Around The Horn vol.1,5

Alerts

Jan 9, 2009 (15 hours ago)
Infocon: green

from SANS Internet Storm Center, InfoCON: green
A Worm Triggering Autolock - Another Sighting of W32.Downadup?

Jan 9, 2009 (yesterday)
A Worm Triggering Autolock - Another Sighting of W32.Downadup?, (Fri, Jan 9th)

from SANS Internet Storm Center, InfoCON: green
An ISC reader asked us about reports of malware that's locking user accounts. According to several m ...(more)...

Jan 9, 2009 (23 hours ago)
Active Scans for Roundcube Vulnerabilities, Possible 0-Day, (Fri, Jan 9th)

from SANS Internet Storm Center, InfoCON: green
Scans for vulnerabilities in Roundcube, popular web mail software, seem to be on the rise. We report ...(more)...

Jan 9, 2009 (20 hours ago)
Executives at a Swedish Company Targeted via an Email Attachment, (Fri, Jan 9th)

from SANS Internet Storm Center, InfoCON: green
We received a report of a Swedish company that was just subjected to a targeted attack. The company' ...(more)...

Security News

Jan 9, 2009 (18 hours ago)
Human Being Firewall

from SANS Information Security Reading Room
Category: Firewalls & Perimeter Protection
Paper Added: January 9, 2009

Jan 9, 2009 (18 hours ago)
Covering the Tracks on Mac OS X Leopard

from SANS Information Security Reading Room
Category: Mac/Apple Issues
Paper Added: January 9, 2009

Jan 9, 2009 (13 hours ago)
Hackers deface Army and Nato sites

from CGISecurity - Website and Application Security News by Robert
"Hackers have taken down two high-profile targets as they continue their ongoing Web attacks in support of Palestine, defacing Web sites run by the U.S. Army and the North Atlantic Treaty Organization (NATO).The attacks on Thursday took down the Web sites for The United States Army Military District of Washington and...

Jan 9, 2009 (13 hours ago)
New DNSSEC Bind Flaw Patched

from CGISecurity - Website and Application Security News by Robert
"Security researcher Dan Kaminsky made headlines last year when he discovered a critical DNS flaw. If left unpatched it could have crippled vast parts of the Internet. As 2009 starts up, a new DNS (define) flaw has emerged, but the severity of the threat is less pronounced. ISC (Internet Systems Consortium)...

Jan 9, 2009 (17 hours ago)
Oracle to issue 41 patches on January 13th

from CGISecurity - Website and Application Security News by Robert
"Next Tuesday (13 January) promises to be a busy day for hard-pressed sys admins. Although Microsoft's regular monthly Patch Tuesday update promises only one bulletin, a critical fix for Windows1, Oracle's quarterly batch weighs in at 41 fixes. The updates fix vulnerabilities across "hundreds of Oracle products", an alert from Oracle...

Jan 9, 2009 (20 hours ago)
How to Suck at Information Security

from CGISecurity - Website and Application Security News by Robert
Lenny Zeltser from dshield has posted an amusing list of ways to suck at information security broken upin the following categories.- Security Policy and Compliance- Security Tools- Risk Management- Security Practices- Password ManagementHere's a snippet"Security Tools Deploy a security product out of the box without tuning it. Tune the IDS to...

Jan 9, 2009 (20 hours ago)
Crafting a Security RFP

from CGISecurity - Website and Application Security News by Robert
"Creating RFPs for security solutions and processing the responses is not an easy task. Having responded to a fair number of such RFPs, I found that many of them are created hastily, and don’t allow the issuer to benefit from quality responses. Here's my list of the top 10 mistakes organizations...

Jan 9, 2009 (14 hours ago)
Pro-Palestine vandals deface Army, NATO sites

from The Register - Security
Protest Israeli Gaza attacks
Online vandals protesting Israel's military action in Gaza have defaced thousands of websites, including high-profile sites belonging to the US Army, the North Atlantic Treaty Organization, and a Washington-based group that oversees homeland security.…

Jan 9, 2009 (17 hours ago)
New York mulls terrorist cell phone jamming

from The Register - Security
Not as simple as it sounds
New York Police officials are studying whether it's possible to disrupt cell phone communications among terrorists during an attack on the city following reports that gunmen in Mumbai used hand-held devices during a deadly rampage in November.…

Jan 9, 2009 (21 hours ago)
Email snafu gifts federal informants' names to press

from The Register - Security
Witless protection
An email error inadvertently disclosed the names of more than 20 confidential informants in a federal investigation to reporters.…

Jan 9, 2009 (22 hours ago)
Hacktivist tool targets Hamas

from The Register - Security
DDoS street protest covers both side of Gaza conflict
Israeli cyberactivists are inviting pro-Israeli surfers to install a tool that attacks websites associated with Hamas.…

Jan 9, 2009 (yesterday)
Oracle patch batch eclipses Microsoft Patch Tuesday

from The Register - Security
41 to one
Next Tuesday (13 January) promises to be a busy day for hard-pressed sys admins.…

4:52 AM (5 hours ago)
Intego updates Mac security, antivirus tools

from Network World on Security
Intego rolled out a spate of updates to its line of Internet security offerings at Macworld Expo, including a significant update to its Internet-filtering software and a new version of its server-side virus protection programs.

Jan 9, 2009 (20 hours ago)
Oracle to issue 41 security patches

from Network World on Security
Oracle will issue 41 security patches next Tuesday addressing vulnerabilities across "hundreds" of its products, the company said in a pre-release announcement .

4:52 AM (5 hours ago)
10 Things That WON'T Happen in 2009

from Network World on Security
Predicting the future is a futile exercise but there are some things that never seem to change year after year even though every effort is made by security professionals to raise awareness and reduce the risk. The list below is not unfamiliar to IT administrators and it is really a checklist of those security issues that resurface every year and are never completely dealt with.

4:52 AM (5 hours ago)
Apimac intros file-encryption software

from Network World on Security
Apimac introduced Protect Files, a new file and folder encryption application. Protect Files 1.0 creates a password-locked encrypted space for files and folders on hard drives, external disks, or a USB drive.

4:52 AM (5 hours ago)
Auditor: IRS still vulnerable to cyber breaches

from Network World on Security by Grant Gross
The U.S. Internal Revenue Service remains vulnerable to a wide range of cybersecurity problems, and the agency has fixed less than half of the vulnerabilities identified in a November audit, according to a report by the U.S. Government Accountability Office released Friday.

4:52 AM (5 hours ago)
Hackers deface NATO, US Army Web sites

from Network World on Security by Robert McMillan
Hackers have taken down two high-profile targets as they continue their ongoing Web attacks in support of Palestine, defacing Web sites run by the U.S. Army and the North Atlantic Treaty Organization (NATO).

4:52 AM (5 hours ago)
Securing your Mac

from Network World on Security
When you think of security for the Mac, you're usually talking about firewalls, encryption products, and (most controversially) antivirus apps. But there are some much more brass-tacks security products on the Macworld Expo show-floor that have nothing to do with hackers or malware.

4:52 AM (5 hours ago)
Fry's VP indicted for wire fraud, money laundering

from Network World on Security
A vice president at Fry's Electronics Inc. was indicted this week by a grand jury on five counts of wire fraud and four counts of money laundering in connection with an alleged kickback scheme that pulled in tens of millions of dollars.

Jan 9, 2009 (17 hours ago)
Brief: Army, NATO sites defaced by Mideast protesters

from SecurityFocus News
Army, NATO sites defaced by Mideast protesters

Jan 9, 2009 (16 hours ago)
Mark Rasch: The Drew Verdict Makes Us All Hackers

from SecurityFocus News
The Drew Verdict Makes Us All Hackers

-- Aurora Report says never a dull Saturday.