Around The Horn vol.1,26

Alerts

5:34 AM (3 hours ago)
WMware updates, (Sat, Jan 31st)

from SANS Internet Storm Center, InfoCON: green
WMware issued a number of fixes for VMware ESXi 3.5, VMware ESX 3 ...(more)...

2:34 AM (6 hours ago)
Windows 7 - not so secure ?, (Sat, Jan 31st)

from SANS Internet Storm Center, InfoCON: green
While it is still a beta program, and as such not very interesting to report on yet, there is a litt ...(more)...

Jan 30, 2009 (14 hours ago)
Request for info - Scan and webmail, (Fri, Jan 30th)

from SANS Internet Storm Center, InfoCON: green
Two readers brought something interesting to our attention and we're asking if you have some info th ...(more)...

Jan 30, 2009 (23 hours ago)
We all "Love" USB drives, (Fri, Jan 30th)

from SANS Internet Storm Center, InfoCON: green
Loss of confidential information because of a USB stick is nothing new, but this one is quite amusin ...(more)...

9:08 AM (seconds ago)
VMware ESX 3.5, Patch ESX350-200901409-SG: Security Update for SNMP in the Service Console (1006659)

from VMware RSS Feed by vmtn@vmware.com (VMTN)
VMware ESX 3.5, Patch ESX350-200901409-SG: Security Update for SNMP in the Service Console (1006659)
Release Date: Jan. 30, 2009 Download Size: 2.18MB Download Filename: ESX350-200901409-SG.zip md5sum: 2c75cd848d9f3c51619b9a7bd60d20a3 Product...

Security News

Jan 30, 2009 (15 hours ago)
Capture the flag for education and mentoring

from SANS Information Security Reading Room
Category: Case Studies
Paper Added: January 30, 2009

Jan 30, 2009 (15 hours ago)
Social Engineering: Manipulating the Source

from SANS Information Security Reading Room
Category: Social Engineering
Paper Added: October 14, 2008

3:16 AM (6 hours ago)
Microsoft Open Sources Web Sandbox

from CGISecurity - Website and Application Security News by Robert A.
Sacha Writes"Microsoft has announced plans to release the code of its Web Sandbox project under the open source Apache Software License.The Web Sandbox project aims to mitigate some of the security risks that are associated with building Web mashups that mix in untrusted content from third-party sources. The task of isolating...

Jan 30, 2009 (13 hours ago)
DEC 'hacker' questions McKinnon political bandwagon

from CGISecurity - Website and Application Security News by Robert A.
"Boris Johnson's outspoken defence of Gary McKinnon in his extradition fight has been criticised by a former security consultant, who complains he was denied such support when he himself was charged with hacking offences. Daniel Cuthbert was convicted in October 2005 of breaking the Computer Misuse Act by "hacking" into a...

Jan 30, 2009 (21 hours ago)
IT admin plotted to erase Fannie Mae Data

from CGISecurity - Website and Application Security News by Robert A.
"A fired computer engineer for Fannie Mae has been arrested and charged with planting a malicious software script designed to permanently destroy millions of dollars worth of data from all 4,000 servers operated by the mortgage giant. Rajendrasinh Babubahai Makwana, 35, of Virginia, concealed the Unix script on Fannie Mae's main...

Jan 30, 2009 (21 hours ago)
US school in toothless Obama worm infection

from The Register - Security
Round up the dweebiest suspects
Security experts reckon a new low-threat worm that displays the image of President Obama on infected desktops is the work of technically-knowledgeable pranksters.…

Jan 30, 2009 (23 hours ago)
DEC 'hacker' questions McKinnon political bandwagon

from The Register - Security
Boris didn't big me up - what gives?
Boris Johnson's outspoken defence of Gary McKinnon in his extradition fight has been criticised by a former security consultant, who complains he was denied such support when he himself was charged with hacking offences.…

Jan 30, 2009 (yesterday)
The Register Guide to securing your network

from The Register - Security
Showing our vulnerability side
From time to time we ask our analyst friends at Freeform Dynamics to compose a primer on a tech topic du jour. Today, we focus on vulnerability management, a crucial component in every IT security strategy.…

Jan 30, 2009 (yesterday)
Texas lawyer sues Citibank over fake cheque scam

from The Register - Security
'I'm a capital 'D' Dumbass', admits fleeced victim of Lads from Lagos
A Houston lawyer is suing Citibank after being taken for $182,500 by email scammers claiming to be a debt-chasing Japanese company, Texas Lawyer reports.…

Jan 30, 2009 (17 hours ago)
Windows 7 UAC shutoff 'bug' leaves Microsoft unmoved

from The Register - Security
Insecure by design? s
Security researchers have unearthed a potentially serious flaw in User Account Control (UAC) features in Windows 7. Microsoft is aware of the issue but is currently unconvinced it needs to make changes to the pre-release code.…

4:58 AM (4 hours ago)
UAC fix in Windows 7 creates security hole, blogger says

from Network World on Security
A change that Microsoft made in Windows 7 to improve its controversial User Account Control security feature has left the new OS less secure, according to a blogger who follows Microsoft closely.

4:58 AM (4 hours ago)
Prevent Onlookers from Seeing Mobile Secrets

from Network World on Security
Your mobile devices have secrets, which is why you should require an unlock code before each use. But if you're especially nervous about onlookers seeing your screen over your shoulder, the same kinds of laptop privacy screens are also made in mobile phone sizes.

4:58 AM (4 hours ago)
Victims of massive Internet Ponzi scheme sue Bank of America

from Network World on Security
The victims of a massive Internet Ponzi scheme have sued Bank of America (BofA) for helping the fraud occur by continuing to do business with the alleged perpetrators despite numerous signs of illegal activity.

4:58 AM (4 hours ago)
Microsoft charges employee with spying

from Network World on Security
Microsoft has filed a lawsuit against a former employee, charging him with taking a job at the software giant in order to steal information that would be helpful in his patent infringement case against the company.

Jan 30, 2009 (20 hours ago)
Researcher : P2P networks rife with health-care data

from Network World on Security
Eric Johnson didn't have to break into a computer to gain access to a 1,718-page document containing Social Security numbers, dates of birth, insurance information, treatment codes and other health-care data belonging to about 9,000 patients at a medical testing laboratory.

Jan 30, 2009 (20 hours ago)
SonicWall introduces management appliance

from Network World on Security by Tim Greene
SonicWall is putting its Global Management System software onto an appliance to make the platform easier to deploy.

Jan 30, 2009 (20 hours ago)
Brief: Contractor indicted for Fannie Mae malware

from SecurityFocus News
Contractor indicted for Fannie Mae malware

Jan 30, 2009 (22 hours ago)
Brief: Cyber attacks disrupt Kyrgyzstan's networks

from SecurityFocus News
Cyber attacks disrupt Kyrgyzstan's networks>> Advertisement

-- Aurora Report says woah vmware feed was broken, thank goodness for crosschecking information sources.