LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Advisory Watch: February 10th, 2012
Linux Security Week: February 6th, 2012
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Linux Security Week: September 1st, 2010 Print E-mail
User Rating:      How can I rate this item?
Source: LinuxSecurity Contributors - Posted by Benjamin D. Thomas   
Linux Security Week Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

Review: The Official Ubuntu Book - If you haven't used Linux before, are new to Ubuntu, or would like a quick update on the latest in open source advancements for the desktop, then The Official Ubuntu Book is a great place to start. Authored by a group of some of the most experienced open source administrators and developers, this 400-page user guide details everything you need to know about how to make the most of your Ubuntu, Kubuntu (Ubuntu with KDE), and Xubuntu (Ubuntu with Xfce) computer.

Review: Zabbix 1.8 Network Monitoring - If you have anything more than a small home network, you need to be monitoring the status of your systems to ensure they are providing the services they were designed to provide. Rihards Olups has created a comprehensive reference and usability guide for the latest version of Zabbix that anyone being tasked with implementing should have by their side.


  EnGarde Secure Community 3.0.22 Now Available!
 

Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.22 (Version 3.0, Release 22). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.

  Flash+Android: good and bad, stopping leaks, and more (Sep 1)
 

A quick burst of 9 links for you to chew over, as picked by the Technology team"Tomorrow's WikiLeakers may have to be sneakier than just dumping military docs onto a Lady Gaga disc. The futurists at Darpa are working on a project that would make it harder for troops to funnel classified material to WikiLeaks -- or to foreign governments.

  IBM Names Itself Worst Company For Fixing Critical Software Security Bugs (Sep 1)
 

IBM's security researchers seem to have located the problem. And it is IBM.Last Wednesday, IBM's X-Force security research team published its twice-annual study tracking the latest vulnerabilities and new attacks online.

  Private WiFi has Officially Launched its Early Adopters Program (Sep 1)
 

In an attempt to help secure the world from hackers while using a public hotspot, Private WiFi has officially launched its WiFi Encryption Software. Until Sept., users can qualify for a month free of the hacker proof service.

  Darpa's Star Hacker Looks to WikiLeak-Proof Pentagon (Sep 1)
 

Tomorrow's WikiLeakers may have to be sneakier than just dumping military docs onto a Lady Gaga disc. The futurists at Darpa are working on a project that would make it harder for troops to funnel classified material to WikiLeaks -- or to foreign governments. And that means if you work for the military, get ready to have your web, email and other network usage monitored even more than it is now.

  Cars: The next hacking frontier? (Sep 1)
 

That nice, new computerized car you just bought could be hackable.Of course, your car is probably not a high-priority target for most malicious hackers. But security experts tell CNET that car hacking is starting to move from the realm of the theoretical to reality, thanks to new wireless technologies and evermore dependence on computers to make cars safer, more energy efficient, and modern.

  Five Reasons Linux Beats Windows for Servers (Aug 31)
 

Rapid growth in the market for x86 servers over the past year brought good news for both Linux and Windows, as research firm IDC reported last week.

  Unpatched security holes: IBM re-evaluates (Aug 31)
 

IBM's X-Force security team has updated the security report for the first half of 2010 it released last week after two vendors questioned the correctness of the team's evaluations. The controversy was sparked by a table containing the ten vendors who left the most security holes unpatched over a period of six months:

  Ksplice Now Free for Fedora Users (Aug 31)
 

Ksplice, the technology that allows Linux kernel updates without a reboot, is now free for users of the Fedora distribution. Using Ksplice is like "replacing your car's engine while speeding down the highway", and it can potentially save your Linux systems from a lot of downtime. Since Fedora users often live on the bleeding edge of Linux development, Ksplice makes it even easier to do so, and without reboots!

  The Big Hacker Conspiracy (Aug 31)
 

Is there a big hacker conspiracy happening right now inside your business? Research coming out of the DEFCON hacker convention suggests there is.

  Hardware Hack Busts Quantum Encryption (Aug 31)
 

Quantum cryptography is absolutely unbreakable, as it relies on the laws of physics to rat out eavesdroppers. But like other encryption methods, it is sometimes only as good as the users and their hardware.

  Once-prolific Pushdo botnet crippled (Aug 30)
 

Security researchers have disrupted the botnet known as Pushdo, a coup that over the past 48 hours has almost completely choked the torrent of junkmail from the once-prolific spam network.

  Four Best Practices For Tokenization (Aug 30)
 

With Visa releasing its tokenization best practices guide earlier this summer, security professionals and encryption vendors have debated the strengths and weaknesses of the guide. As one of the most debated topics in encryption-land, tokenization still has a long way to go before it achieves any kind of true standardization of best practices.

  CEO must prioritize software development improvements, secure coding (Aug 30)
 

The financial services industry is well ahead of other markets when it comes to making secure coding a reality, but other firms, including smaller independent software vendors, aren't making the effort, according to Ryan Berg, a senior architect of security research for IBM. The CEO within an organization can make the difference, Berg said.

  3 areas where FUD needs to stop (Aug 30)
 

There is a new breed of animal appearing in the infosec community, according to Dr. Jimmy Blake, chief security officer for Mimecast, a cloud-services company based in London, and host of the blog Cloud Computing and Bad Behavior. The new breed is what he calls the "attention monger" (he actually used a more colorful word, but we toned it down for this article.) The attention monger is courting headlines with the media that add no real value to information security.

  DDoS botnet family discovered targeting scores of sites (Aug 30)
 

A new family of bots is responsible for nearly 200 distributed denial-of-service attacks targeting websites in China, the United States, South Korea and Germany, according to researchers at security firm Arbor Networks

  Dangerous security flaw patched in Linux (Aug 30)
 

A critical vulnerability in the Linux kernel that gives attackers access to root via X server has been patched by Linus Torvalds. Meanwhile, kernel developer James Morris reports on the first-annual Linux Security Summit (LSS), which covered topics including usability, hardening the kernel, and API standardization.

  Pentagon breached by foreign hacker (Aug 27)
 

A foreign spy agency carried out the most serious "cyber attack" on the US military's networks when a tainted flash drive was inserted into a laptop in the Middle East, according to a senior Pentagon official.

  Hackers see the cloud as ripe territory (Aug 27)
 

Is the cloud a hacker's paradise? A survey at last month's Defcon hacking conference paints that picture.Sponsored by security vendor Fortify Software, the survey asked 100 hackers who attended Defcon about security in the cloud.

  Threats Permeate Wi-Fi Hotspots (Aug 27)
 

In the post 9-11 real world, thanks to heightened security measures, an airport terminal is one of the safest places for travel. But in the virtual world, it's still extremely vulnerable. A recent research note by a leading Symantec engineer warned of potential "scareware," which is a fake anti-virus software system that appears on your computer, floating through a Wi-Fi network in an airport terminal. Web security experts say this type of malware is just one of the many examples of the threats that occur in Wi-Fi hotspots.

  Scaling the Security Chasm (Aug 26)
 

Many people wear seatbelts because they could get fined if they don't, rather than because wearing them might save their life, security consultant Dr. Anton Chuvakin observed during his keynote speech at the Hack In The Box security convention in Amsterdam in early July. It's an interesting observation, and one that has interesting implications for server security.

  New Crack Evades Android App Licensing Scheme (Aug 26)
 

Researchers have found a very simple method for evading the Android licensing scheme that Google uses to ensure that paid applications in its Android Market are correctly licensed.

  Flash drive exposed US war plans (Aug 26)
 

A senior Pentagon official will outline the anatomy of a 2008 attack on its military's Central Command system, which he admits was triggered by a booby-trapped thumb drive.

  Analog Hacker Raises $20k to Make Handmade Lockpicking Tools (Aug 26)
 

You want a retro hobby with hacker cred? Try competitive lockpicking, which I'd bet is coming soon to a hipster bar near you.Schuyler Towne is a graphic designer, maker, and lockpicker.

  Exploit code with DNS tunnel (Aug 26)
 

Hacker Ron Bowes has released various payloads that connect a shell's standard input and output with a suitable online counterpart through DNS. This allows attackers to bypass many firewalls and even attack systems that have no internet connection themselves.

  Use Puppy Linux 5.0 for secure on-the-go browsing (Aug 25)
 

Lucid Puppy Linux 5.0 was released back in May of 2010, but as one of my favorite distros, I have been playing with it heavily since then. I have been so impressed with the new version that I wanted to take a moment and write a quick review of this release.

  Three things Microsoft need to do NOW to prove it loves open souce (Aug 25)
 

Back in 2001 Microsoft CEO Steve Ballmer called Linux a "cancer" that threatened the company, but now the Redmond giant claims to "love open source." Well, actions speak louder than words.

  Hackers see the cloud as ripe territory (Aug 25)
 

Is the cloud a hacker's paradise? A survey at last month's Defcon hacking conference paints that picture.Sponsored by security vendor Fortify Software, the survey asked 100 hackers who attended Defcon about security in the cloud.

  Free tool from Team Cymru aims to help fight malware (Aug 25)
 

The non-profit, Chicago-based internet security research firm Team Cymru (pronounced 'kum-ree') will release a new tool next month that it hopes will be a game changer in the fight against world-wide cyber crime.

  DNSSEC Will Drive Certificate Market (Aug 25)
 

With the landmark deployment of DNSSEC in the root a little over a month ago and the acceleration of top-level domains (TLDs) jumping onto the DNSSEC bandwagon through the end of this year and 2011, a big question remains: what does this protocol improvement mean for the digital certificate market?

  Registry operator Afilias embraces DNS security (Aug 24)
 

Afilias, which operates .info and more than a dozen other Web site extensions, will announce on Monday plans to deploy an emerging standard known as DNSSEC that adds a layer of encryption to the Internet's Domain Name System. Will security worries propel DNS into the cloud?

  Firefox plugins to perform penetration testing activities (Aug 24)
 

Today I rebuilt my Windows 7 partition. Amidst flurry of backing up I forgot to save my Firefox profiles. I figured this was a good time to review what I use addons-wise for all my day to day hacking needs.

  Google's Market Licensing System Easy to Crack, Apparently (Aug 24)
 

Google's hopes to cut back on piracy with the new licensing system they've implemented for downloads in the Android market may have already been shattered. One hacker reminds us that there's no way to keep piracy from happening in any realm of software as he's gone deep into the code of an app equipped with Google's new license validation tools.

  Who Leaked Halo: Reach Early? Microsoft Did (Aug 24)
 

Halo: Reach has apparently been breached. The latest chapter in Microsoft's flagship franchise is prematurely in the wild. Bungie's Xbox 360 exclusive sci-fi shooter--prequel to the venerable Xbox-original Halo: Combat Evolved and not due out until September 14--has been unceremoniously loosed on file sharing sites.

  Hackers say they are targeting cloud computing (Aug 24)
 

Cloud vendors are not doing enough to address the security of their services, according to 89% of the hackers and IT security experts polled at a recent hacking conference in Las Vegas.

Only registered users can write comments.
Please login or register.

Powered by AkoComment!

 
< Prev   Next >
    
Partner

 

Latest Features
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Using the sec-wall Security Proxy
sec-wall: Open Source Security Proxy
Yesterday's Edition
Hackers Hit Apple Supplier Foxconn, Leak Usernames And Passwords
Hackers Mug Google's Wallet App on Rooted Android Devices
Google Chrome will no longer check for revoked SSL certificates online
Have Your Users' Passwords Already Been Hacked?
DDoS Tools Flourish, Give Attackers Many Options
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2012 Guardian Digital, Inc. All rights reserved.