Home    News Archive    Translate Traducen
News May 2008
26 May 2008

Guides, Papers, etc
www.securityfocus.com
Integrating More Intelligence into Your IDS, Part 1. Read more

www.securityfocus.com
Integrating More Intelligence into Your IDS, Part 2. Read more

www.technewsworld.com
Hunting Botnets With Randal Vaughn. Read more

www.wired.com
Murder, His Hard Drive Wrote. Read more

www.computer.org
When Malware Attacks (Anything but Windows). Read more

anti-virus-rants.blogspot.com
gaming the mac malware game theory. Read more

isc.sans.org
Cisco IOS Rootkit thoughts. Read more

isc.sans.org
Cisco's Response to Rootkit presentation. Read more

isc.sans.org
Wiping your mobile devices. Read more

ddanchev.blogspot.com
Yet Another DIY Proprietary Malware Builder. Read more

ddanchev.blogspot.com
Malware Domains Used in the SQL Injection Attacks. Read more

ddanchev.blogspot.com
The Icepack Exploitation Kit Localized to French. Read more

ddanchev.blogspot.com
How Does a Botnet with 100k Infected PCs Look Like? Read more

ddanchev.blogspot.com
A Review of Hakin9 IT Security Magazine. Read more

ddanchev.blogspot.com
Web 2.0 Privacy and Security Workshop - Papers Released. Read more

ha.ckers.org
HTTP Proxies Bypass Firewalls. Read more

sunbeltblog.blogspot.com
Apple store now a phishing target. Read more

sunbeltblog.blogspot.com
More spoofed sites. Read more

blog.siteadvisor.com
Hey. How come Yahoo! search looks different today? Read more

blog.spywareguide.com
Beware EBay "Bargains"...Read more

blog.spywareguide.com
Misleading Download Accelerators...as seen on TV. Read more

blog.trendmicro.com
AntiSpySpider Weaves An Intricate Web Threat. Read more

blog.trendmicro.com
Malicious Domains Found in Compromised Japanese Sites. Read more

blogs.paretologic.com/
File extensions matter. Read more

bharath-m-narayan.blogspot.com
Recent Rogue Applications advertised by MediaTubeCodec Trojans. Read more

bharath-m-narayan.blogspot.com
Pest-Patrol. Read more

bharath-m-narayan.blogspot.com
Malicious sites pushing Malwares. Read more

bharath-m-narayan.blogspot.com
SpyGuarder. Read more

bharath-m-narayan.blogspot.com
Advanced XP Fixer. Read more

www.thespanner.co.uk
Firefox applet fun. Read more

www.eweek.com
Weapons of Mass Denial. Read more

www.avertlabs.com
The Strange Case of ‘Mr. Spilberg’. Read more

summation.typepad.com
Black Hat Tariffs – The Black Hat Taxes on consumer Internet companies are on the rise. Read more

blogs.securiteam.com
Overview: Hack in The Box Dubai and Troopers Munich. Read more

www.pcworld.com
Vista's Despised UAC Nails Rootkits, Tests Find. Read more

blogs.securiteam.com
Wikiscanner. Read more

www.viruslist.com
The botnet business. Read more

www.podtrac.com
Audio. Security Now 145: Secunia PSI - Sponsored by Astaro Corp. Listen

www.offensive-security.com
Video. Gain system access to Windows Vista. Watch

 

Tools:
www.nosec.org
Pangolin is a GUI tool running on Windows to perform as more as possible pen-testing through SQL injection. Read more

 

News
www.theglobeandmail.com
Anti-piracy strategy will undermine privacy, critic says. Read more

blog.wired.com
Deadly Earthquake Doesn't Shake China's Internet Censors. Read more

www.theregister.co.uk
Social networking site bans oldies over sex offender fears. Read more

www.zdnet.com.au
NZ hacker sentenced to 3 years jail thanks to FBI. Read more

www.computerworld.com
With rootkit talk coming, Cisco patches router flaws. Read more

www.vnunet.com
Apple fails to patch serious iCal flaws. Read more

www.dailytech.com
Huge Hole in Open Source Software Found, Leaves Millions Vulnerable. Read more

www.vnunet.com
Canadian police losing battle with cyber-criminals. Read more

canadianpress.google.com
Move to protect Canadians' privacy on Net irritates police, attracts others. Read more

www.technewsworld.com
DOJ Busts Up Global Phishing Ring, Charges 38. Read more

economictimes.indiatimes.com
Hackers cracking mobile phones too. Read more

www.vnunet.com
Man posts his own crimes on YouTube. Read more

21 May 2008

Guides, Papers, etc
www.f-secure.com
Phishing Piers on Legitimate Sites. Read more

www.vnunet.com
Asprox botnet rears its ugly head. Read more

www.ciaonet.org
Battling Botnets and Online Mobs. (pdf) Read more

news.bbc.co.uk
What makes a cyber criminal? Read more

www.wired.com
Meet Hiroyuki Nishimura, the Bad Boy of the Japanese Internet. Read more

isc.sans.org
List of malicious domains inserted through SQL injection. Read more

isc.sans.org
Route filtering and its impact on the DNS fabric. Read more

isc.sans.org
Text message and telephone aid scams. Read more

ddanchev.blogspot.com
The Whitehouse.org Serving Malware. Read more

ddanchev.blogspot.com
Pro-Serbian Hacktivists Attacking Albanian Web Sites. Read more

ddanchev.blogspot.com
Fake PestPatrol Security Software. Read more

ddanchev.blogspot.com
All You Need is Storm Worm's Love. Read more

ddanchev.blogspot.com
Fast-Fluxing SQL Injection Attacks. Read more

ddanchev.blogspot.com
The Small Pack Web Malware Exploitation Kit. Read more

ddanchev.blogspot.com
Redmond Magazine SQL Injected by Chinese Hacktivists. Read more

blog.siteadvisor.com
Hey. How come Yahoo! search looks different today? Read more

blog.trendmicro.com
Yet More Weekend Compromises Reach Other Shores. Read more

blog.trendmicro.com
Rootkits Get More Physical. Read more

blog.trendmicro.com
Chinese Weekend Compromise. Read more

bharath-m-narayan.blogspot.com
Zlob sites update. Read more

bharath-m-narayan.blogspot.com
A fleet of Fake codec distributing sites. Read more

www.darkreading.com
Permanent Denial-of-Service Attack Sabotages Hardware. Read more

www.darkreading.com
SQL Injection Attack Helps Hack OS. Read more

blogs.paretologic.com
File extensions matter. Read more

www.wired.com
Our Data, Ourselves. Read more

www.schneier.com
Spying on Computer Monitors Off Reflective Objects. Read more

www.eweek.com
So Your Private Key Has Been Compromised. Read more

honeyblog.org
New Bot-Family Detected: Light-Bots. Read more

anti-virus-rants.blogspot.com
the user is responsible but ill-equipped. Read more

www.informationweek.com
Windows XP SP3 Causes 'Blue Screen Of Death' On AMD-Based PCs. Read more

blog.washingtonpost.com
Most Spam Sites Tied to a Handful of Registrars. Read more

ha.ckers.org
HTTP Proxies Bypass Firewalls. Read more

windowsvistablog.com
5 Misunderstood Features in Windows Vista. Read more

www.securityfocus.com
Legal experts wary of MySpace hacking charges. Read more

news.digitaltrends.com
Could Microsoft OneCare fix Windows? Read more

www.vnunet.com
Vista 'more vulnerable' than Windows 2000. Read more

reviews.zdnet.co.uk
Annoying software: a rogues' gallery. Read more

 

Tools:
www.washingtonpost.com
12 Downloads to Make Your Wi-Fi Life Easier and Fun. Read more News
www.theregister.co.uk
Mass SQL injection hits English language websites. Read more

www.newsfactor.com
Japan Convicts Computer Virus-Spreading Student. Read more

www.vnunet.com
Police smash 38-strong phishing gang. Read more

www.computerworld.com
McAfee anti-fraud researcher charged with fraud. Read more

www.theregister.co.uk
'Hacker Safe' leader defrauded investors, prosecutors say. Read more

17 May 2008

Guides, Papers, etc
www.securityfocus.com
Admins warned of brute-force SSH attacks. Read more

metasploit.com
Debian OpenSSL. Read more

www.networkworld.com
Hacker writes rootkit for Cisco's routers. Read more

blogs.technet.com
More on Windows XP Service Pack 3... Read more

ddanchev.blogspot.com
Got Your XPShield up and Running? Read more

ddanchev.blogspot.com
DIY Phishing Kits Introducing New Features. Read more

ddanchev.blogspot.com
A Botnet of U.S Military Hosts. Read more

rbnexploit.blogspot.com
RBN - Partners Official Sponsors of ICANN? Read more

hackademix.net
PayPal XSSed, Redmondmag.com SQL Injected. Read more

bharath-m-narayan.blogspot.com
Bakasoftware’s saga continues. Read more

holisticinfosec.blogspot.com
Beware the Zangobot! Read more

zeroq.kulando.de
HP OpenView Exploit. Read more

garwarner.blogspot.com
Certificate Dangers? Read more

blog.trendmicro.com
Storm Puppet Masters Pushing Zango Software? Read more

blog.trendmicro.com
Missing Tag Foils Compromise. Read more

sunbeltblog.blogspot.com
New highly deceptive method for fake codec. Read more

sunbeltblog.blogspot.com
Zango and Storm? Read more

momusings.com/momusings
EICAR 2008 Conference Paper Now Available. Read more

blogs.ittoolbox.com
This might be the ultimate irony. Read more

blogs.technet.com
Schneier on US Customs Notebook Searches: Do not follow the rules. Read more

www.avertlabs.com
Mass Hacks Likely to Hang Around for a While. Read more

www.securityfocus.com
Thinking Beyond the Ivory Towers. Read more

www.eweek.com
CME RIP. Read more

blogs.technet.com
The Case of the FrontPage Error. Read more

www.securityfocus.com
The Difference Between Knowledge and Wisdom. Read more

www.theregister.co.uk
'Secure' PayPal page is... you guessed it. Read more

news.netcraft.com
PayPal XSS Vulnerability Undermines EV SSL Security. Read more

www.dhanjani.com
Safari Carpet Bomb. Read more

blog.spywareguide.com
MSNAgent attempts to hide from security analysts. Read more

isc.sans.org
Disaster donation scams continue. Read more

isc.sans.org
INFOcon back to green. Read more

www.darkreading.com
Bots Use SQL Injection Tool in New Web Attack. Read more

www.darkreading.com
The Devil's in the Debian. Read more

blog.wslabi.com
SecurityFocus: we can't believe our eyes. Read more

ha.ckers.org
Phishing Site in Email. Read more

dvlabs.tippingpoint.com
Line Noise. Read more

www.lightbluetouchpaper.org
Hardened stateless session cookies. Read more

www.disog.org
Penetration testing and site security. Read more

googleonlinesecurity.blogspot.com
Safe Browsing Diagnostic To The Rescue. Read more

www.enterpriseitplanet.com
Minimize WLAN Interference. Read more

www.podtrac.com
Audio. Security Now 144: Question and Answer 41. Listen

 

News
www.securityfocus.com
Legal experts wary of MySpace hacking charges. Read more

www.securityfocus.com
TJX completes Mastercard breach settlement. Read more

www.theregister.co.uk
Rootkits on routers threat to be demoed. Read more

www.computerweekly.com
Researcher to reveal malicious rootkit software for all Cisco routers. Read more

itnews.com.au
Shape-shifting malware hits the web. Read more

www.theregister.co.uk
SANS sounds alarm on Debian OpenSSL flaw. Read more

blog.wired.com
Air Force Aims for 'Full Control' of 'Any and All' Computers. Read more

www.japantoday.com
Suspended prison term given to creator of computer virus. Read more

english.chosun.com
Police Nab Suspected Hacker of Korean Bank. Read more

www.darkreading.com
Hackers Sniff Their Way Into Data From Restaurant Chain. Read more

www.usdoj.gov
HACKERS INDICTED FOR STEALING CREDIT AND DEBIT CARD NUMBERS FROM NATIONAL RESTAURANT CHAIN. Read more

arstechnica.com
MySpace "cyber bully mom" will stand trial in LA. Read more

14 May 2008

Guides, Papers, etc
www.av-test.org
ANTI-STEALTH FIGHTERS: TESTING FOR ROOTKIT DETECTION AND REMOVAL. Read more

www.securityfocus.com
Thoughts of a Teenage Bot Master. Read more

www.datasecurity-event.com
Exepacker blacklisting. (ppt) Read more

www.armedforcesjournal.com
Carpet bombing in cyberspace. Why America needs a military botnet. Read more

blog.wired.com
International Hackers Indicted for Sniffing Credit Cards from Dave & Buster's. Read more

query.nytimes.com
DIGITAL COMMERCE; As long as software code is kept secret, Internet security is at risk. Read more

www.f-secure.com
May's Microsoft Updates. Read more

www.f-secure.com
SQL Injection Attacks Becoming More Intense. Read more

www.f-secure.com
US Air Force Colonel Proposes Skynet. Read more

isc.sans.org
War of the worlds? Read more

isc.sans.org
Microsoft office file block & MOICE. Read more

isc.sans.org
OpenSSH: Predictable PRNG in debian and ubuntu Linux. Read more

isc.sans.org
May 2008 black tuesday overview. Read more

isc.sans.org
Adobe Releases Security Bulletin. Read more

isc.sans.org
Brute-force SSH Attacks on the Rise. Read more

isc.sans.org
Mass File Injection Attack. Read more

ddanchev.blogspot.com
The FirePack Exploitation Kit Localized to Chinese. Read more

ddanchev.blogspot.com
Major Career Web Sites Hit by Spammers Attack. Read more

ddanchev.blogspot.com
Custom DDoS Attacks Within Popular Malware Diversifying. Read more

ddanchev.blogspot.com
Stealing Sensitive Databases Online - the SQL Style. Read more

ddanchev.blogspot.com
Skype Phishing Pages Serving Exploits and Malware. Read more

ddanchev.blogspot.com
A Chinese DIY Multi-Feature Malware. Read more

www.darkreading.com
'Race-to-Zero' Could Expose AV. Read more

www.darkreading.com
The Bear Facts. Read more

www.darkreading.com
Free 'AxBan' Tool Kills Bad ActiveX Controls. Read more

www.arnnet.com.au
System hardening effective weapon against unknown security threats. Read more

www.securityfocus.com
Click Crime. Read more

www.net-security.org
The Rising Trend of Internet Counter-Intelligence. Read more

www.microsoft.com
Microsoft Security Intelligence Report (July - December 2007). Read more

www.arbornetworks.com
Shining Light on Dark Address Space. (pdf) Read more

blog.spywareguide.com
OKOK.exe is not okay - kthanks. Read more

blog.spywareguide.com
Fake Windows Update Popup: It's Back (Again). Read more

blog.spywareguide.com
Scare Tactics. Read more

blog.spywareguide.com
Roll Up, Roll Up, Get Your Passports Here. Read more

blog.spywareguide.com
First Time For Everything. Read more

www.thespanner.co.uk
Double encoding javascript. Read more

www.teamfurry.com
Java DDOS bot. Read more

www.teamfurry.com
PHP DDOS Bot. Read more

bharath-m-narayan.blogspot.com
XP-Shield. Read more

bharath-m-narayan.blogspot.com
New set of sites distributing Zlob, DNS Changer and Trojan-Downloader. Read more

blogs.paretologic.com
Beware of search engines helpers. Read more

www.podtrac.com
Audio. Security Now 143: YubiKey. Listen

 

News
www.securityfocus.com
U.S. military to build botnet? Read more

www.computerworld.com.au
BLACK HAT - Hackers find a new place to hide rootkits. Read more

www.darkreading.com
New Tests Show Rootkits Still Evade AV. Read more

www.news.com.au
Amnesty protests at Chinese internet censorship. Read more

www.channelregister.co.uk
Microsoft updates squash 4 critical bugs. Read more

blogs.zdnet.com
McAfee’s HackerSafe: When all else fails, rebrand it! Read more

www.pcworld.com
Hacker Posts Chilean Government Data on 6 Million. Read more

www.lohud.com
Stolen laptop leads victim to alleged thieves. Read more

www.news.com
Hackers going after restaurants, supermarkets. Read more

07 May 2008

Guides, Papers, etc
isc.sans.org
SQL Injection Worm on the Loose. Read more

isc.sans.org
Industrial Control Systems Vulnerability. Read more

isc.sans.org
Windows XP Service Pack 3 Released. Read more

isc.sans.org
Defenses Against Automated Patch-Based Exploit Generation. Read more

isc.sans.org
How Configuration Management supports Systems Security. Read more

isc.sans.org
Windows Vista Update Causing Loss of Audio on Some Systems. Read more

isc.sans.org
Hi, remember me?... Read more

ddanchev.blogspot.com
Blackhat SEO Campaign at The Millennium Challenge Corporation. Read more

ddanchev.blogspot.com
Harvesting YouTube Usernames for Spamming. Read more

ddanchev.blogspot.com
Ethical Phishing to Evaluate Phishing Awareness. Read more

sunbeltblog.blogspot.com
Merril Lynch phish making the rounds. Read more

sunbeltblog.blogspot.com
Sunbelt joins in Amicus brief in Zango vs. Kaspersky. Read more

sunbeltblog.blogspot.com
Problems at iPowerWeb? Read more

sunbeltblog.blogspot.com
Advertising in malware. Read more

www.eweek.com
Good Worms Are a Bad Idea. Read more

anti-virus-rants.blogspot.com
the anti-av revolt. Read more

blog.spywareguide.com
Memehacks. Read more

blog.spywareguide.com
It's A Trap! Read more

blog.spywareguide.com
Beware: New MSN Messenger Password Stealing Program In The Wild. Read more

swatrant.blogspot.com
Zlob fake codecs in Google Notebook. Read more

blog.trendmicro.com
Those Lazy Hazy Crazy Days of Summer (Movies). Read more

blog.trendmicro.com
Developing: New Adventures in SQL Injection Attacks. Read more

garwarner.blogspot.com
Digital Certificate Alert! Read more

blogs.paretologic.com
Keyloggers. Read more

www.computerworld.com.au
Malware vs. anti-malware, 20 years into the fray. Read more

www.securityfocus.com
Race To Zero: It's Not A Contest, It's A Protest. Read more

www.f-secure.com
BBB Case #947344536. Read more

thedailywtf.com
The Super Hacker. Read more

www.net-security.org
(In)Secure Magazine issue 16. Read more

www.pcworld.com
What to Do When Windows Gets Really Messed Up. Read more

 

News
www.cdt.org
CDT Is Joined on Anti-Spyware Brief by A Wide Range of Groups and Companies. Read more

www.securityfocus.com
Groups warn travelers to limit laptop data. Read more

www.vnunet.com
Fake MP3 attack hits 360,000 PCs. Read more

www.publictechnology.net
Discovered: A Hacker Server with stolen customer data from 40 top-tier global firms. Read more

www.betanews.com
Download links on Yahoo may include malicious content warnings. Read more

02 May 2008

Guides, Papers, etc
www.securityfocus.com
Patch paper redux: Move along please. Read more

holisticinfosec.blogspot.com
An Open Letter to Ken Leonard, CEO, ScanAlert. Read more

www.microsoft.com
Microsoft Calls on Global Public-Private Partnerships to Help in the Fight Against Cybercrime. Read more

www.datasecurity-event.com
ANTI-UNPACKER TRICKS. Read more

www.datasecurity-event.com
Anti-Emulation Through Time-Lock Puzzles. Read more

dvlabs.tippingpoint.com
Kraken Botnet Infiltration. Read more

dvlabs.tippingpoint.com
Owning Kraken Zombies, a Detailed Dissection. Read more

sunbeltblog.blogspot.com
Zango reacts to Sunbelt blog posts. Read more

sunbeltblog.blogspot.com
New rogue: AntiVirProtect. Read more

sunbeltblog.blogspot.com
Fresh rogue and fake codec sites. Read more

sunbeltblog.blogspot.com
Zango shows off screensaver with Zango site burning. Read more

sunbeltblog.blogspot.com
Zango partnerships. Read more

sunbeltblog.blogspot.com
Microsoft-like scam sites. Read more

bharath-m-narayan.blogspot.com
New set of SSH Zlob Trojan Family’s Component site... Read more

blogs.paretologic.com
The fine art of rogue scamming. Read more

ddanchev.blogspot.com
Segmenting and Localizing Spam Campaigns. Read more

ddanchev.blogspot.com
Testing Signature-based Antivirus Products Contest. Read more

ddanchev.blogspot.com
Detection Rates for Malware in the Wild. Read more

ddanchev.blogspot.com
Fake Directory Listings Acquiring Traffic to Serve Malware. Read more

ddanchev.blogspot.com
Response Rate for an IM Malware Attack. Read more

ddanchev.blogspot.com
New DIY Malware in the Wild. Read more

news.zdnet.co.uk
Estonia's cyberattacks: Lessons learned, a year on. Read more

isc.sans.org
Windows Detours. Read more

isc.sans.org
Windows XP SteadyState. Read more

isc.sans.org
ISC Podcast Episode Number 3. Read more

isc.sans.org
(Minor) evolution in Mac DNS changer malware. Read more

isc.sans.org
Windows Service Pack blocker tool. Read more

isc.sans.org
Scripts in ASF files. Read more

www.darkreading.com
When Bots Don't Care - Or Don't Know Enough to. Read more

www.darkreading.com
Crime & Punishment. Read more

msmvps.com
New malvertizement - americansingles.com. Read more

www.networkworld.com
How one site dealt with SQL injection attack. Read more

www.avertlabs.com
PCI Requirement 6.6 - Confusing the confused. Read more

www.avertlabs.com
Mobile phone malware launders money through an online game. Read more

www.avertlabs.com
Greetings from Amsterdam…Read more

www.informationweek.com
8 Dirty Secrets Of The Security Industry. Read more

www.eweek.com
The Battle for Your Browser. Read more

www.catonmat.net
Videos from Defcon 15 Hacker Conference. Read more

www.eff.org
Protecting Yourself From Suspicionless Searches While Traveling. Read more

news.zdnet.co.uk
The Russian approach to tackling data breaches. Read more

www.podtrac.com
Audio. Security Now 142: Listener Feedback 40. Listen

 

News
www.theregister.co.uk
MS misses restart button on desktop auto-updates. Read more

www.theregister.co.uk
YouTube rolls out Scientology double standard. Read more

www.theregister.co.uk
Every Italian's tax bill published online. Read more

www.theregister.co.uk
Linux-guru's conviction fuels ReiserFS debate. Read more

www.dailyindia.com
Malicious hardware may soon replace computer viruses as hackers' tools. Read more

blog.wired.com
Sneaky Safari Update Triples the Browser's Windows Market Share. Read more

www.computeractive.co.uk
Kraken awakes to oust Storm. Read more

ha.ckers.org
Older Browsers Blocked By PayPal. Read more

www.theregister.co.uk
30 years of Spam - and we ain't finished yet. Read more

www.vnunet.com
Storm botnet blows itself out. Read more

www.newsnow.co.uk
Poor programming practices to blame for website hacks, analysts say. Read more

www.theregister.co.uk
US warez sitemaster jailed for 30 months. Read more

www.computerworld.com
Nigerian gets 18 months for cyberattack on NASA employee. Read more

www.vnunet.com
Spammers target Grand Theft Auto fans. Read more


Copyright© MegaSecurity.org