Sponsored White Papers, Webcasts, and Downloads
Additional Resources
- Sony Reader PRS-505 gets a major firmware upgrade
- My Sony Reader is an excellent piece of hardware that I thoroughly enjoy using during my daily commute. I skipped the Amazon Kindle and bought the Sony Reader and have not been one bit sorry about this purchase I made last fall. I just saw on my favorite eBook site,...
- Tags: Sony Corp., Firmware, Sony Reader, Firmware Upgrade, Sony Reader PRS-505, E-books, Personal Technology, Matthew Miller
- Blog posts 2008-07-24
- News to know: DNS flaw; Amazon; Microsoft shakeup; Facebook
- Notable headlines: Ryan Naraine: Researchers borrow from Google PageRank for network defense service Attack code published for DNS flaw Nate McFeters: |)ruid and HD Moore release part 2 of DNS exploit 'Spam King' escapes from federal prison iPhone vulnerable to phishing,...
- Tags: Apple iPhone, Facebook, DNS, Amazon.com Inc., Microsoft Corp., Microsoft Xbox, Flaw, Game Players, Domain Names, Networking, Security, Consumer Electronics, Personal Technology, Internet, Larry Dignan
- Blog posts 2008-07-24
- |)ruid and HD Moore release part 2 of DNS exploit
- [Updated 07/24/2008: Gallery images of diffs of code revisions has been included and will be updated as things change, see here.] Earlier today, noted researchers |)ruid and HD Moore released exploit code for the Metasploit tool for attacking the DNS flaw that was originally reported by Dan...
- Tags: DNS, Domain, Server, Entry, Exploit, NS, NS Record, Domain Names, Networking, Internet, Nathan McFeters
- Blog posts 2008-07-23
- Attack code published for DNS flaw
- Attack code published for DNS flawIrresponsible and evil"In an IM exchange, Moore told me his exploit takes about a minute or two to poison a DNS cache but said he is working to improve it in version 2.0."As far as i am concerened he is just an evil person to...
- Tags: Domain names, Halvar, exploit, DNS
- Discussion threads 2008-07-23
- Attack code published for DNS flaw
- The urgency to patch Dan Kaminsky's DNS cache poisoning vulnerability just went up a few notches. Exploit code for the flaw, which allows the insertion of malicious DNS records into the cache of the target nameserver, has been added to Metasploit, a freely distributed attack/pen-testing tool....
- Tags: Ryan Naraine
- Blog posts 2008-07-23
- iPhone vulnerable to phishing, spamming flaws
- iPhone vulnerable to phishing, spamming flawsBut I was told OS X would save me from things like this.[i]In the meantime, iPhone users should avoid clicking on links in the Mail app that refers to trusted sites.[/i]So if my mom sends me a link to a web album, I shouldn't open...
- Tags: Spam, Cyberthreats, Desktops, SECURITY, spamming, Apple iPhone, PC, phishing
- Discussion threads 2008-07-23
- iPhone vulnerable to phishing, spamming flaws
- Security researcher Aviv Raff left has discovered a pair of basic design flaws that could turn your iPhone into easy bait for malicious phishing and spamming attacks. According to an advisory from Raff, the iPhone's Mail and Safari applications are susceptible to a URL Spoofing vulnerability which...
- Tags: Apple iPhone, Apple Safari, Vulnerability, Spamming, Flaw, Aviv Raff, Phishing, Spam, Security, Spam And Phishing, Ryan Naraine
- Blog posts 2008-07-23
- A look at the recent Firefox 3 vulnerability
- A look at the recent Firefox 3 vulnerabilityLOLAlways makes me laugh when a Firefox article is written critical of it, no one adds an opinion.If this were about IE, the thread would be huge.quit making such a big deal, read moreWhy do people write about security vulnerabilities that have happened...
- Tags: Web browsers, SECURITY, vulnerability, Mozilla Firefox, Mozilla Firefox 3.0
- Discussion threads 2008-07-23
- McAfee debunks recent vulnerabilities in AV software research, n.runs restates its position
- Several days after blogging about a research conduced by n.runs AG that managed to discover approximately 800 vulnerabilities in antivirus products, McAfee issued a statement basically debunking the number of vulnerabilities found, and providing its own account into the number of vulnerabilities affecting its own products : "A recent...
- Tags: Software, McAfee Inc., Antivirus, Vulnerability, Vendor, Flaw, N.Runs, Dancho, Security, Viruses And Worms, Dancho Danchev
- Blog posts 2008-07-23
- 75% of online banking sites found vulnerable to security design flaws
- In a paper entitled "Analyzing Web sites for user-visible security design flaws" to be published at the Symposium on Usable Privacy and Security meeting at Carnegie Mellon University July 25, Atul Prakash and two of his doctoral students examined 214 financial institutions in 2006, finding that over 75% of all...
- Tags: Bank, Online Banking, Flaw, Security, Financial Services, Dancho Danchev
- Blog posts 2008-07-23
- RIM ships fix for BlackBerry code execution bug
- Just a quick note to update a story I wrote last week on an unpatched remote execution vulnerability affecting BlackBerry business users: Research in Motion RIM has finally shipped patches to cover the issue, which affects the BlackBerry Attachment Service component of the BlackBerry Enterprise Server. ...
- Tags: Research In Motion Ltd., RIM BlackBerry, Handhelds, Hardware, Ryan Naraine
- Blog posts 2008-07-22
- A look at the recent Firefox 3 vulnerability
- True to form, Billy Rios promised a more in depth look at the MSFA2008-35 vulnerability which is another protocol handler flaw in Firefox 3. As previously reported here, this was another protocol handler flaw that led to arbitrary remote command execution, and is especially dangerous since it can be deployed...
- Tags: Mozilla Firefox 3.0, Mozilla Firefox, Apple Safari, Vulnerability, Protocol Handler, Firefox3, Security Decision, Web Browsers, Security, Internet, Nathan McFeters
- Blog posts 2008-07-22
- Vulnerability disclosure gone awry: Understanding the DNS debacle
- Vulnerability disclosure gone awry: Understanding the DNS debacleI think he deserved better for sureYou know, Dan does manipulate the media well, but I'll tell you this, he's a stand-up guy. Did he try to drum up the press a bit? Sure, why not? Did he choose his...
- Tags: Domain names, Advertising & Promotion, Dan, DNS
- Discussion threads 2008-07-22
- Vulnerability disclosure gone awry: Understanding the DNS debacle
- On July 7, the day before the release of the patch for the now infamous DNS design flaw, hacker Dan Kaminsky with the help of Black Hat conference organizers invited reporters to a press conference to "discuss the massive multivendor patch being released this Tuesday." "A synchronized...
- Tags: Black Hat, DNS, Conference, Dan Kaminsky, Thomas Ptacek, Domain Names, Patches, Security, Networking, Internet, Ryan Naraine
- Blog posts 2008-07-22
- Has Halvar figured out super-secret DNS vulnerability?
- [ UPDATE:Â Kaminsky has all but confirmed that, yes, the cat is out of the bag ] It looks very much like the nitty gritty of Dan Kaminsky's super-secret -- and heavily hyped -- DNS cache poisoning vulnerability has been figured out by reverse engineering guru Halvar...
- Tags: DNS, Vulnerability, Server, Referral, Mallory, Domain Names, Networking, Security, Internet, Ryan Naraine
- Blog posts 2008-07-21
- 2008 Pwnie Award nominees announced
- 2008 Pwnie Award nominees announcedNot bad butI have to give Lamest Vendor Response to Apple for the Safari carpet bomb flaw.Ok, Nate, so here's a solution to your QuickTime problemDon't run your browser with administrative credentials... yeah, yeah you're going to counter with something that is probably mostly FUD based....
- Tags: Digital music, SECURITY, Operating systems, Nate, Pwnie Award
- Discussion threads 2008-07-21
- iPhone 3G Pwned
- From the "It was only a matter of time" department... Over the weekend, the iPhone Dev Team released PwnageTool 2.0.1, a free jailbreaking and unlocking tool for Apple's iPhone and iPod touch devices – including the iPhone 3G. The new version, which can be downloaded from the...
- Tags: Apple iPhone, Apple iPhone 3G, Firmware, Sparkle AppCast URL, PowerPage, Team Management, Management, Jason D. O\'Grady
- Blog posts 2008-07-21
- 2008 Pwnie Award nominees announced
- Well, after getting 134 nominations, and spending countless hours pulling out nominees, the judges for the 2008 Pwnie Awards have announced the final nominees to be voted on. From the site: The final list of nominees for the nine Pwnie Award categories is ...
- Tags: Nominee, Vulnerability, XSS, Attack, Flaw, Dan, XSS Flaw, Lifelock, Security, Nathan McFeters
- Blog posts 2008-07-21
- iCrash: Buggy apps tarnish iPhone 2.0 appeal
- iCrash: Buggy apps tarnish iPhone 2.0 appealBut stability is supposed to be iPhone's strong suit?Hmm, guess not! A big "I told you so" to all those who made fun of WM's theoretical lack of stability even though mine have all worked flawlessly.[i]If you don’t have an Apple account you have...
- Tags: Sales channel, Digital music, Apple iPhone, iPhone 2.0 appeal, iCrash, Buggy app, iPhone 2.0, Apple Inc.
- Discussion threads 2008-07-21
- << Previous
- page 1 of 1
- Next >>
White Papers and Webcasts