The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
As reported by a subscriber to the incidents mailing list at . "It appears that perhaps tens of thousands of username/passwords for valid shell logins ALL ACRO…
E-mail encryption seems to be hard enough, or annoying enough, that even many technically sophisticated people don't do it regularly. Non-technical people rare…
The basic outline of the system consists of using Bash scripts, metamail, grep, the Obtuse Systems' smtpd product, Samba and a command-line virus scanner. A fl…
Welcome to the first issue of the EnGarde Secure NewsBrief. This monthly newsletter contains details on EnGarde development, usage tips, news & reviews pertain…
On Tuesday June 26, 2001, a hacker named 'ThePike' managed to deface the European defacement mirror Alldas.de. Visitors to the site saw a modified news banner …
Steve Gibson recounts the steps he took to stop his attack from being subjected to a distributed denial of service attack. "I believe you will be as fascinated…
My graduate professor at Johns Hopkins once told me that software engineering - when compared with civil engineering as a discipline- had progressed no further…
The CORE SDI team has found a vulnerability in the SSH 1.5 protocol that allows an attacker to retrieve the session key, which could then allow them to decrypt…
If you do business on the Internet, you cannot afford to be uninformed about the dangers and pitfalls that cybercrime poses. The following is a daily survey of…
New version of chkrootkit (0.19) available... chkrootkit is a shell script mainly developed by Nelson Murilo (Brazilian) that checks for the existence of rootk…
This is a great 40-page document by Orrin Hatch that describes what the government is doing about privacy, tools that can be used to protect your privacy, and …
The U.S. Federal Trade Commission (FTC) says it has seen complaints of identity theft triple so far this year, and claims at least part of the increase can be …
Register.com, the second-largest domain name registrar, has acknowledged a security problem that could have allowed people to hijack others' Web sites. The pro…
Here's a short editorial on fractal encryption. "A fractally encrypted message cannot be broken even by the senders. It is so secure as to be that way for it's…
"BEIJING -- China has eased tough new restrictions on encryption technology, announcing that a vast category of consumer software and equipment -- including mo…
"Open-source based software solutions provider TurboLinux on Tuesday announced that its server product has been deployed, along with a cluster of IBM Netfinity…
Gateway and eSoft will collaborate to bring business applications to Linux. "eSoft, Inc. (Nasdaq: ESFT), the developer of the TEAM Internet Linux software suit…
This is a very interesting article about the future of cryptography. David Lammers writes ... "At the Intel Developer Forum, Intel unveiled a copy protection s…
Hyper-V has been here for some time. It has been flexing itself to gain a larger market share than thatWhat Does the Future Hold for Hyper-V Data Security? on …
Following its efforts to take legal action against those misusing its social media platform, Facebook has now filed a new lawsuit against a Hong Kong-based adv…
Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers…
Yesterday, on the 3rd anniversary of the infamous global WannaCry ransomware outbreak for which North Korea was blamed, the U.S. government released informatio…
The Department of Homeland Security and CISA ICS-CERT will today issue a critical security advisory warning about over a dozen newly discovered vulnerabilities…
A zero-day vulnerability has been discovered in Zoom video conferencing software for Windows that could allow an attacker to execute arbitrary code on a victim…