LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Advisory Watch: February 10th, 2012
Linux Security Week: February 6th, 2012
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Linux Security Week: September 6th, 2010 Print E-mail
User Rating:      How can I rate this item?
Source: LinuxSecurity Contributors - Posted by Benjamin D. Thomas   
Linux Security Week Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

Review: The Official Ubuntu Book - If you haven't used Linux before, are new to Ubuntu, or would like a quick update on the latest in open source advancements for the desktop, then The Official Ubuntu Book is a great place to start. Authored by a group of some of the most experienced open source administrators and developers, this 400-page user guide details everything you need to know about how to make the most of your Ubuntu, Kubuntu (Ubuntu with KDE), and Xubuntu (Ubuntu with Xfce) computer.

Review: Zabbix 1.8 Network Monitoring - If you have anything more than a small home network, you need to be monitoring the status of your systems to ensure they are providing the services they were designed to provide. Rihards Olups has created a comprehensive reference and usability guide for the latest version of Zabbix that anyone being tasked with implementing should have by their side.


  EnGarde Secure Community 3.0.22 Now Available!
 

Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.22 (Version 3.0, Release 22). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.

  Security program automatically tracks down missing patches (Sep 3)
 

Secunia has updated its Personal Software Inspector (PSI) with the ability to silently download and apply patches from multiple vendors soon after their release. PSI 2.0 is now available in an open beta test,

  Virtualize your browser to prevent drive-by malware attacks (Sep 3)
 

When you open up a browser session and visit Web sites and click on hyperlinks, do you feel a little apprehensive about the possibility of drive-by malware getting installed on your PC? I sure do, even though I keep my antivirus/antimalware software and other security measures active and up to date. I might be a little paranoid, but for good reason.

  Compromising Twitter's OAuth security system (Sep 2)
 

Twitter officially disabled Basic authentication this week, the final step in the company's transition to mandatory OAuth authentication. Sadly, Twitter's extremely poor implementation of the OAuth standard offers a textbook example of how to do it wrong.

  Congratulations to the VOIP Forensic Challenge winners (Sep 2)
 

Late in July 2010, we assessed over 21 solutions that were submitted to the Forensic Challenge on VOIP.The solutions were exceptionally high quality. It is fair to say that we all learnt a lot about this emerging threat in the process of preparing this challenge.

  Networked Scanners Offer A Window Into The Enterprise, Researcher Says (Sep 2)
 

It happens every day -- a sensitive document lies in the copier room, forgotten by the person who left it on the scanner. No big deal, right? Nobody else was able to read it.

  Malware hosted on Google Code project site (Sep 2)
 

Malicious hackers are using the Google Code repository to host Trojans horses, backdoors and password stealing keyloggers, according to researchers at Zscaler.

  New 'month of bugs' campaign outs LInux-based console flaw (Sep 2)
 

A group of security researchers began issuing what they said will be a month-long list of undisclosed bugs, as well as detailed binary analysis of known vulnerabilities. The first zero-day: A Linux-based Web hosting console.

  Google disputes bug patching report (Sep 2)
 

Google on Monday said that a recent report claiming it failed to patch one-third of the serious bugs in its software had the facts wrong.IBM's X-Force security unit, which released the report last week, acknowledged the error and issued a revised chart that shows Google patched all the vulnerabilities rated "critical" or "high" in its online services.

  Flash+Android: good and bad, stopping leaks, and more (Sep 1)
 

A quick burst of 9 links for you to chew over, as picked by the Technology team"Tomorrow's WikiLeakers may have to be sneakier than just dumping military docs onto a Lady Gaga disc. The futurists at Darpa are working on a project that would make it harder for troops to funnel classified material to WikiLeaks -- or to foreign governments.

  IBM Names Itself Worst Company For Fixing Critical Software Security Bugs (Sep 1)
 

IBM's security researchers seem to have located the problem. And it is IBM.Last Wednesday, IBM's X-Force security research team published its twice-annual study tracking the latest vulnerabilities and new attacks online.

  Private WiFi has Officially Launched its Early Adopters Program (Sep 1)
 

In an attempt to help secure the world from hackers while using a public hotspot, Private WiFi has officially launched its WiFi Encryption Software. Until Sept., users can qualify for a month free of the hacker proof service.

  Darpa's Star Hacker Looks to WikiLeak-Proof Pentagon (Sep 1)
 

Tomorrow's WikiLeakers may have to be sneakier than just dumping military docs onto a Lady Gaga disc. The futurists at Darpa are working on a project that would make it harder for troops to funnel classified material to WikiLeaks -- or to foreign governments. And that means if you work for the military, get ready to have your web, email and other network usage monitored even more than it is now.

  Cars: The next hacking frontier? (Sep 1)
 

That nice, new computerized car you just bought could be hackable.Of course, your car is probably not a high-priority target for most malicious hackers. But security experts tell CNET that car hacking is starting to move from the realm of the theoretical to reality, thanks to new wireless technologies and evermore dependence on computers to make cars safer, more energy efficient, and modern.

  Comodo Offers FREE BuyerTrust Protection of $100,000 Coverage With Purchase of SSL Certificate (Sep 1)
 

Comodo, a leading Internet security organization, announced today that it is offering a FREE annual subscription to BuyerTrust, a trustmark that is displayed on websites to build trust and confidence, with the purchase of any Comodo SSL Certificate.

  Five Reasons Linux Beats Windows for Servers (Aug 31)
 

Rapid growth in the market for x86 servers over the past year brought good news for both Linux and Windows, as research firm IDC reported last week.

  Unpatched security holes: IBM re-evaluates (Aug 31)
 

IBM's X-Force security team has updated the security report for the first half of 2010 it released last week after two vendors questioned the correctness of the team's evaluations. The controversy was sparked by a table containing the ten vendors who left the most security holes unpatched over a period of six months:

  Ksplice Now Free for Fedora Users (Aug 31)
 

Ksplice, the technology that allows Linux kernel updates without a reboot, is now free for users of the Fedora distribution. Using Ksplice is like "replacing your car's engine while speeding down the highway", and it can potentially save your Linux systems from a lot of downtime. Since Fedora users often live on the bleeding edge of Linux development, Ksplice makes it even easier to do so, and without reboots!

  The Big Hacker Conspiracy (Aug 31)
 

Is there a big hacker conspiracy happening right now inside your business? Research coming out of the DEFCON hacker convention suggests there is.

  Hardware Hack Busts Quantum Encryption (Aug 31)
 

Quantum cryptography is absolutely unbreakable, as it relies on the laws of physics to rat out eavesdroppers. But like other encryption methods, it is sometimes only as good as the users and their hardware.

  Once-prolific Pushdo botnet crippled (Aug 30)
 

Security researchers have disrupted the botnet known as Pushdo, a coup that over the past 48 hours has almost completely choked the torrent of junkmail from the once-prolific spam network.

  Four Best Practices For Tokenization (Aug 30)
 

With Visa releasing its tokenization best practices guide earlier this summer, security professionals and encryption vendors have debated the strengths and weaknesses of the guide. As one of the most debated topics in encryption-land, tokenization still has a long way to go before it achieves any kind of true standardization of best practices.

  CEO must prioritize software development improvements, secure coding (Aug 30)
 

The financial services industry is well ahead of other markets when it comes to making secure coding a reality, but other firms, including smaller independent software vendors, aren't making the effort, according to Ryan Berg, a senior architect of security research for IBM. The CEO within an organization can make the difference, Berg said.

  3 areas where FUD needs to stop (Aug 30)
 

There is a new breed of animal appearing in the infosec community, according to Dr. Jimmy Blake, chief security officer for Mimecast, a cloud-services company based in London, and host of the blog Cloud Computing and Bad Behavior. The new breed is what he calls the "attention monger" (he actually used a more colorful word, but we toned it down for this article.) The attention monger is courting headlines with the media that add no real value to information security.

  DDoS botnet family discovered targeting scores of sites (Aug 30)
 

A new family of bots is responsible for nearly 200 distributed denial-of-service attacks targeting websites in China, the United States, South Korea and Germany, according to researchers at security firm Arbor Networks

  Dangerous security flaw patched in Linux (Aug 30)
 

A critical vulnerability in the Linux kernel that gives attackers access to root via X server has been patched by Linus Torvalds. Meanwhile, kernel developer James Morris reports on the first-annual Linux Security Summit (LSS), which covered topics including usability, hardening the kernel, and API standardization.

Only registered users can write comments.
Please login or register.

Powered by AkoComment!

 
< Prev   Next >
    
Partner

 

Latest Features
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Using the sec-wall Security Proxy
sec-wall: Open Source Security Proxy
Yesterday's Edition
Hackers Hit Apple Supplier Foxconn, Leak Usernames And Passwords
Hackers Mug Google's Wallet App on Rooted Android Devices
Google Chrome will no longer check for revoked SSL certificates online
Have Your Users' Passwords Already Been Hacked?
DDoS Tools Flourish, Give Attackers Many Options
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2012 Guardian Digital, Inc. All rights reserved.