519 matches found
Metasploit 3.5.1 adds Cisco device exploitation !
Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...
Security Worth Buying
I’m a dirty vendor. That may not be the best way to start a serious dialogue about security product effectiveness, but I hate to read a post on security theory by some insincere tie-wearing wonk only to discover afterwards that he or she is Lord High Poobah of Marketing at “Scaring You For Profit...
The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads.
The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads ------------------------------------------------------------------------------- Czesc, This advisory describes CVE-2010-3856, an addendum to CVE-2010-3847. Please see http://seclists.org/fulldisclosure/2010/Oct/257 fo...
SecTor
Toronto, Ontario, Canada Billed as “Canada’s Premiere IT Security Conference” they might want to ask the CanSecWest folks about that, SecTor is an annual security confab that draws some of the top security researchers and IT professionals from the Great White North and the U.S. to Toronto for...
Hack in the Box (HITB)
Kuala Lumpur, Malaysia Booked as “Asia’s Premier Deep Knowledge Security Conference,” HITB is in its 8th year and has since expanded into other countries in the Middle East and Europe. Modeled on shows like Black Hat, HITB offers both training sessions and a multi track security conference and...
MS Windows nt!SeObjectCreateSaclAccessBits() Missed ACE (MS10-047)
Exploit for windows platform in category dos / poc ================================================================== MS Windows nt!SeObjectCreateSaclAccessBits Missed ACE MS10-047 ================================================================== Microsoft Windows nt!SeObjectCreateSaclAccessBits...
Ten Percent of IT Pros Falsify Security Audits
According to a survey of 242 IT professionals, 1 in 10 admitted that either they or a colleague have cheated to get an IT audit passed. However, it isn’t all bad news; compared to a similar survey conducted in 2009 the number of people admitting to cheating has halved in number. Read the full...
Why Bob Maley's Firing is Bad for All of Us
The news that Pennsylvania CISO Bob Maley lost his job for publicly discussing a security incident at last week’s RSA Conference really shouldn’t come as a surprise, but it does. Even for a government agency, this kind of lack of understanding of what actually matters is appalling and it is a...
Web 2.0, Social Net Attacks Rising
A new report shows malware attacks through Web 2.0 applications continue to be the largest concern for IT professionals with 69% of organizations reporting at least one Web 2.0-related attack. Fourteen percent report data leakage over social networks and 18% indicate incidents occurring over soci...
Security Pros React to Potential Federal Data Law
A federal cybersecurity law edged closer to reality late last week when the Senate Judiciary Committee approved a bill to protect the personal data of Americans. The bill is a bipartisan effort sponsored by Chairman Patrick Leahy, D-Vt., and co-sponsored by former Chairman Orrin Hatch, R-Utah, th...
Description of the security update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package: July 28, 2009
None None...
USPS probes possible mass security breach
CBS News is reporting word about another data breach potentially compromising the personal information of thousands of people. Companies Lexis Nexis and Investigative Professionals have sent up to 40,000 letters to customers whose “sensitive and personally identifiable” information may have been...
Security budget issues to resonate at RSA Conference
From SearchSecurity Robert Westervelt The glum economy has put increased pressure on CISOs to cut costs while maintaining the same security defenses. Tightening budgets, coupled with increased compliance demands could have security professionals looking for answers next week at the 2009 RSA...
In weak economy, IT pros could turn to e-crime
By Jeremy Kirk, IDG News Service Enterprises increasingly feel their employees will be more willing to steal data or sell insider knowledge due to the poor economy, according to an annual security survey infoworld.com conducted by KPMG. Sixty-six percent of respondents felt that out-of-work IT...
MS08-069: Description of the security update for XML Core Services 4.0: November 11, 2008
None None...
MS08-069: Description of the security update for the 2007 Office suite: November 11, 2008
None None...
Interview:Void
Team Void What is the world's attitude towards hackers from Russia? They are respected. Indeed, our compatriots are members of many well-known clans - w00w00, ADM and other highly revered teams. It should also be noted that the level of our computer professionals is quite worthy - you will meet...
