Help Net Security

NEWS

SSH key-based attacks

A third of IT staff snoop at confidential data

Panda Security launches its 2009 antivirus products

BT enhances security monitoring service

Wireless DTCP content protection specification

ARTICLES

Application Security Matters: Deploying Enterprise Software Securely

Security Risks for Mobile Computing on Public WLANs: Hotspot Registration

Reverse Engineering: Smashing the Signature

Internet Terrorist: Does Such A Thing Really Exist?

Reputation Attacks: A Little Known Internet Threat

THE WIRE

Use and manipulate tcsh shell variables for fun and profit

Deploying enterprise software securely

Whitepaper - Open source security myths dispelled

Most organizations fail to stop interior network threats

Road tolls hacked

Reverse Engineer's Swiss Army Knife

REVIEWS

Security Power Tools

Network Warrior

Google Apps Hacks

Crimeware: Understanding New Attacks and Defenses

Big Book of Windows Hacks

MALWARE

More malware blocked in July 2008 than in the whole of 2007

Malware of the week: AIM worm, spammer trojan and fake p2p apps

"New" Madonna video comes with a trojan horse

Spoof P2P applications distribute the Lop adware

Threat Spy: tracking malware across the globe

ADVISORIES

Ubuntu Security Notice - yelp vulnerability (USN-638-1)

Mandriva Linux Security Update Advisory - libxml2 (MDVSA-2008:180-1)

Debian Security Advisory - libxml2 (DSA-1631-2)

VULNERABILITIES

Freeway Multiple Input Validation Vulnerabilities

ESET Smart Security "easdrv.sys" Local Privilege Escalation

GnuTLS "gnutls_handshake()" Function Remote Denial of Service

Security Power Tools
by HNS Staff - Wednesday, 16 July 2008.

By reading through security web sites, traversing through software depositories and using Google, you can keep your self updated with the latest tools and attack/defense scenarios based on them. If you want a centralized place on reading this kind of information, "Security Power Tools" is definitely the book you should check out.