The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
They have demonstrated that users could open up their router's traffic as a result of visiting a web page loaded with malicious javascript. The researchers sai…
No doubt you're already aware of the standard logfiles that Apache httpd creates for you.
Most small business networks grow and evolve as the business grows. In one way, this is good. It shows the business is growing, becoming stronger. Unfortunatel…
Secure By Design: How Guardian Digital Secures EnGarde Secure Linux ABSTRACT What is EnGarde Secure Linux?
Cheap computers for the world's poor could mean big security headaches. The $100 One Laptop Per Child (OLPC) project is inviting hackers to break test out and …
Password aging is a mechanism that allows the system to enforce a certain lifetime for passwords.
Northwestern University researchers have joined forces with BBN Technologies to demonstrate what they are calling the first truly quantum cryptographic data ne…
EEye Digital Security has uncovered new security holes affecting a wide range of RealNetworks' media players, the latest desktop-based bugs set to worry IT man…
Three Brisbane university students have discovered a major flaw in wireless network technology that means hackers can bring down critical infrastructure in as …
The WWWD provides a snapshot of the security posture of currently deployed wireless access points throughout the world. During the Third WorldWide WarDrive, wh…
This week, perhaps the most interesting articles include "Rumors of Third Vulnerability in Linux Kernel Prove Unfounded," "VLANs on Linux," and "Open Source Ge…
Crypto-Gram is a free monthly newsletter providing summaries, analyses, insights, and commentaries on security: computer and otherwise. This month, Airplane Ha…
Crypto-Gram is a free monthly newsletter providing summaries, analyses, insights, and commentaries on computer security and cryptography. Discussed this month …
CRYPTO-GRAM is a free monthly newsletter providing summaries, analyses, insights, and commentaries on computer security and cryptography. In this issue, Random…
Laptops are vulnerable to theft, greatly increasing the likelihood of exposing sensitive files. Unfortunately, storing data in a cryptographic file system does…
tcpdump and libpcap were trojaned on tcpdump.org and all but 1 official mirror. This trojan, similar to the OpenSSH trojan from a few months ago, was caught Ge…
Daniel Roberts discovered a binary named "ABfrag" on one of his servers after detecting suspicious network activity. He sent in a note requesting anyone with i…
This month's Crypto-Gram contains information about Palladium and the TCPA, The Doghouse: Cedium, Featured Counterpane Research, License to Hack, Counterpane N…
Vendors have not issued updates yet for a vulnerability just reported by the Squid Project. "Under some conditions Squid may forward the proxy authentication c…
Update: For millions of websites that were vulnerable care of ISS , Apache is not too happy. ISS (Internet Security Systems) released an insufficient patch alo…
PHPNuke seems to have a horrible security track record, but continues to be quite popular. No statement from the PHPNuke folks yet, but if you're using a rapid…
An announcement was made early this morning via the major wire services that the Internet's premiere information security resource, PacketStorm (http://www.pac…
There is no doubt that the Internet has brought unparalleled connectivity to computers, especially in the last few years. But ironically, this very advantage h…
The latest Microsoft bug is a doozy. Why do these things keep cropping up? The federal government and technology industry want you to believe the threats to ou…