Sponsored White Papers, Webcasts, and Downloads
ZDNet Resources
- sort by:
- Relevance
- Date
- Popularity
- Phishing without bait: The in-session password theft attack
- Skilled identity thieves can pilfer user names, passwords and other sensitive data for banking sites without using e-mail lures and other other social engineering tactics. According to a security advisory from Trusteer, hackers can launch what is described as "in-session phishing attacks" using pop-up messages during an...
- Blog posts 2009-01-16
- Vulnerability Assessment Plus Web Application Firewall (VA+WAF)
- New technology developed by WhiteHat Security and F5 Networks enables organizations to immediately mitigate discovered vulnerabilities using a web application firewall. WhiteHat's Sentinel service provides continuous assessments of web applications for vulnerabilities. Once detected and validated by WhiteHat, detailed information about these vulnerabilities are passed to the F5 BIG-IP Application...
- White papers 2008-06-01
- Bullseye on Google: Hackers expose holes in GMail, Blogspot, Search Appliance
- [ UPDATE, October 1, 2007: Google has issued a fix for this issue. It's important that you check your filters to ensure your mailbox isn't compromised ] Google's security model is not holding up very well to scrutiny from hackers. In the past few...
- Blog posts 2007-09-25
Additional Resources
- Thousands of web sites compromised, redirect to scareware
- RE: Thousands of web sites compromised, redirect to scarewareI'm glad Microsoft Windows goes the extra mile to protect users from this kind of mischief. In Microsoft Windows I can set security zones in the Internet Options window so that only trusted sites will load, or set it so internet...
- Discussion threads 2009-11-17
- New Mac OS X DNS changer spreads through social engineering
- I cannot beeveryone know that Macs are only being exploited in laboratories and only when users are asked to hand over their credentials! Its just a matter of timeAs Apple computers become more popular or as malware authors seek out new territory the number of exploits will grow. The whole...
- Discussion threads 2009-08-11
- Apple keyboard vulnerable to hack attack
- Apple keyboard vulnerable to hack attackUse Microsoft Keyboard with MacUse Microsoft Keyboard with Mac !! Very safe combination !!!!RE: Apple keyboard vulnerable to hack attackNo choice? Sir, if it becomes a serious problem, any USB keyboard will do as a replacement for the Apple one.As I understood the issue (I...
- Discussion threads 2009-08-03
- Apple patches Black Hat SMS attack flaw
- On the heels of a Black Hat conference demo of an iPhone hijack via text messages, Apple has shipped an iPhone update with patches for the security flaw. The iPhone OS 3.0.1 update, available only via iTunes, addresses a memory corruption issue in the way the device...
- Blog posts 2009-08-03
- Adobe Flash zero-day attack underway; Harden PDF Reader immediately
- Malicious hackers have found a new vulnerability in Adobe's ever-present Flash software and are using rigged PDF documents to launch exploits against Windows targets. The Adobe Flash Player flaw, which is currently unpatched, affects millions of Windows XP and Windows Vista users. Adobe has acknowledged a "potential...
- Blog posts 2009-07-22
- RFID passports: a tragedy waiting to happen
- You're strolling in the south if France when a van stops, men burst out and in seconds hustle you into the van. "American scum!" they hiss as they hood you. But wearing a Sorbonne t-shirt and no fanny pack, how did they know? Thank your government - and a bad...
- Blog posts 2009-07-14
- Snake oil at its slickest: A social media spam story
- Snake oil at its slickest: A social media spam storyGreat article!I see these types on Twitter way too much, and on email. Sadly, the site may have been more harmful than you think if malware or other intrusive ware were installed by clicking through the site's pages.RE: Snake oil...
- Discussion threads 2009-07-09
- Cybercrime doesn't pay: well it does, and very well
- A large part of me is worried about writing this post because in some way, I could be considered as promoting the idea or inciting people to commit cybercrime. Well, that's not my intention as such - instead I'm taking a more back seat approach to denounce why people commit...
- Blog posts 2009-06-25
- Iranian opposition launches organized cyber attack against pro-Ahmadinejad sites
- Approximately 24 hours ago, the Iranian opposition coordinated an ongoing cyber attack that has successfully managed to disrupt access to major pro-Ahmadinejad Iranian web sites, including the President's homepage which continues returning a "The maximum number of user reached, Server is too busy, please try again later..." message. ...
- Blog posts 2009-06-15
- Spammers harvesting emails from Twitter - in real time
- Spammers harvesting emails from Twitter - in real timePeople still get spam??I think Gmail has made spam irrelevant, but let's test it and see.brett@brettschulte.comhttp://twitter.com/brettschulte/status/1789431680Fools plaster private data on a public domain PERIOD!Only a fool puts private data, pictures on a public domain for the world to see and manipulate ANYWAY...
- Discussion threads 2009-05-13
- Using Static Analysis for Ajax Intrusion Detection
- This paper presents a static control-flow analysis for JavaScript programs running in a web browser. The analysis tackles numerous challenges posed by modern web applications including asynchronous communication, frameworks, and dynamic code generation. The paper uses the analysis to extract a model of expected client behavior as seen from the...
- White papers 2009-04-24
- Password Pair 1.0 (Mac)
- Password Pair allows you and a distant associate to establish an identical long and complex password that you can use to encrypt and decrypt files. You may then transfer the encrypted file securely over the Internet. Password Pair uses a "Handshake" technique similar to that used in your web application...
- Software downloads 2009-04-19
- New Skype Vulnerability Discovered
- A new phishing attack demonstrated by the folks over at Secure Science allows hackers to gain access to a user's Skype client and then pose as a financial institution or proxy outbond calls. The technique is called "SkypeSkrayping†and is similar to a phishing attacking only a bit more interactive:...
- Blog posts 2009-04-13
- Lesser of two security evils: Twitter Web or third-party clients?
- Twitter Web might not be safe anymore and users may want to consider only tweeting and surfing through third-party applications for the time being. Yes, I know, there are all kinds of issues with using a third-party anything. And while I use and love TweetDeck and many are raving about...
- Blog posts 2009-04-12
- Researchers demo BIOS attack that survives hard-disk wipe
- A pair of Argentinian researchers have found a way to perform a BIOS level malware attack capable of surviving even a hard-disk wipe. The researchers -- Alfredo Ortega and Anibal Sacco from Core Security Technologies -- used the stage at last week's CanSecWest conference to demonstrate methods...
- Blog posts 2009-03-23
- GPU-Accelerated Wi-Fi password cracking goes mainstream
- GPU-Accelerated Wi-Fi password cracking goes mainstream8? 12? 16? In a business?Hell, my own key is 20 characters AT HOME! I would hope any sensible IT manager would use way more than 8! And my router password is 13 characters.RE: GPU-Accelerated Wi-Fi password cracking goes mainstreamTell...
- Discussion threads 2009-01-22
- Proving Distributed Denial of Service Attacks in the Internet
- This paper presents the problem of proving a distributed denial of service attack in the Internet. They propose a solution using probabilistic packet marking by routers, combined with a new technique to track individual DDoS attack flows. Their solution incurs very less overhead in the router's critical path and operates...
- White papers 2009-01-01
- << Previous
- page 1 of 1
- Next >>
Content Types
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Reduce risk. Reduce complexity. Increase reliability.
-
A simplified IT environment isn't just less complex. It's also more reliable. Standardize on a single Linux platform with SUSE Linux Enterprise from Novell, and get the world's most interoperable Linux

- Learn more >>
- The more you simplify, the more you save
-
When you transition from your existing Red Hat environment to SUSE Linux Enterprise from Novell, you can recognize dramatic cost savings, perhaps as much 50%

- Learn more >>
- The best support in the Linux business
-
If Linux is going to power your mission-critical applications, you'd better have the best support known to business. Novell was rated the top provider of Linux technical support.

- Learn more >>
- Keep Up With The Latest In Document Management with The DocuMentor.
-
Doc delivers the scoop on today's enterprise content management, printer maintenance, and all other issues related to document management. It's the DocuMentor Blog.
- Learn more >>
Meet Doc
-
Here to help you with your Document Management Needs
- Doc is an enigma. Born to a Russian ballerina and a German electrical engineer, he grew up in various locations in the United States. He’s seen the insides of more brands, versions, and generations of printer and printer-related hardware than almost anyone.
- To learn more about this mysterious figure check out his blog on ZDNet and his Workspace on TechRepublic. You’ll be glad you did.
-
Produced by
ZDNet and




