Howard Schmidt on the Cyber Security Czar, Cybercrime and How to Fix Federal Cyber Security

Dennis Fisher talks with former White House cybersecurity adviser Howard Schmidt about the need for a cyber security czar, the rise of cybercrime and how to fix federal cyber security. Download: digitalunderground16.mp3 Podcast audio courtesy of Michael Stephens Image via thatmakesthree‘s Flickr...

Cybersecurity czar position, 60-day review report coming this week

From The Washington Post Ellen Nakashima The Obama administration is set to announce the creation of a new high-level position to run the cybersecurity program for the country. The announcement is expected on Friday, along with the release of the report on the administration’s 60-day review of th...

Battle brewing over cybersecurity in Washington

There is a good old-fashioned backroom brawl shaping up in Washington over the cybersecurity issue, and the forces are aligning in some interesting ways on a variety of different sides of the debate. The latest installment in this long-running drama involves not just the fight over which, if any,...

NSA chief to call for better offensive cyber capabilities

The head of the National Security Agency on Tuesday will recommend that the United States needs a major upgrade to its capabilities in both offensive and defensive cyber capabilities, handing that responsibility to a new military command in Maryland. In a hearing before the House Armed Services...

Cloud security needs its rainmaker

From Information Week George Hulme The Cloud Security Alliance CSA made its inaugural splash at last week’s RSA Security Conference 2009 in San Francisco. The group kicked off an ambitious white paper cloudsecurityalliance.org that attempts to define everything from the architecture of cloud...

Experts call for White House lead on cybersecurity

In case you’ve missed it, there’s been a lot of talking in Washington lately about the need for major changes to the way that information security is handled in the federal government as well as the private sector. So far that talk hasn’t led to much in the way of action, but that may be on the...

MDKA-2007:103 : cairo

Cairo library could not render correctly some PDF files with evince, causing text to be displayed with white color freedesktop.org bug 8399. Update package fixes this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Cybersecurity should return to the White House

A bill introduced in the Senate on Wednesday would make major changes to the way that cybersecurity is handled both within the government and in the private sector, including giving the federal government more control over private networks. But the provision that is getting the most attention, an...

Senate bill proposes sweeping changes to U.S. cybersecurity

By Joby Warrick and Walter Pincus, Washington Post Federal legislators are working on a bill that would make major changes to the way that both government and private networks are protected. The Washington Post reports that the legislation not only will include more enforcement for regulations, b...

The cybersecurity mess on the White House front steps

If President Obama thinks fixing the broken U.S. economy is a challenge, and ending the ground wars in the Middle East a conundrum, wait until he gets around to tackling cybersecurity. Obama must reverse the abject lack of any sort of meaningful coordinated defense against intensifying and...

Unfixed XSS vulnerability at www.andywhite.com

Security researcher BackDoor, has submitted on 09/03/2008 a cross-site-scripting XSS vulnerability affecting www.andywhite.com, which at the time of submission ranked 5620101 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/03/2008. It is...

BBSXP the latest vulnerability and the discovery process-vulnerability warning-the black bar safety net

Operating environment: Micromedia Dreamweaver 8.0+IIS 5.0+SQL Server 2 0 0 0+BBSXP 6.00 SP1 SQL Travel back to the days of work relatively easily, just as everyone presented a few days ago found BBSXP new vulnerability, the way to find the ASP program vulnerability method. See here you should thi...

Format string

Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...

CVE-2008-0101

Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...

CVE-2008-0100

Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via a long string in a .WRL file...

DEBIAN-CVE-2008-0101

Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...

DEBIAN-CVE-2008-0100

Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via a long string in a .WRL file...

CVE-2008-0100

Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via a long string in a .WRL file...

CVE-2008-0101

The CVE-2008-0101 entry describes a format string vulnerability in White_Dune, specifically in the swDebugf function of DuneApp.cpp, affecting White_Dune 0.29 beta791 and earlier. The flaw allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file. The connected...

CVE-2008-0101

Format string vulnerability in the swDebugf function in DuneApp.cpp in WhiteDune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file...