Help Net Security - Advisories

NEWS

SSH key-based attacks

A third of IT staff snoop at confidential data

Panda Security launches its 2009 antivirus products

BT enhances security monitoring service

Wireless DTCP content protection specification

ARTICLES

Application Security Matters: Deploying Enterprise Software Securely

Security Risks for Mobile Computing on Public WLANs: Hotspot Registration

Reverse Engineering: Smashing the Signature

Internet Terrorist: Does Such A Thing Really Exist?

Reputation Attacks: A Little Known Internet Threat

THE WIRE

Use and manipulate tcsh shell variables for fun and profit

Deploying enterprise software securely

Whitepaper - Open source security myths dispelled

Most organizations fail to stop interior network threats

Road tolls hacked

Reverse Engineer's Swiss Army Knife

REVIEWS

Security Power Tools

Network Warrior

Google Apps Hacks

Crimeware: Understanding New Attacks and Defenses

Big Book of Windows Hacks

MALWARE

More malware blocked in July 2008 than in the whole of 2007

Malware of the week: AIM worm, spammer trojan and fake p2p apps

"New" Madonna video comes with a trojan horse

Spoof P2P applications distribute the Lop adware

Threat Spy: tracking malware across the globe

ADVISORIES

Ubuntu Security Notice - yelp vulnerability (USN-638-1)

Mandriva Linux Security Update Advisory - libxml2 (MDVSA-2008:180-1)

Debian Security Advisory - libxml2 (DSA-1631-2)

VULNERABILITIES

Freeway Multiple Input Validation Vulnerabilities

ESET Smart Security "easdrv.sys" Local Privilege Escalation

GnuTLS "gnutls_handshake()" Function Remote Denial of Service

GFI: Complete email security with 5 anti-virus engines - only with GFI MailSecurity. Download your free 30 day trial today!

Advisories

Browse

or

or

Released in the last 5 days

28 August 2008	Ubuntu Security Notice - yelp vulnerability (USN-638-1)
26 August 2008	Mandriva Linux Security Update Advisory - libxml2 (MDVSA-2008:180-1) Debian Security Advisory - libxml2 (DSA-1631-2) Debian Security Advisory - tiff (DSA-1632-1)
25 August 2008	Ubuntu Security Notice - Ubuntu Security Notice USN-637-1 (USN-637-1) SUSE Security Announcement - Sun Java security update (SUSE-SA:2008:042)

Qualys: This free security guide describes the scanning requirements for PCI-DSS and provides a quick-reference requirements matrix for both Merchants and Service Providers of all levels.

Vulnerability Scanning

Network Vulnerabilities

Event Log Security