| |
EnGarde Secure Community 3.0.22 Now Available! |
| |
Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.22 (Version 3.0, Release 22). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.
|
| |
Flash+Android: good and bad, stopping leaks, and more (Sep 1) |
| |
A quick burst of 9 links for you to chew over, as picked by the Technology team"Tomorrow's WikiLeakers may have to be sneakier than just dumping military docs onto a Lady Gaga disc. The futurists at Darpa are working on a project that would make it harder for troops to funnel classified material to WikiLeaks -- or to foreign governments.
|
| |
IBM Names Itself Worst Company For Fixing Critical Software Security Bugs (Sep 1) |
| |
IBM's security researchers seem to have located the problem. And it is IBM.Last Wednesday, IBM's X-Force security research team published its twice-annual study tracking the latest vulnerabilities and new attacks online.
|
| |
Private WiFi has Officially Launched its Early Adopters Program (Sep 1) |
| |
In an attempt to help secure the world from hackers while using a public hotspot, Private WiFi has officially launched its WiFi Encryption Software. Until Sept., users can qualify for a month free of the hacker proof service.
|
| |
Darpa's Star Hacker Looks to WikiLeak-Proof Pentagon (Sep 1) |
| |
Tomorrow's WikiLeakers may have to be sneakier than just dumping military docs onto a Lady Gaga disc. The futurists at Darpa are working on a project that would make it harder for troops to funnel classified material to WikiLeaks -- or to foreign governments. And that means if you work for the military, get ready to have your web, email and other network usage monitored even more than it is now.
|
| |
Cars: The next hacking frontier? (Sep 1) |
| |
That nice, new computerized car you just bought could be hackable.Of course, your car is probably not a high-priority target for most malicious hackers. But security experts tell CNET that car hacking is starting to move from the realm of the theoretical to reality, thanks to new wireless technologies and evermore dependence on computers to make cars safer, more energy efficient, and modern.
|
| |
Five Reasons Linux Beats Windows for Servers (Aug 31) |
| |
Rapid growth in the market for x86 servers over the past year brought good news for both Linux and Windows, as research firm IDC reported last week.
|
| |
Unpatched security holes: IBM re-evaluates (Aug 31) |
| |
IBM's X-Force security team has updated the security report for the first half of 2010 it released last week after two vendors questioned the correctness of the team's evaluations. The controversy was sparked by a table containing the ten vendors who left the most security holes unpatched over a period of six months:
|
| |
Ksplice Now Free for Fedora Users (Aug 31) |
| |
Ksplice, the technology that allows Linux kernel updates without a reboot, is now free for users of the Fedora distribution. Using Ksplice is like "replacing your car's engine while speeding down the highway", and it can potentially save your Linux systems from a lot of downtime. Since Fedora users often live on the bleeding edge of Linux development, Ksplice makes it even easier to do so, and without reboots!
|
| |
The Big Hacker Conspiracy (Aug 31) |
| |
Is there a big hacker conspiracy happening right now inside your business? Research coming out of the DEFCON hacker convention suggests there is.
|
| |
Hardware Hack Busts Quantum Encryption (Aug 31) |
| |
Quantum cryptography is absolutely unbreakable, as it relies on the laws of physics to rat out eavesdroppers. But like other encryption methods, it is sometimes only as good as the users and their hardware.
|
| |
Once-prolific Pushdo botnet crippled (Aug 30) |
| |
Security researchers have disrupted the botnet known as Pushdo, a coup that over the past 48 hours has almost completely choked the torrent of junkmail from the once-prolific spam network.
|
| |
Four Best Practices For Tokenization (Aug 30) |
| |
With Visa releasing its tokenization best practices guide earlier this summer, security professionals and encryption vendors have debated the strengths and weaknesses of the guide. As one of the most debated topics in encryption-land, tokenization still has a long way to go before it achieves any kind of true standardization of best practices.
|
| |
CEO must prioritize software development improvements, secure coding (Aug 30) |
| |
The financial services industry is well ahead of other markets when it comes to making secure coding a reality, but other firms, including smaller independent software vendors, aren't making the effort, according to Ryan Berg, a senior architect of security research for IBM. The CEO within an organization can make the difference, Berg said.
|
| |
3 areas where FUD needs to stop (Aug 30) |
| |
There is a new breed of animal appearing in the infosec community, according to Dr. Jimmy Blake, chief security officer for Mimecast, a cloud-services company based in London, and host of the blog Cloud Computing and Bad Behavior. The new breed is what he calls the "attention monger" (he actually used a more colorful word, but we toned it down for this article.) The attention monger is courting headlines with the media that add no real value to information security.
|
| |
DDoS botnet family discovered targeting scores of sites (Aug 30) |
| |
A new family of bots is responsible for nearly 200 distributed denial-of-service attacks targeting websites in China, the United States, South Korea and Germany, according to researchers at security firm Arbor Networks
|
| |
Dangerous security flaw patched in Linux (Aug 30) |
| |
A critical vulnerability in the Linux kernel that gives attackers access to root via X server has been patched by Linus Torvalds. Meanwhile, kernel developer James Morris reports on the first-annual Linux Security Summit (LSS), which covered topics including usability, hardening the kernel, and API standardization.
|
| |
Pentagon breached by foreign hacker (Aug 27) |
| |
A foreign spy agency carried out the most serious "cyber attack" on the US military's networks when a tainted flash drive was inserted into a laptop in the Middle East, according to a senior Pentagon official.
|
| |
Hackers see the cloud as ripe territory (Aug 27) |
| |
Is the cloud a hacker's paradise? A survey at last month's Defcon hacking conference paints that picture.Sponsored by security vendor Fortify Software, the survey asked 100 hackers who attended Defcon about security in the cloud.
|
| |
Threats Permeate Wi-Fi Hotspots (Aug 27) |
| |
In the post 9-11 real world, thanks to heightened security measures, an airport terminal is one of the safest places for travel. But in the virtual world, it's still extremely vulnerable. A recent research note by a leading Symantec engineer warned of potential "scareware," which is a fake anti-virus software system that appears on your computer, floating through a Wi-Fi network in an airport terminal. Web security experts say this type of malware is just one of the many examples of the threats that occur in Wi-Fi hotspots.
|
| |
Scaling the Security Chasm (Aug 26) |
| |
Many people wear seatbelts because they could get fined if they don't, rather than because wearing them might save their life, security consultant Dr. Anton Chuvakin observed during his keynote speech at the Hack In The Box security convention in Amsterdam in early July. It's an interesting observation, and one that has interesting implications for server security.
|
| |
New Crack Evades Android App Licensing Scheme (Aug 26) |
| |
Researchers have found a very simple method for evading the Android licensing scheme that Google uses to ensure that paid applications in its Android Market are correctly licensed.
|
| |
Flash drive exposed US war plans (Aug 26) |
| |
A senior Pentagon official will outline the anatomy of a 2008 attack on its military's Central Command system, which he admits was triggered by a booby-trapped thumb drive.
|
| |
Analog Hacker Raises $20k to Make Handmade Lockpicking Tools (Aug 26) |
| |
You want a retro hobby with hacker cred? Try competitive lockpicking, which I'd bet is coming soon to a hipster bar near you.Schuyler Towne is a graphic designer, maker, and lockpicker.
|
| |
Exploit code with DNS tunnel (Aug 26) |
| |
Hacker Ron Bowes has released various payloads that connect a shell's standard input and output with a suitable online counterpart through DNS. This allows attackers to bypass many firewalls and even attack systems that have no internet connection themselves.
|
| |
Use Puppy Linux 5.0 for secure on-the-go browsing (Aug 25) |
| |
Lucid Puppy Linux 5.0 was released back in May of 2010, but as one of my favorite distros, I have been playing with it heavily since then. I have been so impressed with the new version that I wanted to take a moment and write a quick review of this release.
|
| |
Three things Microsoft need to do NOW to prove it loves open souce (Aug 25) |
| |
Back in 2001 Microsoft CEO Steve Ballmer called Linux a "cancer" that threatened the company, but now the Redmond giant claims to "love open source." Well, actions speak louder than words.
|
| |
Hackers see the cloud as ripe territory (Aug 25) |
| |
Is the cloud a hacker's paradise? A survey at last month's Defcon hacking conference paints that picture.Sponsored by security vendor Fortify Software, the survey asked 100 hackers who attended Defcon about security in the cloud.
|
| |
Free tool from Team Cymru aims to help fight malware (Aug 25) |
| |
The non-profit, Chicago-based internet security research firm Team Cymru (pronounced 'kum-ree') will release a new tool next month that it hopes will be a game changer in the fight against world-wide cyber crime.
|
| |
DNSSEC Will Drive Certificate Market (Aug 25) |
| |
With the landmark deployment of DNSSEC in the root a little over a month ago and the acceleration of top-level domains (TLDs) jumping onto the DNSSEC bandwagon through the end of this year and 2011, a big question remains: what does this protocol improvement mean for the digital certificate market?
|
| |
Registry operator Afilias embraces DNS security (Aug 24) |
| |
Afilias, which operates .info and more than a dozen other Web site extensions, will announce on Monday plans to deploy an emerging standard known as DNSSEC that adds a layer of encryption to the Internet's Domain Name System. Will security worries propel DNS into the cloud?
|
| |
Firefox plugins to perform penetration testing activities (Aug 24) |
| |
Today I rebuilt my Windows 7 partition. Amidst flurry of backing up I forgot to save my Firefox profiles. I figured this was a good time to review what I use addons-wise for all my day to day hacking needs.
|
| |
Google's Market Licensing System Easy to Crack, Apparently (Aug 24) |
| |
Google's hopes to cut back on piracy with the new licensing system they've implemented for downloads in the Android market may have already been shattered. One hacker reminds us that there's no way to keep piracy from happening in any realm of software as he's gone deep into the code of an app equipped with Google's new license validation tools.
|
| |
Who Leaked Halo: Reach Early? Microsoft Did (Aug 24) |
| |
Halo: Reach has apparently been breached. The latest chapter in Microsoft's flagship franchise is prematurely in the wild. Bungie's Xbox 360 exclusive sci-fi shooter--prequel to the venerable Xbox-original Halo: Combat Evolved and not due out until September 14--has been unceremoniously loosed on file sharing sites.
|
| |
Hackers say they are targeting cloud computing (Aug 24) |
| |
Cloud vendors are not doing enough to address the security of their services, according to 89% of the hackers and IT security experts polled at a recent hacking conference in Las Vegas.
|
Only registered users can write comments.
Please login or register.