China closes 'biggest hacker site', arrests three

Fetched: February 8th, 2010, 9:35pm CET

Uzbekistan News Feb 8 2010 6:17PM GMT
McAfee Virus SuperDAT Definitions Update 5885

Fetched: February 8th, 2010, 9:35pm CET

MajorGeeks.com Feb 8 2010 6:14PM GMT
Outpost Firewall Pro 6.7.3 (3058.452.0725)

Fetched: February 8th, 2010, 9:35pm CET

MajorGeeks.com Feb 8 2010 6:09PM GMT
Chinese police shut down hacker trainers

Fetched: February 8th, 2010, 9:35pm CET

Sky News Australia Feb 8 2010 6:07PM GMT

Schneier on Security

The Limits of Visual Inspection

Posted: February 8th, 2010, 8:54pm CET

Interesting research: Target prevalence powerfully influences visual search behavior. In most visual search experiments, targets appear on at least 50% of trials. However, when targets are rare (as in medical or airport screening), observers shift response criteria, leading to elevated miss error rates. Observers also speed target-absent responses and may make more motor errors. This could be a speed/accuracy tradeoff...

Computerworld Security News

Adobe apologizes for 16-month-old Flash bug

Posted: February 8th, 2010, 8:47pm CET

Adobe apologized over the weekend for letting a 16-month-old bug in Flash Player languish without a patch, even though it updated the popular plug-in four times since the flaw was reported.

Latest OSVDB Vulnerabilities

Vermillion FTPD PORT Command Remote Overflow

Fetched: February 8th, 2010, 8:32pm CET

Vermillion FTPD PORT Command Remote Overflow

SecurityTracker Vulnerability Headlines

Linux Kernel Flaw in do_pages_move() Lets Local Users Obtain Kernel Memory and Deny Service

Fetched: February 8th, 2010, 8:32pm CET

Linux Kernel Flaw in do_pages_move() Lets Local Users Obtain Kernel Memory and Deny Service

The Register - Security

Sweden to prosecute alleged Cisco, NASA hacker

Posted: February 8th, 2010, 7:50pm CET

Stakkato's abrupt transfer
The prosecution of a Swedish man charged with breaching the computer networks of NASA and Cisco Systems and making off with sensitive source code will be transferred to Swedish authorities, US federal prosecutors said Monday.…

Computerworld Security News

PC Maintenance: What Tasks When?

Posted: February 8th, 2010, 7:01pm CET

Ruption18 asked the Answer Line forum what regular chores will keep his PC healthy.

Security - RSS Feeds

China Closes Hacker Training School, Arrests 3

Posted: February 8th, 2010, 6:47pm CET

China officials have shut down Black Hawk Safety Net, the country's biggest hacker training Website, and arrested three people for making hacker tools available online.
- China announced it has arrested three people in connection with operating a hacker training school that distributed malware and hacking tools to its members in online forums. According to Xinhua, Chinas state-run newspaper, three people were arrested in connection with making the tools availab...

Moreover Technologies - Computer security news

Jobless Dad in ? Make $87/Hr - Sponsored Link

Fetched: February 8th, 2010, 3:59pm CET

Ad - Consumer-Weekly.com/Jobs Feb 8 2010 7:24PM GMT

ZATAZ News

Cocoonez hightech

Posted: January 30th, 2010, 11:30pm CET

Oreillerbaladeur et couverture USB pour rester au chaud tout en étant branché ! A découvrir aussi le 1e réseau en 3D dédié à l´art.
Phishing à l´encontre de la Caisse d´Allocations Familiales

Posted: January 30th, 2010, 11:16pm CET

Exclusif : Prudence, depuis samedi après-midi, un pirate tente de mettre la main sur les identifiants de connexion à la Caisse d´Allocations Familiales.
Censure du Net: rassurants amendements en commission

Posted: January 28th, 2010, 11:54am CET

La Quadrature du Net se rassure de l´adoption à l´unanimité en Commission des Lois d´amendements à la loi LOPPSI déposés par le député Tardy.
Les casseroles made in HADOPI

Posted: January 28th, 2010, 10:07am CET

Chose promise chose due : mobilisation de l'armée numérique pour le lancement de l'opération Casseroles Day (C-DAY).
Nouveau phishing à l´encontre des clients de la Caisse d´Épargne

Posted: January 28th, 2010, 9:50am CET

Voilà un pirate qui a de la suite dans les idées. Septième attaques à l´encontre des clients de la Caisse d´Épargne.
L´exploit pour hacker la PS3 diffusé sur Internet

Posted: January 27th, 2010, 4:38pm CET

GeoHot, l´auteur du premier véritable crack de la Playstation 3 de Sony diffuse le code qui permet cet exploit technique.
Jouer gratuitement au poker

Posted: January 26th, 2010, 4:09pm CET

Pour rester informé en permanence des dernières offres de poker en ligne, Pokerlistings est le guide le plus actualisé du web.
Do you speak spammeur ?

Posted: January 26th, 2010, 3:44pm CET

Les spammeurs ciblent désormais leurs destinataires en fonction de leur langue et de leur pays d´origine.
SaveMe Express

Posted: January 26th, 2010, 10:57am CET

SaveMe Express, une solution complète autorisant la sauvegarde automatique, en temps réel et en continu, de l´intégralité du contenu d´un PC vers un disque dur externe USB dédié exclusivement à cette sauvegarde.
Un virus sur le Figaro, 20 minutes, ...

Posted: January 26th, 2010, 10:55am CET

Plusieurs milliers de sites se sont retrouvés piégés par l´antivirus Kaspersky 2010. Une mise à jour capricieuse voit des codes malveillants partout.
Moi y a vendre bonne arnaque

Posted: January 26th, 2010, 10:52am CET

Prudence, des annonces eBay vous proposent d´acquérir des ordinateurs portables pour 52 euros... Arnaque comprise!
Un cheval de Troie qui prend vos fichiers en otage

Posted: January 26th, 2010, 10:40am CET

Un nouveau cheval de Troie exige une rançon en échange de vos fichiers, et vous rendrait même reconnaissant!
Mass defacements

Posted: January 26th, 2010, 10:34am CET

Plus de 3.000 sites, dont des dizaines de Français, piratés en quelques secondes en raison d´une vulnérabilité jamais corrigée.
Chercheurs d’emplois gare aux offres frauduleuses!

Posted: January 26th, 2010, 10:25am CET

Quand les pirates informatiques créent de fausses offres d’emploi : vigilance!
Sécurisation des paiements

Posted: January 26th, 2010, 10:18am CET

Partenariat et intégration technologique de Thales et Voltage Security pour le cryptage de bout en bout et la gestion des clés.
TechCrunch... hacked ... coming soon

Posted: January 26th, 2010, 10:15am CET

L´une des référence électronique sur la toile américaine, TechCrunch, ne répond plus. Des pirates semblent mettre le e.souk dans le magazine, depuis hier soir.
Amende divisée par 35 pour une copieuse de MP3

Posted: January 26th, 2010, 10:13am CET

Une mère de famille, condamnée à 1,92 millions de dollars pour avoir copié 24 Mp3 piratés, voit son amende divisée par 35.
Les joueurs de NCSoft ciblés par un phishing

Posted: January 25th, 2010, 4:29pm CET

Pendant que Google râle sur de pseudos pirates Chinois qui ne semblent être que des employés malintentionnés, l´éditeur de jeux en réseau AION, City of heroes, Lineage, ... s´attaque aux vilains fermiers numériques made in china.
A la charge !

Posted: January 24th, 2010, 11:41am CET

Appareils photos, téléphones, consoles de jeux ou ordinateurs, il faut tous les charger. Et même dans ce domaine, les fabricants rivalisent d’imagination. Découverte de nouveautés écolo, à induction ou tout simplement geek.
Piratage de la PS3 confirmé

Posted: January 24th, 2010, 11:34am CET

Depuis quelques semaines, la rumeur montait. Une méthode, une vraie, pour casser la sécurité de la PS3 de Sony allait voir le jour. Un informaticien réussi le tour de passe passe.
Faille vieille de 17 ans révélée dans Windows

Posted: January 22nd, 2010, 11:45am CET

Microsoft confirme la présence d´une faille dans Windows vieille de 17 ans.
Haïti: Phishing visant la Croix Rouge Française

Posted: January 21st, 2010, 11:23pm CET

Exclusif : Un courrier électronique se fait passer pour un appel aux dons aux profits de la Croix Rouge Française et de Haïti.
Ca download pour Tetris

Posted: January 21st, 2010, 6:49pm CET

Tetris a franchi les 100 millions de téléchargements payants sur mobile. Il est sans conteste le jeu le plus vendu sur téléphone portable!
Escroquerie téléphonique via Facebook

Posted: January 21st, 2010, 6:46pm CET

Exclusif : Un groupe Facebook cache une escroquerie qui promet de téléphoner gratuitement. Prudence, une fausse page de connexion au portail communautaire y est proposée.
Parti Pirate - Régionales 2010 Ile de France

Posted: January 21st, 2010, 6:29pm CET

Perline sera tête de liste du Parti Pirate du département de Paris pour les prochaines élections régionales.
Perte de poids, gare aux fausses pubs

Posted: January 21st, 2010, 6:23pm CET

Exclusif : J´ai perdu 16 Kg en moins de 2 mois avec deux produits gratuits. Une publicité trouble exploite des sites, Tv connus ainsi que le logo du Ministère de la santé et des sports.
Boulette à la Mairie de Roanne... et de Baisieux

Posted: January 21st, 2010, 6:03pm CET

Exclusif : Pour les vœux 2010, la mairie de Roanne s´invite sur le web. Mauvaise idée, le courrier contenait plusieurs centaines de données privées. A Baisieux, c'est le site web qui bave !
Naviguez en toute liberté avec le nouvel avast

Posted: January 21st, 2010, 5:38pm CET

Lancement d´une nouvelle ligne de produits anti-virus gratuit et premium 5.0.
Solde sur le web

Posted: January 21st, 2010, 5:32pm CET

Exclusif : Prudence, un lien appartenant à la boutique en ligne GrosBill pourrait être exploité par un pirate informatique ou autre hameçonneur.
Yes Exploit System en image

Posted: January 21st, 2010, 5:28pm CET

Exclusif : Découverte du couteau Suisse pirate Yes Exploit System. Un logiciel web qui infiltre votre ordinateur.

Recent items

1 2 3 ... 20

Computerworld Security News

An open letter to my public transit company

Posted: February 8th, 2010, 6:01pm CET

For the last week I have been barraged by phone calls and e-mails from various technology body shops asking what my lowest and best rate was for a six-month PCI project you are looking to staff. I've also received e-mails from a bunch of folks trying to get me to work on a project for you. I have heard various rates of $55 to $70 per hour for this PCI project. Note that these rates are considerably lower than the market rates for qualified PCI professionals, especially in the tri-state area.

ZATAZ News

[nt]

Posted: February 8th, 2010, 5:24pm CET

The Register - Security

Cheeky French hackers hijack Tata website

Posted: February 8th, 2010, 5:03pm CET

Now you see it, maintenant... non
Top flight outsourcing firm Tata Consulting Services appeared to have lost control of its website to hackers today, with the domain apparently being touted for sale.…

Network World on Security

China closes hacker training site, arrests three members

Posted: February 8th, 2010, 5:00pm CET by Owen Fletcher

Chinese police have shut down what they called the country's biggest hacker training Web site and arrested three people linked to the site, local media said Saturday.
More evidence of value of security certification

Posted: February 8th, 2010, 5:00pm CET by M. E. Kabay

This is the second of five articles discussing the benefits (if any) of security certifications in the job market. In the first article, a number of studies suggested that certifications do indeed improve prospects for hiring and higher salaries.
More evidence of value of security certification

Posted: February 8th, 2010, 5:00pm CET by M. E. Kabay

This is the second of five articles discussing the benefits (if any) of security certifications in the job market. In the first article, a number of studies suggested that certifications do indeed improve prospects for hiring and higher salaries.
Banning illegal file-sharers could breach human rights

Posted: February 8th, 2010, 5:00pm CET by Carrie-ann Skinner

Banning web users suspected of illegally downloading from the net could be a breach of human rights, says the Joint Select Committee on Human Rights.
Malwarebytes' Anti-Malware Free

Posted: February 8th, 2010, 5:00pm CET by Lincoln Spector

You can't depend on just one program to protect you from rootkits, Trojans, viruses, worms, and other malicious code. The job is too important and the villains too numerous for that. So supplement your regular antivirus program (the one you keep running in the background at all times) with an extra malware scanner, such as Malwarebytes' Anti-Malware Free.
An open letter to my public transit company

Posted: February 8th, 2010, 5:00pm CET by Ben Rothke

For the last week I have been barraged by phone calls and e-mails from various technology body shops asking what my lowest and best rate was for a six-month PCI project you are looking to staff. I've also received e-mails from a bunch of folks trying to get me to work on a project for you. I have heard various rates of $55 to $70 per hour for this PCI project. Note that these rates are considerably lower than the market rates for qualified PCI professionals, especially in the tri-state area.

Help Net Security - News

Phishing site spoofing secure login page

Posted: February 8th, 2010, 4:36pm CET

A phishing site masquerading as the secure login page of CenturyLink, the fourth largest local exchange telephone carrier in the US in terms of access lines, has been discovered by TrendLabs: The...
Zero-day vulnerabilities on the market

Posted: February 8th, 2010, 4:01pm CET

Zero-day vulnerabilities have become prized possessions to attackers and defenders alike. As the recent China-Google attack demonstrated, they are the basis on which most of the successful attacks are...

SANS Internet Storm Center, InfoCON: green

When is a 0day not a 0day? Fake OpenSSh exploit, again. , (Mon, Feb 8th)

Posted: February 8th, 2010, 3:58pm CET

When is a 0day in OpenSSH not a 0day? When it's local exploit code. Not the kind that exploits a vul ...(more)...

Computerworld Security News

Why CSOs Should Care About ShmooCon

Posted: February 8th, 2010, 3:56pm CET

CSO Senior Editor Bill Brenner on why high-level security execs should pay more attention to a hacker fest like ShmooCon.

ZATAZ News

[nt]

Posted: February 8th, 2010, 3:47pm CET

Computerworld Security News

Malwarebytes' Anti-Malware Free

Posted: February 8th, 2010, 3:47pm CET

You can't depend on just one program to protect you from rootkits, Trojans, viruses, worms, and other malicious code. The job is too important and the villains too numerous for that. So supplement your regular antivirus program (the one you keep running in the background at all times) with an extra malware scanner, such as Malwarebytes' Anti-Malware Free.

Zone-H Defaces

www.chambreblanche.qc.ca

Posted: February 8th, 2010, 2:50pm CET

chambreblanche.qc.ca défacé par DrAeX
inside.mkb.ma

Posted: February 8th, 2010, 2:29pm CET

inside.mkb.ma défacé par ByLenis
mkb.ma

Posted: February 8th, 2010, 2:28pm CET

mkb.ma défacé par ByLenis

Help Net Security - News

Rogue software details: AntiSpyware

Posted: February 8th, 2010, 1:43pm CET

AntiSpyware is a rogue security application. In order to remove it, find out what files and registry entries to look for below. Known system changes: Files c:\Desktop\Antispyware.lnk Folde...
Sensitive information retrieved from P2P networks

Posted: February 8th, 2010, 1:35pm CET

Security researchers Larry Pesce and Mick Douglas demonstrated on Friday - at this year's ShmooCon security conference in Washington, D.C - the amazing variety of sensitive information that people sen...

Schneier on Security

More Details on the Chinese Attack Against Google

Posted: February 8th, 2010, 1:03pm CET

Three weeks ago, Google announced a sophisticated attack against them from China. There have been some interesting technical details since then. And the NSA is helping Google analyze the attack. The rumor that China used a system Google put in place to enable lawful intercepts, which I used as a news hook for this essay, has not been confirmed. At...

The Register - Security

Leaky anti-virus defences letting malware through

Posted: February 8th, 2010, 12:44pm CET

Spanky new scanners no longer cutting it
Even users running up-to-date anti-virus software still get infected with malware, according to stats from an online malware scanning service.…

Help Net Security - News

Biggest Chinese hacker training site taken down

Posted: February 8th, 2010, 12:08pm CET

Black Hawk Safety Net, the biggest Chinese hacker training site, has been shut down by the police. The tally is: three people arrested; nine Web servers, five computers and one car confiscated; $249,0...

Computerworld Security News

Security Manager's Journal: Latest malware is a call to action

Posted: February 8th, 2010, 12:00pm CET

Practice tempers panic. But the Google 'Operation Aurora' malware required a few extra precautions.
The top 5 mistakes of privacy awareness programs

Posted: February 8th, 2010, 12:00pm CET

Privacy consultant Jay Cline identifies the errors companies often make when trying to educate employees about data protection.

The Register - Security

China stomps cybercrook training outfit

Posted: February 8th, 2010, 11:32am CET

Black Hawk taken down
Chinese authorities have closed down a firm that allegedly trained hackers to develop spyware and launch cyberattacks.…
Microscope-wielding boffins crack cordless phone crypto

Posted: February 8th, 2010, 9:03am CET

DECT vivisection
Cryptographers have broken the proprietary encryption used to prevent eavesdropping on more than 800 million cordless phones worldwide, demonstrating once again the risks of relying on obscure technologies to remain secure.…
The power of collaboration within unified communications

Computerworld Security News

Sharp, Samsung settle all outstanding LCD patent cases

Posted: February 8th, 2010, 8:16am CET

Sharp and Samsung have put nearly three years of battling over LCD panel and module patents behind them with a deal that ends all ongoing patent infringement disputes, they said Monday.
China shuts hacker training site, arrests three

Posted: February 8th, 2010, 8:04am CET

Chinese police have shut down what they called the country's biggest hacker training Web site and arrested three people linked to the site.

Help Net Security - News

Safer surfing mobile social networks

Posted: February 8th, 2010, 7:59am CET

ENISA (the European Network and Information Security Agency) today presents a new report on accessing social networks over mobile phones which points out the risks and threats of mobile social network...
Week in review: cloud computing security, black hat hacking, identity theft

Posted: February 8th, 2010, 7:36am CET

Here's an overview of some of last week's most interesting news, reviews and articles: Cloud computing not as safe as they want you to think Cloud computing has been touted as the perfect soluti...

Hack In The Box

Blackberry spyware source code released

Posted: February 8th, 2010, 1:00am CET

Veracode today released Blackberry-specific spyware, which the code-review specialist intends as a âcall for defensive researchâ to show that the BlackBerry is vulnerable to spyware problems. âThe Blackberry âsandboxâ keeps you from getting into the operating system level. Itâs effective for that,â says Tyler Shields, senior researcher at Veracode Research Lab and author of the Blackberry spyware. âBlackBerry is one of the better operating systems in regards to security,â he says, âbut in the sandbox you can steal data.â Shields says the point in releasing the spyware source code, which he calls TXSBBspy, is to âshow how easy it is to write this code.â He calls the source code a blueprint for malware on the BlackBerry, showing how itâs possible to remotely dump all the contents, send the contents via e-mail, and conduct real-time monitoring of phone messages.
P2P Snoopers Know What's In Your Wallet

Posted: February 8th, 2010, 1:00am CET

Being security researchers and all, Larry Pesce and Mick Douglas thought it would be a hoot to take a look at some of the information people send out over peer-to-peer (P2P) networks. They were taken aback by what they found. At the 2010 ShmooCon security conference Friday, the duo showed off the extremely sensitive information they've been able to intercept, including driver's licenses and passports, tax return forms with Social Security numbers; someone's last will and testament and information on one man's secret activities that could potentially be exploited by terrorists. Douglas and Pesce were inspired to look at P2P networks after highly-publicized incidents where details on a U.S. Secret Service safe house for the First Family leaked out on a LimeWire file-sharing network. In another incident, classified data on the communications, navigation and management systems on Marine One were found in a publicly available shared folder on a computer in Tehran, Iran, after apparently being leaked over a P2P network.
Symantec hit with class-action lawsuit over auto-renewals

Posted: February 8th, 2010, 1:00am CET

A New York man has sued security software maker Symantec for automatically renewing his subscription to Norton Antivirus, alleging that the company did not notify him before charging $76 to his credit card. The lawsuit comes seven months after the New York Attorney General's office fined Symantec $375,000 for the practice and ordered it to give notice before renewing any subscription. According to the lawsuit filed Jan. 19 in a New York County court, Kenneth Elan of Port Washington, N.Y., purchased a copy of Norton Antivirus in 2007. Early in November 2009, Symantec told him that it had automatically renewed his license to the software for one year, and charged his credit card $76.03. Elan said he had not been notified prior to the charge hitting his card.
Internet Overuse Invites Depression, Study Says

Posted: February 8th, 2010, 1:00am CET

These studies always drive me to despair. According to a BBC report: "There is a strong link between heavy Internet use and depression, UK psychologists have said. The study, reported in the journal Psychopathology, found 1.2% of people surveyed were 'Internet addicts,' and many of these were depressed." And I'll bet a lot of them drink too much and can recite every flavor of Ben & Jerry's.
Recovery, Transformation for IT, Telecom in 2010

Posted: February 8th, 2010, 1:00am CET

Climbing out of the smoking crater of 2009, the IT and telecom industries will see growth rebound next year amid a set of transformational changes, according to the 2010 outlook from research firm IDC. Driving those transformations will be the spread of cloud-based computing and telephony, the continued explosion in smartphones, and the demand for increased bandwidth to feed demand on both desktop and mobile devices. âWith a global economic recovery widely anticipated, modest growth in IT and telecommunications spending is expected,â the research firm said in its influential Predictions 2010 study. âBut the industry is entering this recovery year with an ambitious agenda, making transformation the more interesting theme of IDC's predictions for 2010.â The global economic recession acted as a âpressure cookerâ that sped the development and adoption of new technologies and new business models, explained IDC chief analyst Frank Gens. âWhat's different about 2010 is that the economic recovery will release some of the pressure on spending, enabling a number of transformational tipping points to be reached in a year of economic upswing."
iPad Study: The More You Know, The Less You Want One

Posted: February 8th, 2010, 1:00am CET

The more people know about the iPad, the less they want to buy one, according to a study released Friday. But, are we expecting too much? The study seems to confirm the iPad as Apple's least exciting announcement in years. And the company is feeling the backlash that comes from not delivering on the hype. Retrevo, an online marketplace for consumer electronics, surveyed 1,000 of its customers and found that the iPad's Jan. 27 announcement did more to snuff out customer interest than to spark it. That's not surprising when all Apple introduced was just a supersized (and superexpensive at the high end) iPod touch. My friend and fellow pundit Larry Magid described as the iPad as "underwhelming."
BlackBerry has spyware risk too, researcher says

Posted: February 8th, 2010, 1:00am CET

We've heard a lot about security issues with the iPhone, but the BlackBerry isn't immune to threats from malicious apps. Tyler Shields, a senior researcher at the Veracode Research Lab, has written a piece of spyware that allowed me to shoot an SMS command to his phone and have his contact list forwarded to my e-mail address in a demonstration. With another short text command, I was able to get his BlackBerry to e-mail me any SMS messages he sends. And if I had wanted--and he had allowed me--I could have seen a log of all his calls, monitored his inbound text messages, tracked his location in real-time based on the GPS (Global Positioning System) in his device and turned his microphone on to listen to conversations in the room and record them.
High-tech to keep Super Bowl on track

Posted: February 8th, 2010, 1:00am CET

As the players, coaches and halftime performers -- not to mention the Lombardi Trophy -- make their way to Miami's Sun Life Stadium for the Super Bowl on Sunday, Jerry Hunter and company will be keeping a close eye on them. The Super Bowl has contracted with Hunter's US Fleet Tracking to use its real-time GPS tracking system, which uses satellite technology that can "ping" a vehicle's location every few seconds. The Web-based mapping system will be just one of the high-tech gadgets used Sunday to make sure the party for 74,000 people runs smoothly. "You think you and your wife have a struggle throwing a dinner party with 30 guests -- making sure everything is where it's supposed to be at the right time?" he said. "Imagine the Super Bowl."
AU Gov't Still Wants ISPs To Solve Illegal Downloads

Posted: February 8th, 2010, 1:00am CET

In the wake of iiNet's recent court win, Minister for Broadband, Communications and the Digital Economy Stephen Conroy has said that he wants the film and internet industries to sit down and try and work out a code of conduct to prevent pirating of copyrighted works rather than working towards legislation changes. "I would hope to encourage the [internet service providers] and the movie industries to sit down and try and come up with a code of conduct and let's see where that goes before we start leaping off down that path," he told the ABC's Hungry Beast program on Friday. "I think that a mature approach by both the movie industry and the internet industry sitting down, having a conversation, and coming up with a code of practice is the absolute preferable outcome. The problem is at the moment in Australia there is no agreement, there is no discussion, there is no dialogue and people resorted to court," he said.
How the NSA Deal Could Kill Google

Posted: February 8th, 2010, 1:00am CET

The company once known for its âdonât be evilâ motto is now in bed with the spy agency known for the mass surveillance of American citizens. The National Security Agency is widely understood to have the governmentâs biggest and smartest collection of geeks â the guys that are more skilled at network warfare than just about anyone on the planet. So, in a sense, itâs only natural that Google would turn to the NSA after the company was hit by an ultrasophisticated hack attack. After all, the military has basically done the same thing, putting the NSA in charge of its new âCyber Command.â The Department of Homeland Security is leaning heavily on the NSA to secure .gov networks. But thereâs a problem. The NSA and its predecessors also have a long history of spying on huge numbers of people, both at home and abroad. During the Cold War, the agency worked with companies like Western Union to intercept and read millions of telegrams. During the war on terror years, the NSA teamed up with the telecommunications companies to eavesdrop on customersâ phone calls and internet traffic right from the telcosâ switching stations. And even after the agency pledged to clean up its act â and was given wide new latitude to spy on whom they liked â the NSA was still caught âovercollectingâ on U.S. citizens. According to The New York Times, the agency even âtried to wiretap a member of Congress without a warrant.â
Apple's new beta of Mac OS X 10.6.3 includes few changes

Posted: February 8th, 2010, 1:00am CET

Apple on Friday evening equipped developers with yet another build of its upcoming maintenance and security update for Mac OS X 10.6 Snow Leopard that includes few changes from an earlier build distributed two weeks ago. People familiar with the matter say Mac OS X 10.6.3 build 10D548 was distributed alongside an enhancement and focus list nearly identical to build 10D538, which made its way to a small subset of developers last month, as AppleInsider exclusively reported. The only distinguishable change noted in documentation, those people say, was a request by the Mac maker for its developers to add iCal and printing functions to their evaluation efforts, alongside AirPort, QuickTime and graphics drivers. A prior emphasis on VoiceOver was reportedly not extended to build 10D548.
Security flaw puts iPhone users at risk of phishing attacks (Updated)

Posted: February 8th, 2010, 1:00am CET

When Apple introduced iPhone OS 3.0, it attempted to beef up the security of over-the-air enterprise management of iPhones by adding support for Cisco Systems' Simple Certificate Enrollment Protocol (SCEP). However, a flaw in the implementation of the standard could allow hackers to offer mobile configuration files that appear to be from a legitimate source, but may otherwise set your iPhone to access malicious servers. Ars spoke with a mobile security expert who discovered the problem (who asked to remain anonymous because he did not have approval to talk about the issue). He told Ars that the issue is one of trust: "Who would you trust to change your iPhone configuration over the air? Your carrier? Your company? Your IT security admin?" he asked. Apple uses SCEP as a way for the iPhone to check in with a certificate server to verify that a mobileconfig file has been signed by a trusted source, but flaws in the set-up on the iPhone mean that the process doesn't always work as intended.
Unannounced Core i7 Apple MacBook Pro surfaces in benchmarks logs

Posted: February 8th, 2010, 1:00am CET

A benchmark report for an unreleased Apple MacBook Pro sporting Intel's upcoming dual-core 2.66GHz Core i7 mobile processor was published online this week, suggesting a refresh to the professional notebook line may be imminent. The Geekbench report, which can be seen in its entirety here, was submitted on February 4th and subsequently spotted by a MacRumors forum member. It lists the model as a MacBook Pro 6,1 -- a previously unused MacBook Pro identifier -- running an unreleased build of Mac OS X 10.6.2 labeled 10C3067. More specifically, the chip that registered inside the unreleased MacBook Pro is the Core i7 M 620, which represents the highest-performance chip announced as part of Intel's new Arrandale mobile offerings last month.
Indian IT Giant Tata Consultancy Services Hacked

Posted: February 8th, 2010, 1:00am CET

The website Tata Consultancy Services, India's largest software vendor, has been hacked. The hacker has posted a "For Sale" message on the site, which is written in both French and English. Ironically, the company produces security systems software. The hack is believed to be a DNS hijack, which is similar to the breach that Twitter succumbed to last year. TechCrunch was also recently hacked earlier this year.
ShmooCon: Inside FarmVille's sinister underbelly

Posted: February 8th, 2010, 1:00am CET

You see it all the time on Facebook: A friend moving on up in FarmVille. Another friend trying to expand his posse in Mafia Wars. Everyone thinks of them as harmless third-party applications, free from the crooks and cooks of cyberspace. Unfortunately, that's not the case. The sad fact is that these applications are susceptible to malware pushers and those looking to steal your personal information. It's not much of a stretch for hackers to impersonate people you think are trusted, fellow players, as is the case with a lot of online gaming. And the more you expose yourself, the bigger the target you become. The dangers of these games were part of a larger talk on social networking dangers at the 2010 ShmooCon security conference. Indeed, social networkers are in danger from all corners, be it from malicious Twitter bots you think is a celebrity following you or that hot model who friended you on Facebook, hoping you wouldn't notice that she's nothing more than a phishing hook.
Six golden rules for strong passwords

Posted: February 8th, 2010, 1:00am CET

Waking up to someone asking you for help because their password has been hacked is an unpleasant experience. But such calls are becoming commonplace, not because hackers are becoming smarter (well they are), but because people are stupid enough to keep their passwords simple. A recently released report from Imperva [tinyurl.com] highlights that the most common password used by people is 123456. Moreover, 30 per cent of people use passwords under or equal to six characters, only 60 per cent of them use alpha-numerics and nearly half use slang words, consecutive digits and so on. Thatâs why I have decided to share with you the six golden rules of a good password.
The FBI Wants to Know Where You are Online

Posted: February 8th, 2010, 1:00am CET

An article posted yesterday on CNET has Internet users bashing the FBI up one side â and down the other. Many are screaming about âBig Brotherâ, and civil rights. Others are proclaiming that they are going to leave the Internet completely, which I honestly donât see happening. Seriously, folksâ¦ youâd be able to totally give up your online life? According to the article, the FBI is pressing Internet service providers to record which Web sites customers visit and retain those logs for two years, a requirement that law enforcement believes could help it in investigations of child pornography and other serious crimes. If logs of Web sites visited began to be kept, they would be available only to local, state, and federal police with legal authorization such as a subpoena or search warrant. Itâs unclear what, exactly, the FBI wants to keep track of. The possibilities include requiring an Internet provider to log the Internet protocol (IP) address of a Web site visited, a domain name, a host name, or an actual website URL. While the first three categories could be logged without doing deep packet inspection, the fourth category would require it. That could run up against opposition in Congress.

Database servers + Mail clients + Java + Software + Network gear + Operating Systems + Apple + Linux + Debian + Ubuntu + Fedora + Red Hat + SuSE + Microsoft Windows + FreeBSD + Solaris + Other UNIX-flavors + Anti-virus software + Mail servers + Other ser

Oracle WebLogic Server Node Manager Unspecified Vulnerability

Posted: February 8th, 2010, 12:00am CET by cert

                CERT.be Alert Summary
                ---------------------
Platform : Various platforms
Software : Oracle WebLogic Server 10.x
           Oracle WebLogic Server 7.x
           Oracle WebLogic Server 8.x
           Oracle WebLogic Server 9.x
Severity : Medium
Impact   : System access
Where    : From local network
Status   : Vendor Patched
CVE      : CVE-2010-0073
CVSS     : 8.3
Reference: [secunia.com] Advice   : A vulnerability has been reported in Oracle WebLogic Server,
           which can be exploited by malicious people to compromise a
           vulnerable system.

Fedora update for chrony

Posted: February 8th, 2010, 12:00am CET by cert

                CERT.be Alert Summary
                ---------------------
Platform : Fedora 11
           Fedora 12
Software : Various packages
Severity : Medium
Impact   : DoS
Where    : From remote
Status   : Vendor Patched
CVE      : CVE-2010-0292 CVE-2010-0293 CVE-2010-0294
CVSS     : 7.1
Reference: [secunia.com] Advice   : Fedora has issued an update for chrony. This fixes a security
           issue and a vulnerability, which can be exploited by
           malicious people to cause a DoS (Denial of Service).

Oracle Database Two Security Issues

Posted: February 8th, 2010, 12:00am CET by cert

                CERT.be Alert Summary
                ---------------------
Platform : Various platforms
Software : Oracle Database 11.x
Severity : Low
Impact   : Privilege escalation
           System access
Where    : From local network
Status   : Unpatched
CVSS     : 7.7
Reference: [secunia.com] Advice   : David Litchfield has reported two security issues in Oracle
           Database, which can be exploited by malicious users to gain
           escalated privileges and compromise a vulnerable system.

TaoSecurity

So Much for China's "Peaceful Rise"

Posted: February 7th, 2010, 8:35pm CET by Richard Bejtlich

I was not surprised to read China’s hawks demand cold war on the US in the Times Online.

[A]lmost 55% of those [in China] questioned for Global Times, a state-run newspaper, agree that “a cold war will break out between the US and China”...

An independent survey of Chinese-language media for The Sunday Times has found army and navy officers predicting a military showdown and political leaders calling for China to sell more arms to America’s foes...

“This time China must punish the US,” said Major-General Yang Yi, a naval officer. “We must make them hurt.” A major-general in the People’s Liberation Army (PLA), Luo Yuan, told a television audience that more missiles would be deployed against Taiwan. And a PLA strategist, Colonel Meng Xianging, said China would “qualitatively upgrade” its military over the next 10 years to force a showdown “when we’re strong enough for a hand-to-hand fight with the US”...

As a crescendo of strident nationalistic rhetoric swirls through the Chinese media and blogosphere, American officials seem baffled by what has gone wrong and how fast it has happened...

“The truth was that the atmosphere was cold and intransigent when the president went to Beijing yet his China team went on pretending that everything was fine,” the diplomat said.

American officials have been "baffled" because they fell for the so-called "peaceful rise" propaganda promulgated by the Chinese government and its sympathizers and apologists in the West. Now that the Chinese government is feeling confident, it's less inclined to keep its true intentions out of its state-run media. As Liu Menxiong, a member of the Chinese people’s political consultative conference, said in the article:

“We have nothing to be afraid of. The North Koreans have stood up to America and has anything happened to them? No. Iran stands up to America and does disaster befall it? No.”Copyright 2003-2009 Richard Bejtlich and TaoSecurity (taosecurity.blogspot.com and www.taosecurity.com)

ZATAZ News

[nt]

Posted: February 7th, 2010, 7:09pm CET

Network World on Security

Searches for news trends lead to malware

Posted: February 7th, 2010, 5:00pm CET by Carrie-ann Skinner

Nearly 14 percent of all searches for news trends on Google or buzzwords on Yahoo lead to malware, says Websense.
Symantec hit with class-action lawsuit over auto-renewals

Posted: February 7th, 2010, 5:00pm CET by Gregg Keizer

A New York man has sued security software maker Symantec for automatically renewing his subscription to Norton Antivirus, alleging that the company did not notify him before charging $76 to his credit card.
ShmooCon: P2P Snoopers Know What's In Your Wallet

Posted: February 7th, 2010, 5:00pm CET by Bill Brenner

People send their most sensitive personal information out over P2P networks, and the bad guys are watching.
ShmooCon: Your iPhone's Dirty Little Security Secret

Posted: February 7th, 2010, 5:00pm CET by Bill Brenner

Just how easy is it for the bad guys to use your iPhone against you? Well, pretty easy. Trevor Hawthorn explains what to do about it.
ShmooCon: Inside FarmVille's Sinister Underbelly

Posted: February 7th, 2010, 5:00pm CET by Bill Brenner

You love Facebook apps like FarmVille and Mafia Wars and think they're perfectly safe, right? Think again.

Zone-H Defaces

www.landrover.ma

Posted: February 7th, 2010, 4:46pm CET

landrover.ma défacé par netKILLER

Computerworld Security News

ShmooCon: Your iPhone's dirty little security secret

Posted: February 7th, 2010, 4:22pm CET

Just how easy is it for the bad guys to use your iPhone against you? Well, pretty easy. Trevor Hawthorn explains what to do about it.

SANS Internet Storm Center, InfoCON: green

Mandiant Mtrends Report, (Sun, Feb 7th)

Posted: February 7th, 2010, 3:56pm CET

Once again a lazy weekend to catch up on some reading. One of the items that came across my em ...(more)...

Zone-H Defaces

www.flandersit-services.be

Posted: February 7th, 2010, 3:32pm CET

flandersit-services.be défacé par DATA ir Security Group
www.fitshotel.be

Posted: February 7th, 2010, 3:32pm CET

fitshotel.be défacé par DATA ir Security Group
www.fits.be

Posted: February 7th, 2010, 3:32pm CET

fits.be défacé par DATA ir Security Group
easyweb.easymarketing.be

Posted: February 7th, 2010, 3:32pm CET

easyweb.easymarketing.be défacé par DrAeX
www.weekend-company.be

Posted: February 7th, 2010, 3:32pm CET

weekend-company.be défacé par DrAeX
www.driesen-afsluitingen.be

Posted: February 7th, 2010, 3:32pm CET

driesen-afsluitingen.be défacé par DrAeX
www.eurotest.be

Posted: February 7th, 2010, 3:31pm CET

eurotest.be défacé par DATA ir Security Group
www.maxpels.be

Posted: February 7th, 2010, 3:31pm CET

maxpels.be défacé par DATA ir Security Group
www.stichting-prins-laurent.be

Posted: February 7th, 2010, 3:31pm CET

stichting-prins-laurent.be défacé par DATA ir Security Group
anpeb.cyberwork.be

Posted: February 7th, 2010, 3:31pm CET

anpeb.cyberwork.be défacé par DATA ir Security Group
www.moneymaxx.be

Posted: February 7th, 2010, 3:31pm CET

moneymaxx.be défacé par DATA ir Security Group
www.publisac.be

Posted: February 7th, 2010, 3:31pm CET

publisac.be défacé par DATA ir Security Group
baby-rose.cyberwork.be

Posted: February 7th, 2010, 3:31pm CET

baby-rose.cyberwork.be défacé par DATA ir Security Group
www.christianbecart.be

Posted: February 7th, 2010, 3:31pm CET

christianbecart.be défacé par DATA ir Security Group
www.remacle.be

Posted: February 7th, 2010, 3:31pm CET

remacle.be défacé par DATA ir Security Group
www.baby-rose.be

Posted: February 7th, 2010, 3:31pm CET

baby-rose.be défacé par DATA ir Security Group
notairedemeuredelespaul.cyberwork.be

Posted: February 7th, 2010, 3:31pm CET

notairedemeuredelespaul.cyberwork.be défacé par DATA ir Security Group
www.opus.be

Posted: February 7th, 2010, 3:31pm CET

opus.be défacé par DATA ir Security Group
www.quartiersaintjacques.be

Posted: February 7th, 2010, 3:31pm CET

quartiersaintjacques.be défacé par DATA ir Security Group
www.euremis.be

Posted: February 7th, 2010, 3:31pm CET

euremis.be défacé par DATA ir Security Group
lotnatlot.cyberwork.be

Posted: February 7th, 2010, 3:31pm CET

lotnatlot.cyberwork.be défacé par DATA ir Security Group
www.latino.be

Posted: February 7th, 2010, 3:31pm CET

latino.be défacé par DATA ir Security Group
www.anpeb.be

Posted: February 7th, 2010, 3:31pm CET

anpeb.be défacé par DATA ir Security Group
www.cebelor.be

Posted: February 7th, 2010, 3:31pm CET

cebelor.be défacé par DATA ir Security Group
www.cyberwork.be

Posted: February 7th, 2010, 3:31pm CET

cyberwork.be défacé par DATA ir Security Group
www.aegon.be

Posted: February 7th, 2010, 3:31pm CET

aegon.be défacé par DATA ir Security Group
www.fondation-prince-laurent.be

Posted: February 7th, 2010, 3:31pm CET

fondation-prince-laurent.be défacé par DATA ir Security Group
www.lvmeb.be

Posted: February 7th, 2010, 3:31pm CET

lvmeb.be défacé par DATA ir Security Group
www.fengshui88.be

Posted: February 7th, 2010, 3:31pm CET

fengshui88.be défacé par DATA ir Security Group
www.hotel-parc.fr

Posted: February 7th, 2010, 3:16pm CET

hotel-parc.fr défacé par DrAeX

Schneier on Security

New Attack on Threefish

Posted: February 7th, 2010, 3:06pm CET

At FSE 2010 this week, Dmitry Khovratovich and Ivica Nikolic presented a paper where they cryptanalyze ARX algorithms (algorithms that use only addition, rotation, and exclusive-OR operations): "Rotational Cryptanalysis of ARX." In the paper, they demonstrate their attack against Threefish. Their attack breaks 39 (out of 72) rounds of Threefish-256 with a complexity of 2252.4, 42 (out of 72) rounds...

Computerworld Security News

ShmooCon: Inside FarmVille's sinister underbelly

Posted: February 7th, 2010, 2:50pm CET

You love Facebook apps like FarmVille and Mafia Wars and think they're perfectly safe, right? Think again.
Symantec hit with class-action lawsuit over auto-renewals

Posted: February 7th, 2010, 1:57pm CET

A New York man has sued security software maker Symantec for automatically renewing his subscription to Norton Antivirus, alleging that the company did not notify him before charging $76 to his credit card.

SANS Internet Storm Center, InfoCON: green

LANDesk Management Gateway Vulnerability, (Sat, Feb 6th)

Posted: February 6th, 2010, 9:30pm CET

LANDesk has released a security fix for a vulnerability reported for the LANDesk Management Gateway ...(more)...

TaoSecurity

APT Presentation from July 2008

Posted: February 6th, 2010, 8:11pm CET by Richard Bejtlich

Some of you may remember me mentioning the 2008 SANS WhatWorks in Incident Response and Forensic Solutions Summit organized by Rob Lee. I provided the keynote and really enjoyed listening to the presentations, which Rob has graciously made available at [files.sans.org] . One of the presentations, by Mandiant consultant Wendi Rafferty and then-Mandiant consultant (now GE-CIRT incident handler) Ken Bradley, was titled Slaying the Red Dragon.

As you can see from the first two slides shown at left, this was presentation explicitly addressed advanced persistent threat. I didn't mention it originally because it discusses a specific attack vector. However, it's been over 18 months since the presentation was made. Therefore, to show that APT is "not a new term" but also to share some technical insights, I thought it acceptable to advertise this presentation.

By the way, the presentations from the 2009 event are posted at [files.sans.org] .

I'm sure we will discuss this topic at the 2010 Incident Response Summit and the 2010 Incident Detection Summit.Copyright 2003-2009 Richard Bejtlich and TaoSecurity (taosecurity.blogspot.com and www.taosecurity.com)
Review of The Book of Xen Posted

Posted: February 6th, 2010, 7:52pm CET by Richard Bejtlich

Amazon.com just posted my five star review of The Book of Xen by Chris Takemura and Luke S. Crawford. From the review:

The Book of Xen (TBOX) is a great book for Linux system administrators who want to deploy Xen. The authors ground their recommendations in over four years of experience running Xen to support Internet-facing virtual private servers. I found their writing style to be very engaging; it reminded me of reading any one of Michael Lucas' No Starch books. If you know your way around Linux and want to deploy Xen in production, TBOX is the book for you.

Thank you to No Starch for providing me a free review copy.Copyright 2003-2009 Richard Bejtlich and TaoSecurity (taosecurity.blogspot.com and www.taosecurity.com)

Zone-H Defaces

www.inteba.be

Posted: February 6th, 2010, 6:03pm CET

inteba.be défacé par Dietime
www.express-modelisme.be

Posted: February 6th, 2010, 5:43pm CET

express-modelisme.be défacé par ByLenis
www.farfouiller.fr

Posted: February 6th, 2010, 5:43pm CET

farfouiller.fr défacé par ByLenis

1 2 3 ... 20

Secu.be

Feeds

Unread items (86)

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Fetched: February 8th, 2010, 10:48pm CET

Posted: February 8th, 2010, 10:42pm CET

Posted: February 8th, 2010, 9:52pm CET

Posted: February 8th, 2010, 9:52pm CET

Posted: February 8th, 2010, 9:46pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Fetched: February 8th, 2010, 9:35pm CET

Posted: February 8th, 2010, 8:54pm CET

Posted: February 8th, 2010, 8:47pm CET

Fetched: February 8th, 2010, 8:32pm CET

Fetched: February 8th, 2010, 8:32pm CET

Posted: February 8th, 2010, 7:50pm CET

Posted: February 8th, 2010, 7:01pm CET

Posted: February 8th, 2010, 6:47pm CET

Fetched: February 8th, 2010, 3:59pm CET

Posted: January 30th, 2010, 11:30pm CET

Posted: January 30th, 2010, 11:16pm CET

Posted: January 28th, 2010, 11:54am CET

Posted: January 28th, 2010, 10:07am CET

Posted: January 28th, 2010, 9:50am CET

Posted: January 27th, 2010, 4:38pm CET

Posted: January 26th, 2010, 4:09pm CET

Posted: January 26th, 2010, 3:44pm CET

Posted: January 26th, 2010, 10:57am CET

Posted: January 26th, 2010, 10:55am CET