Around The Horn vol.1,17

Alerts

Jan 21, 2009 (18 hours ago)
Cisco Unified Communications Manager CAPF Denial of Service Vulnerability

from Cisco Security Advisories
Cisco Unified Communications Manager, formerly Cisco CallManager, contains a denial of service (DoS) vulnerability in the Certificate Authority Proxy Function (CAPF) service. Exploitation of this vulnerability could cause an interruption in voice services. The CAPF service is disabled by default.

Jan 21, 2009 (18 hours ago)
Cisco Security Manager Vulnerability

from Cisco Security Advisories
Cisco Security Manager contains a vulnerability when it is used with Cisco IPS Event Viewer (IEV) that results in open TCP ports on both the Cisco Security Manager server and IEV client. An unauthenticated, remote attacker could leverage this vulnerability to access the MySQL databases or IEV server.

9:10 PM (9 hours ago)
How to Use Twitter for Information Mining, (Wed, Jan 21st)

from SANS Internet Storm Center, InfoCON: green
Twitter is fun. It's also a powerful research tool ...(more)...

Jan 21, 2009 (14 hours ago)
Vulnerabilities on Cisco and Apple products, (Wed, Jan 21st)

from SANS Internet Storm Center, InfoCON: green
A new set of vulnerabilities has been announced for Cisco and Apple products: Cisco: Cisco S ...(more)...

Jan 21, 2009 (20 hours ago)
Traffic increase for port UDP/8247, (Wed, Jan 21st)

from SANS Internet Storm Center, InfoCON: green
We got reports of a significant traffic increase associated to port UDP/8247 starting yesterday. Tha ...(more)...

Jan 21, 2009 (21 hours ago)
NMAP Trivia ANSWERS: Mastering Network Mapping and Scanning, (Wed, Jan 21st)

from SANS Internet Storm Center, InfoCON: green
Three weeks ago we published the NMAP Trivia challenge. Thanks to all ISC readers that submitted the ...(more)...

Security News

9:21 PM (8 hours ago)
Disabling Windows Autorun - there's a right way and a wrong way

from The Register - Security
Redmond's Downadup protection
After some confusion about exactly how Windows users can protect themselves against a prolific computer worm called Downadup, Microsoft security watchers are once again reiterating the steps for disabling the Autorun feature.…

5:16 AM (1 hour ago)
Sophos to shed one in 20 jobs

from The Register - Security
Redundancies due to shifting priorities, not credit crunch
UK-based security firm Sophos plans to shed five per cent of its workforce as part of a "business reorganisation".…

Jan 21, 2009 (22 hours ago)
The End of Passwords?

from WindowSecurity.com by rickym@trencor.net (Ricky M. Magalhaes)
The end of passwords and how new technologies will keep enterprise information assets secure.

5:07 AM (1 hour ago)
Bloggers wonder: Is Obama's BlackBerry super-encrypted?

from Network World on Security
Bloggers are now speculating that President Barack Obama will have access to a BlackBerry wireless device equipped with a super-encryption package, although -- not surprisingly -- no one is sure whether the president actually is using one.

5:07 AM (1 hour ago)
Blogger: Obama to get 'super-encrypted' BlackBerry

from Network World on Security by John Cox
A blogger for The Atlantic says, without attribution that President Obama will get to use a BlackBerry, one that the NSA has its fingerprints all over, too.

5:07 AM (1 hour ago)
Panda Security: Downadup worm now infects 1 in every 16 PCs

from Network World on Security
The computer worm responsible for the biggest attack in years has infected at least 1 out of every 16 PCs worldwide, a security company said Wednesday, and may have managed to compromise as many as nearly 1 in 3.

Jan 21, 2009 (16 hours ago)
DOJ seeks to block warrantless wiretap ruling

from Ars Technica by julian.sanchez@arstechnica.com (Julian Sanchez)
Just before George W. Bush left office, Justice Department lawyers moved to block a suit challenging warrantless NSA wiretaps.

Jan 21, 2009 (12 hours ago)
DoD Foots the Bill for Web-Based Security Training

from PC World Latest Technology News
Save budgetary bucks by outsourcing security training to our government.

Jan 21, 2009 (12 hours ago)
Debit Card Data Breach Compared to TJX

from PC World Latest Technology News
Banks warn customers about possible fraud, and in one case deactivate 8,500 debit cards.

Jan 21, 2009 (12 hours ago)
Gmail Fills the Bill for Obama Staff

from PC World Latest Technology News
When first entering the White House, Obama's staff lacked e-mail. So, the administration issued its staffers Google Gmail accounts to bridge the gap.

-- Aurora Report says "wow it is a veritable heat wave out there" not that it has anything to do with security but after days of subzero temps today it is a whopping 27 F.