Lilupophilupop tops 1million infected pages, (Sat, Dec 31st)
Updated: 2011-12-31 07:33:00
Earlier in the month we published an article regarding the lilupophilupop.com SQL injection attacks ...(more)...
Bye 2011, Hello 2012, what will you have in store for us?, (Sat, Dec 31st)
Updated: 2011-12-31 06:57:26With the last day of the year well and truly on the way in most parts of the world and almost finis ...(more)...Hitchens vs. Strunk and White
Updated: 2011-12-31 00:32:52.Amazon Kindle Winner Announced. Join our January VEF and Win!
Updated: 2011-12-30 19:16:36As you all know, every month we host our Vulnerability Expert Forum (VEF) webinar. This is a time where our experts share valuable insight regarding new vulnerabilities that are discovered and the actions that need to be taken as a result. It’s a quick way to get up to speed on current potential risks to your [...]An Intro to Dubstep
Updated: 2011-12-30 16:34:20via youtube.com My favorite is still currently HardStyle, but I’m getting more acquainted with DubStep. Posted via email from danielmiessler.com | posterous Related ContentMy Favorite IllusionIf China Attacks America (A Must See)Hitler Finds Out There’s No iPhone 5David Simon on the End of the American EmpireAdding Malware to Android ApplicationsWhy Libertarianism Doesn’t Work | Daily Kos
Updated: 2011-12-30 15:26:11Libertarianism, in other words, is infallible. Wherever it fails, it does so because the people weren’t ready for it, or there was too much violence to allow it to work, or because the government wasn’t powerful enough to protect people from harm. Libertarians fail to realize that there has never been–and never will be–a government [...]Dell, Cisco, IBM Among Top Buyers of Security Companies in 2011
Updated: 2011-12-30 14:45:26, , IT Security Network Security News Reviews eWeek HOME NEWS REVIEWS STORAGE SECURITY DESKTOPS NOTEBOOKS MOBILITY Cloud Computing BLOGS WHITE PAPERS WEBCASTS Security News Security Reviews Security Blogs IT Infrastructure Government IT Open Source Enterprise Networking Applications Videos All eWeek Topics Home IT Security Network Security News Reviews News Reviews Dell , Cisco , IBM Among Top Buyers of Security Companies in 2011 IT Security Network Security News Reviews : Dell , Cisco , IBM Among Top Buyers of Security Companies in 2011 By Fahmida Y . Rashid on 2011-12-30 There have been a number of major acquisitions in the security space in the past two years , including Hewlett-Packard purchasing ArcSight for 1.6 billion , Symantec acquiring Verisign for 1.3 billion , Apax PartnersRaytheon Buys Henggeler Computer Consultants for Key Intelligence Contracts
Updated: 2011-12-30 05:28:08
Defense contractor Raytheon has acquired privately held Henggeler Computer Consultants, an enterprise architecture, software and analytics systems integrator for intelligence and defense customers. - Defense contractor Raytheon has acquired Henggeler Computer Consultants, its third cyber-related acquisition in 2011.
Raytheon acquired Henggeler, based in Columbia, Md., to expand Raytheon's cyber-security portfolio and better meet the needs of its customers in the intelligence community, the defe...Wi-Fi Protected Setup (WPS) PIN Brute Force Vulnerability, (Fri, Dec 30th)
Updated: 2011-12-30 03:19:11Wi-Fi Protected Setup (WPS)is a Wi-Fi Alliance specification (v1.0 - available since January 2 ...(more)...ISC StormCast for Friday, December 30th 2011 http://isc.sans.edu/podcastdetail.html?id=2227, (Fri, Dec 30th)
Updated: 2011-12-30 02:55:46...(more)...How to Reclaim the Quality of Your Reddit Experience | Reddit
Updated: 2011-12-29 23:28:33Step two: Find newer, better subreddits. Part a: There are lots of subreddits focused on the idea of “depth.” This somewhat nebulous concept is defined as having content that is more meaningful and interesting, that takes time and thinking to process. Look over the following subreddits and subscribe to the ones you like. There are [...]Daily Kos: German auto manufacturers’ high profits and high pay show why U.S. labor laws need to be stronger
Updated: 2011-12-29 23:10:26: .HashDoS Crashes Your New Year’s Eve Party (and your web server)
Updated: 2011-12-29 21:48:20Microsoft made the last few days of 2011 somewhat exciting by releasing an out -of-band patch, the only time all year they’ve deviated from a normal Patch Tuesday distribution. We’ll update this blog with new developments, so keep checking back for new information. So, what’s all the excitement about? The Microsoft advisory released yesterday addresses a [...]ASP.Net Vulnerability, (Thu, Dec 29th)
Updated: 2011-12-29 20:59:55We have been tracking this issue. Microsoft has an excellent write up on this ...(more)...Microsoft Patches ASP.NET Vulnerability
Updated: 2011-12-29 20:32:58Microsoft has issued a critical security patch to fix a vulnerability affecting all versions of Microsoft's .NET Framework. - Microsoft has released a
security update to patch an issue associated with Security
Advisory 2659883. The vulnerability apparently affects all versions of
Microsoft's .NET Framework, and could allow a denial-of-service attack on
servers for ASP.NET pages.
quot;The vulnerability
exists due to ...Flaw Makes WiFi Network Security Vulnerable to Brute-Force Attacks: US-CERT
Updated: 2011-12-29 20:21:29US-CERT warned the WPS PIN used by many routers to secure wireless networks could be exposed through brute-force decoding and it recommended disabling the PIN. An attack tool is already available. - A security researcher has demonstrated a flaw in the WiFi Protected standard that would expose Wireless networks to brute-force attacks, prompting the United States Computer Emergency Response Team to issue a vulnerability warning.
quot;The Wi-Fi Protected Setup (WPS) PIN is susceptible to a bru...Mobile Phone Users Remain Lax About Cyber-Security, Says McAfee
Updated: 2011-12-29 18:42:38Mobile device users continue to be lax about installing security software or using strong pass codes to protect data saved on their mobile devices, behavior that can have an impact on enterprises. - Mobile users have a false
sense of security when it comes to their devices, according to a recent report
from McAfee.
About 70 percent of
smartphone owners said they considered their devices to be safe from
cyber-crime, according to a report from the National Cyber-Security Alliance
and McAfee...Transferring DNS Registrars Not A Problem
Updated: 2011-12-29 18:28:00Network Computing www.networkcomputing.com RSS Newsletters Current Issue Issue Archives Slideshows Whitepapers About Us Mike Fratto Bio Archive Mike Fratto Network Computing Editor Home News and Analysis Pro Reports Tech Centers Deduplication End to End APM IPv6 Next Gen Network Private Cloud Public Cloud WAN Security Channels Backup Recovery Cloud Computing Cloud Storage Data Center Data Protection Networking Mgmt Servers Storage Storage Mgmt UC VoIP Virtualization WAN App Acceleration Wireless Bloggers Lee H . Badman Frank Berry Jeff Doyle Stephen Foskett Mike Fratto David Hill Jeremy Littlejohn Howard Marks Joe Onisick Jim Rapoza Upcoming Events Cloud Connect Santa Clara Feb 13-16, 2012 Cloud Connect brings together the entire cloud eco-system to better understand the transformationPriests in the Holy Land Attacking Each Other
Updated: 2011-12-29 04:38:27This is a video of Christians attacking each other at Christmas. I have nothing more to add. Related ContentThe Wrong War on Christmas | Conversations for Ministry LeadersChristians Sue For Right To Judge OthersWhy Attacking The Rich Means The End Of ProsperityHappyNews.com: Good TimingFPS View of Being Killed by a MIG-29Why Can’t We Tax Soda in The U.S.?
Updated: 2011-12-29 04:22:30.Criminals Used Affiliate Marketing Sites in Majority of Facebook Scams in 2011
Updated: 2011-12-29 04:13:41The majority of the Facebook scams in 2011 used social-engineering tactics to trick users into going to affiliate marketing sites to fill out surveys, Commtouch said. - Cyber-criminals are no longer just using Facebook for identity theft or phishing scams. Now, they are also using the social-networking platform to defraud affiliate businesses, according to security researchers.
Facebook swindlers directed their victims toward affiliate marketing sites in approxima...ISC StormCast for Thursday, December 29th 2011 http://isc.sans.edu/podcastdetail.html?id=2224, (Thu, Dec 29th)
Updated: 2011-12-29 02:40:01...(more)...CSOs Should Address Risks and Network Visibility With Board of Directors
Updated: 2011-12-29 01:43:53Boards of directors are asking their chief security officers to talk about security. This is an opportunity for these executives to address network visibility without overwhelming them with technical jargon. - Thanks to the number of high-profile security incidents and breaches in 2011, corporate boards and senior executives are thinking about security more than ever as they hammer out budget details and resource allocations for 2012.
As part of these discussions, many boards of directors, often for the ...Happy Secure New Year from eEye and Metasploit
Updated: 2011-12-28 23:42:12Since we announced our initial Retina Community integration with Metasploit, we’ve received tremendous positive feedback, both on the integration itself, as well as for delivering a uniquely seamless penetration testing toolset as a community offering. As we look toward 2012, we want to continue on that path and help deliver a Secure New Year, courtesy [...]Hash collisions vulnerability in web servers, (Wed, Dec 28th)
Updated: 2011-12-28 23:02:14A new vulnerability advisory by security firm n-runs [1] describes how hash tables in PHP5, ...(more)...Microsoft Releases Workarounds for DoS Zero-Day Bug in ASP.NET
Updated: 2011-12-28 19:26:51The newly disclosed vulnerability in Web application frameworks such as Microsoft's ASP.NET can be exploited to trigger a denial of service on vulnerable Web servers. - Microsoft
has released a workaround for an ASP.NET vulnerability to help protect Websites
against potential denial-of-service (DoS) attacks, according to a security
advisory.
The
publicly disclosed vulnerability affects all supported versions of the .NET
framework, but Microsoft is quot;not a...Anonymous, RSA Lead the Top IT Security News of 2011
Updated: 2011-12-28 16:07:25, IT Security Network Security News Reviews eWeek HOME NEWS REVIEWS STORAGE SECURITY DESKTOPS NOTEBOOKS MOBILITY Cloud Computing BLOGS WHITE PAPERS WEBCASTS Security News Security Reviews Security Blogs IT Infrastructure Government IT Open Source Enterprise Networking Applications Videos All eWeek Topics Home IT Security Network Security News Reviews News Reviews Anonymous , RSA Lead the Top IT Security News of 2011 IT Security Network Security News Reviews : Anonymous , RSA Lead the Top IT Security News of 2011 By Fahmida Y . Rashid on 2011-12-28 A series of data breaches , cyber-attacks and privacy missteps by major organizations dominated the news when it came to security in 2011. These incidents also revealed how vulnerable personal information was in this modern , interconnected2011 Was An Awesome Year For Networking
Updated: 2011-12-28 13:00:00Network Computing www.networkcomputing.com RSS Newsletters Current Issue Issue Archives Slideshows Whitepapers About Us Home News and Analysis Pro Reports Tech Centers Deduplication End to End APM IPv6 Next Gen Network Private Cloud Public Cloud WAN Security Channels Backup Recovery Cloud Computing Cloud Storage Data Center Data Protection Networking Mgmt Servers Storage Storage Mgmt UC VoIP Virtualization WAN App Acceleration Wireless Bloggers Lee H . Badman Frank Berry Jeff Doyle Stephen Foskett Mike Fratto David Hill Jeremy Littlejohn Howard Marks Joe Onisick Jim Rapoza Upcoming Events Cloud Connect Santa Clara Feb 13-16, 2012 Cloud Connect brings together the entire cloud eco-system to better understand the transformation we're experiencing and promises to be the defining event of theISC StormCast for Wednesday, December 28th 2011 http://isc.sans.edu/podcastdetail.html?id=2221, (Wed, Dec 28th)
Updated: 2011-12-28 03:53:40...(more)....nl.ai ?, (Wed, Dec 28th)
Updated: 2011-12-28 00:51:54Now . ...(more)...Random Thoughts on Election 2012
Updated: 2011-12-28 00:29:47The GOP is in turmoil because they realize everyone who is truly different from Obama is insane (Paul, Gingrich, Santorum), and the only person who can win is pretty much the same as Obama (Romney). Obama looks much like a moderate Republican running as a democrat, and Romney appears much like a conservative Democrat running [...]Targeted Attacks, Hacktivism, Mobile Malware Major 2011 Security Trends
Updated: 2011-12-27 23:55:30Targeted attacks, hacktivist campaigns and the rise of mobile malware were just a handful of security news that dominated 2011's headlines. - 2011
was a momentous year in many aspects for the security industry, with high
profile cyber-attacks and data breaches, but also a year in which many of the
incidents evoked a sense of déjà vu amongst industry observers.
quot;2011
was the Year of the Hack, quot; Harry Sverdlove, CTO of Bit9, t...Stratfor Denies Anonymous Compromised Client List
Updated: 2011-12-27 21:18:39Stratfor has asserted that hackers from the Anonymous collective did not steal its confidential client list, but rather a list of people who had purchased its publications. - Strategic Forecasting, an organization that focuses on
intenerational security issues, is downplaying the severity of the cyber-attack
it suffered over the weekend, claiming its client list had not been stolen.
A group of hackers claiming to be part of the hacktivist
collective Anonymous attacke...Enterprises Need Proper Computer Disposal Policies to Protect Sensitive Data
Updated: 2011-12-27 20:58:19Securely sanitizing hard disk drives and other IT equipment is critical when retiring old and obsolete equipment to prevent leaking sensitive data. - A new computer, mobile device or other
IT equipment generally requires some effort setting up and migrating data.
Enterprises also need to spend the time making sure the data is completely
removed from the equipment as it is replaced.
Organizations do not always stop to
consider the security im...Stratfor Targeted by Hacking Group Anonymous
Updated: 2011-12-26 13:23:52Hackers posted what they claimed to be personal details of the company's clients on the information-sharing site Pastebin. - The loosely-associated band
of hackers known as Anonymous claims to have targeted the global intelligence
think tank Strategic Forecasting, known as Stratfor, boasting on the microblogging
site Twitter that personal information, including credit card numbers,
belonging to Stratfor clients had be...How Roger Ailes Built the Fox News Fear Factory | Rolling Stone
Updated: 2011-12-25 19:38:50“It was as though we were looking at Mao,” recalls Charlie Reina, a former Fox News producer. The Foxistas went wild. They let the dogs out. Woof! Woof! Woof! Even those who disliked the way Ailes runs his network joined in the display of fealty, given the culture of intimidation at Fox News. “It’s like [...]Six Degrees of Lois Weisberg | Gladwell.com
Updated: 2011-12-25 19:36:21Everyone who knows Lois Weisberg has a story about meeting Lois Weisberg, and although she has done thousands of things in her life and met thousands of people, all the stories are pretty much the same. Lois (everyone calls her Lois) is invariably smoking a cigarette and drinking one of her dozen or so daily [...]Six Degrees of Lois Weisberg | Gladwell.com
Updated: 2011-12-25 19:36:19Everyone who knows Lois Weisberg has a story about meeting Lois Weisberg, and although she has done thousands of things in her life and met thousands of people, all the stories are pretty much the same. Lois (everyone calls her Lois) is invariably smoking a cigarette and drinking one of her dozen or so daily [...]An HTML 5 Christmas
Updated: 2011-12-25 18:03:41It’s Christmas day and I just happened upon a post by the Google Webmaster team talking about removing the HTML, HEAD, and BODY tags from their code, as they are evidently no longer necessary. I started looking at their code (particularly for their 404 pages), and it was very interesting. It’s a few minutes later [...]A Collection (of Collections) of Obama’s Accomplishments
Updated: 2011-12-25 14:03:21
This next year is going to yield many debates on what our current President has or has not accomplished in his first term. Here’s a collection (of lists) of what he has accomplished. http://obamaachievements.org/listA seriously comprehensive list of accomplishments, by category. PolitiFact Promises Kept ListingA phenomenally unbiased list of promises and statements made by Obama, [...]Religion 101 Final Exam | Ebon Musings
Updated: 2011-12-25 13:13:20Which of the following is the most compelling evidence for the existence of an intelligent and loving Designer? The little girl born in Egypt with two functioning heads The screams of a baby seal as it is torn apart by a shark The superiority of the octopus eyeball to the human A Caribbean sunset via [...]The Wrong War on Christmas | Conversations for Ministry Leaders
Updated: 2011-12-25 00:49:45Christians have always had a strained relationship with Saint Nick. Although his origins are rooted deeply in church lore, his association with the secularization of Christmas has made him a persona non grata in many churches and Christian communities. But many of us forget that Christmas itself is a holiday of dubious origin. For example, [...]The Inevitability of Institutionalization | Damascus
Updated: 2011-12-25 00:45:04…in any bureaucratic organization there will be two kinds of people: those who work to further the actual goals of the organization, and those who work for the organization itself. Examples in education would be teachers who work and sacrifice to teach children, vs. union representatives who work to protect any teacher including the most [...]Conservatives Don’t Want To Fix Poverty | OurFuture.org
Updated: 2011-12-25 00:32:21I would add only one thing, and it addresses ideology. Conservatives can’t fix poverty, because conservatives don’t want to fix poverty. For the same reason that Republicans never even attempted health care reform when they controlled the House, the Senate, and the White House. From a conservative perspective, poverty isn’t the real problem. Poor people [...]WikiLeaks, Patents, Cyber-Attacks Lead Week's Security News
Updated: 2011-12-24 14:53:55The government's case against Bradley Manning, Juniper's patent lawsuit against Palo Alto Networks and cyber-attacks were among this week's security headlines. - The United States government
began presenting its case against Army Private Bradley Manning last week and
continued this week. Manning is accused of illegally accessing thousands of
classified documents and video and leaking it to the whistleblower site WikiLeaks.
The witnesses for the prosecuti...Koobface Gang Boosts Web Traffic, Profits from Pay-per-Click Scams
Updated: 2011-12-23 18:43:14The operators of the Koobface botnet added a mechanism to monitor and drive Internet traffic through various affiliate sites to increase their clickthrough revenue. - The group behind the Koobface
is back, and they are reinventing themselves to take advantage of pay-per-click
advertising, according to Trend Micro.
The Koobface developers
updated their botnet framework with a quot;sophisticated quot; traffic-direction
system (TDS) that handles traffic refere...2011 Event Roundup
Updated: 2011-12-23 14:41:52
2011 has been a busy year for Veracode on the event circuit. The Veracode team has spoken at nearly 200 industry events this year. We racked up frequent flyer miles, collected a rainbow assortment of conference badges, and generally had fun presenting to all of you that attended the year’s major (and minor) industry and [...]NetWrix Change Reporter Suite - Voted WindowSecurity.com Readers' Choice Award Winner - Network Auditing Software
Updated: 2011-12-22 07:59:33NetWrix Change Reporter Suite was selected the winner in the Network Auditing Software category of the WindowSecurity.com Readers' Choice Awards. GFI LANguard and Admin Report Kit for Windows Enterprise (ARKWE) were runner-up and second runner-up respectively.
The Thought Leader… One Year Later
Updated: 2011-12-21 14:00:47
When we last left our intrepid hero, he was embarking on an quest to become an information security thought leader. A year has passed; let’s see how he’s doing! Enjoy.Authentication is changing: passwords have become yesterday's access control
Updated: 2011-12-21 07:59:21VDS Best Practices - Operational aspects (Part 6 of 6)
Updated: 2011-12-20 10:46:00Operational best practices After customers successfully design the virtual network infrastructure, the next challenge for the customer is how to deploy the design and how to keep the network operational. VMware provides various tools, APIs, and procedures to help customers...REMnux now includes NetworkMiner
Updated: 2011-12-16 21:46:00Lenny Zeltser recently released version 3 of his Reverse-Engineering Malware Linux distro REMnux. Here are a few of the improvements in REMnux 3 compared to the previous version: The REMnux distro is now based on UbuntuUpdated versions of Volatility and OrigamiNetworkMiner is included for forensic a[...]Microsoft Patch Management Integration with Nessus - Part 1 WSUS
Updated: 2011-12-16 14:32:05: Careers News Events Contact Support About Tenable Enter search text Solutions Solutions Overview Compliance Vulnerability Scanning Vulnerability Management Configuration Auditing Log Management SIEM Products Products Overview Nessus Scanner Nessus ProfessionalFeed SecurityCenter Log Correlation Engine Passive Vulnerability Scanner Services Services Overview Nessus Perimeter Service QuickStart Services Training Certification Training Certification Overview Become Certified Courses Delivery Methods Training Schedule eLearning Portal Expert Resources Expert Resources Overview Whitepapers Webinars Videos Discussion Forum Tenable Blog Partners Partners Overview Become a Partner Strategic Partners Enterprise Channel Partners Subscription Channel Partners Professional Services Partners Store
Is Personal Information Safe in the Cloud?
Updated: 2011-12-15 16:53:56Those of you in the Boston area may have seen Veracode’s very own Chris Eng (VP of Research) on the local CBS news Monday night. Chris is featured in a story about storing personal information in the cloud. Chris discusses best practices and advises users about operating and storing documents in the cloud. We think [...]Microsoft Patch Tuesday – December 2011
Updated: 2011-12-14 06:11:11To wish IT administrators everywhere a happy holiday, Microsoft today released 13 security bulletins. Microsoft had initially planned to release 14 bulletins, but a bulletin related to the BEAST vulnerability was held back for not behaving well with other other software. Assuming it can be whipped into shape, it will most likely make an appearance [...]Accessing Security Logs Remotely and Efficiently
Updated: 2011-12-14 06:00:38Microsoft Patch Tuesday - December 2011
Updated: 2011-12-14 03:00:33: Careers News Events Contact Support About Tenable Enter search text Solutions Solutions Overview Compliance Vulnerability Scanning Vulnerability Management Configuration Auditing Log Management SIEM Products Products Overview Nessus Scanner Nessus ProfessionalFeed SecurityCenter Log Correlation Engine Passive Vulnerability Scanner Services Services Overview Nessus Perimeter Service QuickStart Services Training Certification Training Certification Overview Become Certified Courses Delivery Methods Training Schedule eLearning Portal Expert Resources Expert Resources Overview Whitepapers Webinars Videos Discussion Forum Tenable Blog Partners Partners Overview Become a Partner Strategic Partners Enterprise Channel Partners Subscription Channel Partners Professional Services Partners StoreSecurity Predictions: All Hat, No Cattle
Updated: 2011-12-14 02:00:43This is the time of the year where holiday parties are had, gifts are exchanged, and everyone and their brother in the security industry write blog posts and press releases about their predictions for the coming year. This time of the year reminds me of how important eEye’s message of “Security in Context” is given [...]Richard, Russ and Adrian trying NetworkMiner Professional
Updated: 2011-12-09 18:45:00I recently sent out a copy of NetworkMiner Professional to three persons, who I respect for their contributions to different parts of the IT security community. NetworkMiner Professional USB flash drive All three persons have now publicly shared their experiences from analyzing network traffic with[...]Honey, Does this Installer Make Me Look Fat?
Updated: 2011-12-08 01:06:39
I remember the days when I used download.com to grab utilities and shareware, never really questioning why I used download.com. All I knew is that it was safe and fast, usually appearing as a top search result in Google and it was always available. Unfortunately, CBS Interactive found that it would be monetarily advantageous to bundle downloads in [...]Securing your Network in an Era of Heterogeneity
Updated: 2011-12-07 05:59:59It Takes More Than a Decoder Ring
Updated: 2011-12-06 20:04:22
This week I was invited to lend my “expert thoughts” on a recent news piece on a UK intelligence agency which has opened up their hiring practices to include an online code cracking competition. The team over at CNN’s Situation Room thought this was an interesting concept and invited me in for a quick discussion. [...]Patch Management Integration with Nessus Released
Updated: 2011-12-06 16:47:19