Bookmark or link to: www.kobayashi.cjb.net. All other url`s could change!

News Archive    Translate Traducen

News July 2001

31 July 2001 Artic Warfare Device 1.3. xforce.iss.net: Internet Security Systems Security Alert X-Force Response to Concern About the "Code Red" Worm. Read more www.securiteam.com: Continued Threat of the "Code Red" Worm. Read more www.securiteam.com: Various Security Problems Found in Trend Micro AppletTrap Script Filtering. Read more www.securiteam.com: Snapstream PVS Security Vulnerability. Read more abcnews.go.com: 'Code Red' Worm May Re-Emerge on Internet Tuesday. Read more www.theregister.co.uk: Code Red Tribulation is nigh, Steve Gibson warns. Read more www.ireland.com: Code Red worm poised for second attack on Internet. Read more www.cnn.com: Net braces for stronger 'Code Red' attack. Read more www.internetnews.com: Code Red: "I'll Be Back!". Read more www.nst.com.my: Expect Code Red computer virus to wreck havoc on Thurs. Read more www.ananova.com: FBI teams up with government to crack computer virus. Read more www.messagelabs.co.uk: 30 Jul 2001 - W32/SirCam latest statistics. Read more www.vnunet.com: DoJ 'will prosecute Russian hacker'. Read more it.mycareer.com.au: Free speech emasculated. Read more www.thestandard.com: German �ber-Hacker Dies. Read more www.siliconvalley.com: Mob trial focuses on high-tech surveillance, privacy rights. Read more vmyths.com: Gibson declared antivirus software 'dead' -- in 1992. Read more web.lexis-nexis.com: What Goes on Inside a Virus Writer. Read more web.lexis-nexis.com: Is the Internet a Big Bluff? Lewis Plays Hacker's Poker. Read more

30 July 2001 Subsari 1.4 by KiPSOFT www.linuxsecurity.com: - EnGarde is a secure distribution of Linux engineered from the ground-up to provide organizations with the level of security required to create a corporate Web presence or even conduct e-business on the Web. It can be used as a Web, DNS, e-mail, database, e-commerce, and general Internet server where security is a primary concern. Read more We the CERT/CC, along with other organizations listed below are jointly publishing this alert about a serious threat to the Internet A Very Real and Present Threat to the Internet: July 31 Deadline For Action Summary: The Code Red Worm and mutations of the worm pose a continued and serious threat to Internet users. Immediate action is required to combat this threat. Users who have deployed software that is vulnerable to the worm (Microsoft IIS Versions 4.0 and 5.0) must install, if they have not done so already, a vital security patch. On July 19, the Code Red worm infected more than 250,000 systems in just 9 hours. The worm scans the Internet, identifies vulnerable systems, and infects these systems by installing itself. Each newly installed worm joins all the others causing the rate of scanning to grow rapidly. This uncontrolled growth in scanning directly decreases the speed of the Internet and can cause sporadic but widespread outages among all types of systems. Code Red is likely to start spreading again on July 31st, 2001 8:00 PM EDT and has mutated so that it may be even more dangerous. This spread has the potential to disrupt business and personal use of the Internet for applications such as electronic commerce, email and entertainment. www.securiteam.com: Search Engines HTML Parsing Vulnerability (Lycos). Read more www.securiteam.com: Tivoli SecureWay Web Seal Policy Security Vulnerability. Read more www.securiteam.com: IBM AlphaWorks TFTP Server for Java Directory Traversal. Read more www.securiteam.com: Malformed RPC Request Can Cause Service Failure (Exchange, SQL, Windows). Read more www.securiteam.com: Invalid RDP Data Can Cause Memory Leak in Terminal Services. Read more news.cnet.com: Virulent worm calls into doubt our ability to protect the Net. Read more www.abc.net.au: New 'net worm' could disrupt Internet. Read more it.mycareer.com.au: US Government, private officials fret over Code Red worm. Read more www.siliconvalley.com: Government, private officials sound alarm over 'Code Red' worm. Read more news.bbc.co.uk Internet's 'very real' virus threat. Read more www.stuff.co.nz: SirCam computer worm could wipe out hard drive files. Read more www.guardianunlimited.co.uk: Hackers plan to bite back as FBI detains Russian. Read more news.cnet.com: Hacker arrest may spur review of digital rules. Read more www.attrition.org: Attrition.org defaced. Read more www.iht.com: The Real Threat Is Cyberterrorism. Read more ap.tbo.com: Investigation Ordered After Computer Glitch at State Agency Exposes Student Records. Read more australianit.news.com.au: How the FBI watches the net. Read more seattletimes.nwsource.com: FBI's high-tech snooping goes on trial. Read more australianit.news.com.au: XP won't be stopped: Microsoft. Read more

29 July 2001 Command Center Nmap 2.54BETA28 is now available. Download www.securiteam.com: Pic LPd Remote Exploit (QUEUE). Read more www.securiteam.com: Proxomitron Cross-Site Scripting Vulnerability. Read more www.securiteam.com: Services for UNIX 2.0 Suffer from a Remotely Triggered Memory Leak. Read more www.theregister.co.uk: Dmitry haunts FBI-chief's confirmation. Read more news.cnet.com: Hacker arrest may spur review of digital rules. Read more defaced.alldas.de: Attrition defaced. Mirror www.securitywatch.com: Sircam foiled Norton Anti-virus. Read more www.securitywatch.com: Code Red dead? Read more www.cleveland.com: Security gurus spy on hackers using honeypot' computer net. Read more www.naplesnews.com: Hacker attacks on California power raise alarms about security. Read more www.ntcompatible.com: Windows XP RC2 for Preview Program Customers. Read more www.theregister.co.uk: US Senator aims to kill Win XP launch. Read more web.lexis-nexis.com: New E-mail Virus Hits China. Read more web.lexis-nexis.com: Hack Attack Targets Verizon, AT&T Wireless Customers. Read more www.theregister.co.uk: Hacking activity at all-time high. Read more www.cnn.com: PC spies eye children, lovers, employees. Read more

28 July 2001 ScreenGrab www.roses-labs.com: Remote Password Assassin (RPA) is a powerful security tool to test passwords across networks. In a simple way, RPA is a Network Password Cracker using Brute Force Attack and able to attack very common ports on servers. When RPA is finish it will generate a HTML report, easy to follow and detailing the session. Read more www.securiteam.com: Trojans can block ZoneAlarm by setting a Mutex in memory. ZoneAlarm and ZoneAlarm Pro can be stopped from loading by creating a memory-resident Mutex (using a call to the CreateMutex API). Uninstalling\reinstalling ZoneAlarm in a different path has no effect. The impact of this vulnerability is that a Trojan running on a victim's machine can prevent ZoneAlarm from loading, and thus leave the victim open for attack. Read more www.securiteam.com: Security Hole in Mambo Site Server Leads to Server Compromise. Read more www.securiteam.com: Windows Media Player .NSC Processor Buffer Overflow Vulnerability. Read more www.securiteam.com: UNIX Assembly Codes Development for Vulnerabilities Illustration Purposes. Read more linuxtoday.com: Debian Security Advisory: New versions of apache, fixes index bug. Read more news.zdnet.co.uk: 'Code Red' virus re-infection expected on 1 August. Read more computerworld.com: Code Red worm problems could re-emerge Aug. 1. Read more www.newsbytes.com: It's Bed Time For Code Red Worm - But Is It Sleepy? Read more www.2600.com: NEW ROUND OF PROTESTS PLANNED IN SUPPORT OF SKLYAROV. Read more www.guardianunlimited.co.uk: Hackers plan to bite back as FBI detains Russian. Read more www.reuters.com: California Backers Push to Free Russian Hacker. Read more www.thestandard.com: Uphill Battle for Russian Programmer. Read more www.theregister.co.uk: Symantec fails to stop SirCam. Read more www.theregister.co.uk: Four new ways to stuff someone's Win machine. Read more www2.linuxjournal.com: Hacking Vegas at Black Hat and DEF CON: One Geek's Experience. Read more www.computerbuyer.co.uk: Hacker gets access to largest reported loss in business history. Read more www.computing.vnunet.com: Bad day for JDS Uniphase as hackers strike. Read more www.vnunet.com: Hackers are too risky to hire, says security firm boss. Read more www.wired.com: India Hackers Scared Straight? Read more thestar.com.my: Cyberlaws need to be updated. Read more www.vnunet.com: Lucent hit by hacking double whammy. Read more www.newsbytes.com: Gateway Scanners Plug Holes Against SirCam. Read more www.theregister.co.uk: FBI cyber-braniacs infect themselves with SirCam. Read more www.theregister.co.uk: Blowjob-assisted hack defies logic. Read more www.newsbytes.com: Microsoft Bulletins Fail PGP Verification. Read more www.theregister.co.uk: Watchdogs file Win-XP complaint with Feds. Read more

27 July 2001 MainLine 1.0b Microsoft Security Bulletin MS01-042 Windows Media Player .NSC Processor Contains Unchecked Buffer. Read more Microsoft Security Bulletin MS01-041 Malformed RPC Request Can Cause Service Failure. Read more CERT� Advisory CA-2001-23 Continued Threat of the "Code Red" Worm. Read more www.securiteam.com: Solaris DTmail Buffer Overflow Vulnerability (MAIL Environment). Read more www.securiteam.com: WS_FTP Server Buffer Overflow and Possible DoS. Read more www.law.com: EFF: Free the Russian Hacker! Read more www.macworld.co.uk: Adobe plea on caged hacker. Read more www.wired.com: Rep: Give Fair Use a Fair Shake. Read more www.newsbytes.com: Hackers Pounce On New Telnet Hole � Update. Read more www.salon.com: Penn university to offer computer security degree. Read more www.nikkeibp.asiabiztech.com: Sircam Virus Widely Spreads. Read more www.smh.com.au: Virus sends your secrets all over the Web. Read more www.idg.net: Sircam virus eludes Symantec anti-virus scanning update. Read more www.silicon.com: FBI out-smarted by SirCam bug. Read more www.pcworld.com: Sircam Worm: Crawling Fast but Easily Crushed. Read more www.wired.com: Hey SirCam, Where'd You Go? Read more www.reuters.com: Scared of Hackers? Indian Teenager Offers Help. Read more www.cnn.com: Report: U.S. drive on computer crime falls short. Read more www.smh.com.au: Hackers call for police training. Read more www.webfn.com: Hacker forces JDS Uniphase to request trading halt. Read more www.reuters.com: Hacker Gets Early Peek at JDS Financial Results. Read more www.cnn.com: Hackers paralyze Palestinian Web site. Read more www.ananova.com: Welsh local government sites hacked. Read more news.cnet.com: Privacy advocates take aim at Windows XP. Read more finance.individual.com: New Microsoft Systems Erode Privacy, Groups Say. Read more computerworld.com: Complaint to FTC raises privacy concerns over Windows XP. Read more www.theregister.co.uk: The Reg guide to hackers in film. Read more

26 July 2001 Cyn 1.2 by iradium. Go to Trojan Top Sites to visit their homepage. MS Internet Explorer + OfficeXP full Disclosure Exploit. Read more www.xato.net: Wordlists. Read more tlc.discovery.com: Hacker Psych 101. Read more www.caida.org: The Spread of the Code-Red Worm (CRv2). Read more Microsoft Security Bulletin MS01-040 Invalid RDP Data Can Cause Memory Leak in Terminal Services. Read more CERT� Advisory CA-2001-22 W32/Sircam Malicious Code. Read more www.securiteam.com: Sambar Web Server Pagecount Exploit Code. Read more www.securiteam.com: ArGoSoft FTP Server Weak Password Encryption. Read more www.channelnewsasia.com: Russian programmers rally in support of hacker. Read more www.thestandard.com: EFF: Free the Russian Hacker! Read more www.cnn.com: FBI nominee asked to release hacker. Read more www.theregister.co.uk: Gibson/Greene debate 'good parts' t'script. Read more www.net-security.org: Steve Gibson vs. Thomas C. Greene The long-awaited ear-to-ear debate on the Win-XP raw-sockets implementation involving Steve Gibson and The Regsiter's Thomas C. Greene on the radio show Online Tonight with David Lawrence is available as mirrored on HNS. Read more www.hal2001.org: HAL2001, international conference "hackers at large". Read more www.linux.com: Number Nine, Number Nine: Linux at Defcon 9. Read more www.wired.com: Congress No Haven for Hackers. Read more www.rsa.com: RSA poses $200,000 crypto challenge. Read more news.cnet.com: Privacy advocates take aim at Windows XP. Read more www.salon.com: The humiliation virus. Read more www.zdnet.com: SirCam worm 'high risk' but not rife. Read more www.hindustantimes.com: E-xposed: Bug puts Govt files on Net. Read more www.washingtonpost.com: Access Restored To Pentagon Sites. Read more news.24.com: FBI cybercrime centre unable to block virus. Read more www.cnn.com: Hackers paralyze Palestinian Web site. Read more www.chosun.com: Prosecutors Indict US Army Hacker. Read more www.washtimes.com: Justice Department gets a 'privacy czar'. Read more www.wired.com: Kiwi Spy Bill Inches Forward. Read more

25 July 2001 Moses 1.1.5 grc.com: Steve Gibson: Microsoft *MUST* be lying about the use of Full Raw Sockets in Windows XP!!! Read more project.honeynet.org: Know Your Enemy: Statistics. Read more Microsoft Security Bulletin MS01-039 Services for Unix 2.0 Telnet and NFS Services Contain Memory Leaks. Read more CERT Advisory CA-2001-21 Buffer Overflow in telnetd. Read more www.securiteam.com: Exploit Code Released for the SMTP Attachment Protection Bypass. Read more www.securitywatch.com: Son of Code Red. Read more www.securitywatch.com: NetWin Authentication Module Weak Password Storage and Buffer Overflow. Read more www.securitywatch.com: Card Service International / LinkPoint API Security Concerns. Read more www.securitywatch.com: Squid HTTPd Acceleration ACL Bug Enables Port Scanning. Read more www.securitywatch.com: Linux 2.4.x Slackware Init Script Vulnerability. Read more www.theregister.co.uk: SSH hits the fan for Unix admins. Read more www.securitywatch.com: Brazilian hackers can�t get enough IIS. Read more linuxtoday.com: Linux Kernel-Level Trojan - Kernel Intrusion System (KIS). Read more it.mycareer.com.au: Admins urged to close serious BSD security hole. Read more www.zdnet.com: Why the SirCam worm is only the beginning for new viruses. Read more www.computerworld.com: Sircam worm spreads, causing corporate aggravation. Read more www.newsfactor.com: FBI Computer Infected by SirCam Worm. Read more europe.cnn.com: Pentagon shuts sites to battle worm. Read more www.boston.com: Adobe shifts, urges hacker's release. Read more www.newsbytes.com: Adobe Withdraws Support For Russian Programmer Prosecution. Read more www.ireland.com: Adobe backs down on prosecuting hacker. Read more salon.com: Adobe calls for programmer's release. Read more www.silicon.com: Star Wars site hacked by turtle-obsessed ninja. "Brazil rules. I thank the master Splinter, without his training the Turtles would be nothing." Read more www.vnunet.com: Hacker defies the force. Read more www.newsbytes.com: Swiss Hackers Grab 250,000 E-mail Addresses, Passwords. Read more www.theinquirer.net: Microsoft Hotmail hacked? Read more www.newsbytes.com: Hackers Hit Again With Hitler Mustache, Music. Read more www.theregister.co.uk: Infamous porn site gets a hacker makeover. Read more www.cincypost.com: Online hackers target government offices. Read more www.bbspot.com: Microsoft Bundles Worm with IIS. Read more www.computerworld.com: Black Hat Highlights Real Danger of Script Kiddies. Read more www.zdnetasia.com: S'pore broadcaster invaded by Code Red worm. Read more www.zdnetasia.com: The fitting punishment for virus writers? Death! Read more www.latimes.com: Home PCs Are at Risk for Use by Hackers. Read more www.latimes.com: Practicing Safe Computing Can Minimize Chances of Invasion. Read more www.idg.net: House approves Carnivore reporting requirements. Read more www.fcw.com: Justice creating cybercrime units. Read more

24 July 2001 Bushtrommel 1.22 freshmeat.net: BreakDown is a Linux password cracker that uses dictionary attacks and customizable brute force attacks. It can also be used a sequential character generator. Read more www.kav.ch: IIS-Worm.Bady (aka "Code Red","CodeRed") Read more www.kav.ch: I-Worm.Sircam. Read more www.securiteam.com: 3Com TelnetD Password Brute Forcing. Read more www.securiteam.com: AdCycle SQL Command Insertion Vulnerability. Read more www.securiteam.com: Interactive Story File Disclosure Vulnerability. Read more it.mycareer.com.au: Sniffer Trojan blamed for posting accounts. Read more www.planetebook.com: Index of ElcomSoft, Dmitry Sklyarov, Adobe, US Government and DMCA-related articles from around the Web. Read more www.eff.org: Adobe, Electronic Frontier Foundation Call for Release of Russian Programmer. Read more www.freesklyarov.org: Free Dmitry Sklyarov. Read more zork.net: Free Dmitry Sklyarov. Read more www.boycottadobe.com: Boycott Adobe. Read more www.eff.org: EFF "Intellectual Property: Digital Millennium Copyright Act (DMCA): U.S. v. Sklyarov" Archive. Read more www.individual.com: Civil Liberties Group Blasts Adobe For Aiding FBI In Arrest. Read more www.ananova.com: Protests mount over arrested Russian programmer. Read more finance.individual.com U.S. protesters seek release of Russian programmer. Read more www.newscientist.com: Computer scientists boycott US over digital copyright law. Read more it.mycareer.com.au: A cryptic sentence, then blackout. Read more www.theregister.co.uk: Adobe Folds! Read more www.theregister.co.uk: Boycott Adobe campaign launches. Read more www.themoscowtimes.com: Jailed 'E-Pirate' a Cause Celebre. Read more abcnews.go.com: Gathering of Hackers and More. Read more www.theregister.co.uk: Code Red worm cripples US military sites. Read more www.theregister.co.uk: MSN bug serves up porn. Read more www.computerworld.com: Sircam worm spreading; vendor warnings upgraded. Read more www.wired.com: Love Bug, SirCam Neck and Neck. Read more www.theregister.co.uk: SirCam virus hogs connections with spam. Read more www.guardianunlimited.co.uk: Now it's getting personal - the prying email virus. Read more www.idg.net: OPINION: Smart social engineering helps virus spread. Read more www.siliconvalley.com: Pentagon temporarily shuts down Web sites to guard against Internet virus. Read more www.newsbytes.com: Hacker Uses Worm To Gouge Telstra IDs, Passwords. Read more abcnews.go.com: Pentagon Blocks Public Web Site Access. Read more www.zdnet.com: IT bugs out over IIS security. Read more www.newsbytes.com: Hackers Deface Microsoft Career Server. Read more www.reuters.com: Dell Funds Fight Against Web Site Hackers. Read more www.newsbytes.com: Hackers Scrawl Hitler Moustache On Ex-Party-Leader's Photo. Read more australianit.news.com.au: Cybercrime Bill 'excessive'. Read more www.newsfactor.com: U.S., Microsoft Refute Nuclear Data Vulnerability. Read more www.smh.com.au: Hacker finds passwords to give BigPond a fright. Read more www.thescotsman.co.uk: �Honey pot� traps can get you out of a sticky security situation. Read more

23 July 2001 Theef 1.30 Rocks game, an Acropolis dropper. Read more www.avpavp.hpg.com.br: Reverse Engineer in the AVP Antivirus by SennaSpy. Read more Worm Alert: IIS-Worm.Bady and I-Worm.Sircam.c I-Worm.Sircam.c Beware of the e-mails with attachment and text like this: "Hi! How are you? I send you this file in order to have your advice See you later. Thanks" The message in the "subject" can be different. I received several of these mails last days! Its the I-Worm.Sircam. IIS-Worm.Bady Visiting the link of the defaced Microsoft Update Site can bring the IIS-Worm.Bady on your computers Hard Drive. Amongst other, this link can be found on SecurityWatch.com, The Register and was also here in the news of yesterday. If you visited this link, you can find the worm in your Temporary Internet Files. Delete the Temporary Internet Files. www.securiteam.com: DIP Exploit Code Still Works After 3 Years. Read more www.securiteam.com: Squid HTTPd Proxy Allows Insertion of Arbitrary HTML Code. Read more www.securiteam.com: SSH Secure Shell 3.0.0 Allows Passwordless Logons. Read more www.newsbytes.com: Vigilantes Prepare To Strike Back At Code Red Worm. Read more www.miami.com: Web virus variation is faster, stronger. Read more www.defcon.org: DEF CON 9 - Open Letter to the community. Read more abcnews.go.com: Government Jabs at Cyber Crime. Read more www.gulf-news.com: Hacker appeals conviction, prosecutor seeks tougher sentence. Read more news.bbc.co.uk: US targets cyber-crime. Read more www.theregister.co.uk: FBI becomes Copyright '911'. Read more Jailed 'E-Pirate' a Cause C�l�bre. Read more www.smh.com.au: Hacker finds passwords to give BigPond a fright. Read more it.mycareer.com.au: Telstra accused of playing down hacker theft. Read more www.sfgate.com: Protecting your privacy as you surf the Web. Read more web.lexis-nexis.com: If Def Con is any measure, hackers are coming of age. Read more

22 July 2001 MoonPie 2.4 beta Latinus 1.4 source Blitz Network can launch a spoofed syn flood attack via slice2 from many different computers without logging on any of them. Read more www.safemode.org: Microsoft, Microsoft, Microsoft. The Redmond behemoth has been "Hacked by Chinese!" - but not at some obscure domain. No, in a stunningly ironic blow, the Code Red worm - which spreads through a month-old IIS buffer overflow exploit - infected and defaced � the Windows update site. Read more www.theregister.co.uk Code Red bug hits Microsoft security update site. Microsoft's own Windows Update site has fallen victim to the Code Red worm. The fact that the Windows Update site, which provides a portal to product updates and security patches along with advice on critical updates, wasn't itself up to date with the latest security patches is richly ironic. Read more www.securitywatch.com: "Chinese" take Windows update site. Read more www.securiteam.com: Antivirus Scanners Spread New Zip Virus. Read more www.newsforge.com: Remote root exploit in SSH Secure Shell 3.0.0. Read more www.securiteam.com: Linux Man Malicious Cache File Creation Vulnerability (Exploit). Read more www.securiteam.com: Multiple Vendors Telnet Daemon Vulnerability. Read more www.securiteam.com: Full Analysis of the .IDA "Code Red" Worm. Read more www.securiteam.com: Not Filtering ';' Poses a Security Vulnerability in Forms that Post SQL Based Queries. Read more www.securiteam.com: HTTProtect Allows Attackers to Change the Protected Files Using Symlinks. Read more www.securitywatch.com: PHP eminently DoS-able. Read more www.ciac.org: Hewlett-Packard login Vulnerability. Read more freshmeat.net: Linux Port/Socket Pseudo ACLs 2.4.7-5 (2.4). Read more www.techtv.com: MS Bug Lets Worm Take Over Servers. Read more www.nipc.gov: "Ida Code Red Worm ". Read more www.zdnet.com: White House dodges 'Code Red' attack. Read more www.securitywatch.com: Sir Cam reveals your deepest secrets. Read more www.securitywatch.com: Cyber-rights community protests Sklyarov arrest. Read more www.newsforge.com: Subversives ready for budding career as 'ethical hackers'. Read more

21 July 2001 RUX The TIc.K 5.0 grcsucks.com: Dissecting Steve Gibson GRC DoS Page by Cyrano de Bergerac. Read more *** More about Steve Gibson: grc.com: Microsoft Seems to Feel that Windows XP Vulnerability is a Laughing Matter. Read more www.noccc.org: Main Meeting--Internet Security by Steve Gibson. Read more www.theregister.co.uk: Web-myth debunker's life threatened by Steve Gibson Groupie. Read more indevelopment.org: An interview with Steve Gibson. Read more *** www.insecure.org: Nmap 2.54BETA27 released. Read more www.horsburgh.com: nPULSE - Web-based network monitoring package for Linux and Unix. Read more CERT Advisory CA-2001-20 Continuing Threats to Home Users. Read more www.eeye.com: A variant of the recent "Code Red" worm roaming the Internet. This new worm DOES NOT attempt to hack Web pages and, unlike the original worm, it targets truly random IP addresses, resulting in much faster propagation. In order to help minimize any further effects from the "Code Red" worm and the new variant, eEye has developed a free tool that helps users determine if a server is infected or is vulnerable to infection. The tool will also instruct the user on how to fix the infected machine, if needed. Download sunspot.net: Infection affects 225,000 computers worldwide. Read more www.zdnet.com: Sayonara, Code Red, for now. Read more www.idg.net: With new IIS worm, security practices questioned. Read more it.mycareer.com.au: New IIS worm puts network community on edge. Read more europe.cnn.com: Marsha Walton: A cyber-can of worms. Read more www.wired.com: Inept Virus Hits White House. Read more www.pcworld.com: Code Red Worm Spawns Offspring. Read more www.reuters.com: Experts: File-Deleting Sircam Email Virus Spreading. Read more www.ciol.com: �High risk� SirCam virus spreading fast. Read more www.symantec.com: W32.HLLO.Videoinf is a virus that overwrites .ht* and .exe files in the folder that it is executed from. It sends information from the computer on which it is run to an email address. On certain dates, the virus will modify the C:\Autoexec.bat file so that the hard drive will be formatted when the computer is restarted. Read more www.symantec.com: Trojan.Assault.10 is a program that can be used to flood a single IP address with packets of data. Read more www.eff.org: Free Dmitry! Protest Call Brings Adobe to the Negotiating Table. Read more slashdot.org: Dimitry's company sold password crackers to the FBI. Read more www.newsbytes.com: Civil Liberties Group Blasts Adobe For Aiding FBI In Arrest. Read more www.reuters.com: Supporters Rally Behind Arrested Russian Hacker. Read more www.2600.com: CALL TO ACTION: FREE DMITRY! Read more www.pcworld.com: Hacker's Arrest Prompts Protest Against Adobe. Read more www.theregister.co.uk: China shuts down 2,000 cybercafes. Read more english.eastday.com: 2,000 Internet cafes closed. Read more www.smh.com.au: Subversives ready for budding career as 'ethical hackers'. Read more news.cnet.com: U.S. to cybercriminals: You're going down. Read more www.ecommercetimes.com: Busy Virus Week - A Sign of Things To Come? Read more denver.bcentral.com: Qwest targeted by hackers. Read more web.lexis-nexis.com: Chinese Hackers Attack Canoga Park Web-Based Food Supplier. Read more www.securitywatch.com: SubSeven gets busy on the Mac. (link fixed)Read more www.zdnet.com: Feds bulk up to fight cybercrime. Read more

20 July 2001 Phantom FTP server 2.0 (Backdoor.Phantom.20) Trojan Construction Kit. An older one. Read more Dropper. Read more Red Worm Analysis by eEye Digital Security. Read more CERT Advisory CA-2001-19 "Code Red" Worm Exploiting Buffer Overflow In IIS Indexing Service DLL. Read more www.securiteam.com: Exploit Code Released for the Small MSS Denial of Service. Read more www.securiteam.com: Directory Traversal and Path Globing Vulnerabilities in Several Archivers. Read more www.securiteam.com: Multiple Vulnerabilities in Un-CGI. Read more www.attrition.org: Denial of Service Database www.idg.net: With new IIS worm, security practices questioned. Read more it.mycareer.com.au: New IIS worm puts network community on edge. Read more www.zdnet.com: 'Code Red' worm wreaking havoc. Read more www.internetnews.com: Code Red Spreads Across Web. Read more www.crn.com: Worm Aims To Attack White House Site. Read more www.theregister.co.uk: IIS worm made to packet Whitehouse.gov. Read more www.individual.com: Attack Worm Aimed At White House. Read more www.zdnet.com: 'Network-aware' virus on the loose. Read more www.mcafee.com: W32/SirCam@MM Help Center. Read more www.nwfusion.com: Antivirus software vendors warn against Sircam. Read more www.wired.com: New Worm Keeps Them Guessing. Read more www.wired.com: Hacker Arrest Stirs Protest. Read more www.netsurf.com: Programmer Arrested After Giving Security Research Presentation. Read more www.uniontrib.com: Russian programmer arrested at hacker convention for alleged violation of copyright law. Read more www.theregister.co.uk: MS starting to retreat on WinXP product activation. Read more www.ananova.com: DefCon told of virus assault on mobiles. Read more web.lexis-nexis.com: 7 DAYS; NEW HACKING TOOL CAUSES CONCERN. Read more www.internetnews.com: A Security Warning for Windows 2000. Read more www.computerworld.com: Hacker conferences highlight security dangers. Read more europe.cnn.com: Cyprus Internet attack from Europe? Read more www.zdnet.com: Europe may be source of Cyprus Net attack. Read more www.guardian.co.uk: Sign on the dot. Read more

19 July 2001 RTB 666 1.5 www.securiteam.com: Messenger and Hotmail MITM Exploit (Arptool and Neaky). Read more www.securiteam.com: Xman Exploit Code Released. Read more www.securiteam.com: Xloadimage Remote Vulnerability (Exploit). Read more www.securiteam.com: Checkpoint Firewall-1 Information Leakage (SecuRemote, Exploit). Read more www.securiteam.com: Norton Antivirus 2002 Security Flaws. Read more www.securiteam.com: Multiple Vulnerabilities in Implementations of the Lightweight Directory Access Protocol (LDAP). Read more www.securityfocus.com: How Fast is Fast: Vendor Response to New Virus Reports. Read more www.vnunet.com: IIS virus triggers Red alert. Read more www.newsbytes.com: Code Red Worm Can Be Killed By Reboot. Read more www.securitywatch.com: SubSeven gets busy on the Mac. Read more www.securitywatch.com: Microsoft offers preliminary fix for Outlook ActiveX bug. Read more www.newsfactor.com: Bogus Alerts Highlight Phony Security Postings. Read more www.iht.com: Digital Law Nets E-Book Hacker. Read more www.reuters.com: CORRECTED: Russian Hacker Arrested After Las Vegas Convention. Read more www.vnunet.com: Game Seti match for fame seeking hackers. Read more www.smh.com.au: Bank site 'easy to hack'. Read more www.telegraph.co.uk: Hackers convention threatens mobile phone havoc. Read more www.newsbytes.com: Hong Kong Mulls Measures To Fight Computer Crime. Read more www.theregister.co.uk: Network ICE hits back over Gibson jibes. Read more www.theregister.co.uk: Network ICE CTO responds to further BlackICE criticisms. Read more www.theregister.co.uk: OfficeXP may break PGP. Read more computerworld.com: Microsoft dropping Java code from Windows XP. Read more www.it-director.com: People and Passwords. Read more

18 July 2001 Le Gardien 2. Thanks to ISO. CERT Advisory CA-2001-18 Multiple Vulnerabilities in Several Implementations of the Lightweight Directory Access Protocol (LDAP). Read more www.macuser.co.uk: SubSeven Trojan hits Mac. Read more www.securiteam.com: Initial Analysis of the .IDA "Code Red" Worm. Read more www.securiteam.com: Sambar Web Server Allows Execution of Arbitrary Batch Files. Read more www.symantec.com: Backdoor.Darkirc. Read more investor.cnet.com: UPDATE 1-Russian hacker arrested after Las Vegas convention. Read more news.excite.com: Russian Hacker Arrested After Las Vegas Convention. Read more www.zdnet.com.au: FBI bust at hacker fest. Read more news.cnet.com: Russian crypto expert arrested at Def Con. Read more www.wired.com: Russian Adobe Hacker Busted. Read more www.theregister.co.uk: eBook security debunker arrested by Feds. Read more www.zdnet.com: Russian Mafia threatens Net. Read more www.individual.com: Russian Mafia Net Threat (Interactive Week INWK). Read more it.mycareer.com.au: NZ cracker found guilty on 5 charges. ead more www.zdnet.com.au: A rogue's gallery of DoS attacks. Read more www.ecommercetimes.com: Hacker Group: Software Will Make Censors 'Powerless'. Read more www.zdnetasia.com: Aussie expert: 90 percent of hackers are kids. Read more www.wired.com: Hackers Secure a Downgraded Storm. Read more europe.cnn.com: Security expert: Tighter measures needed. Read more news.zdnet.co.uk: Hackers steal vital data from Formula One team. Read more www.abc.net.au: Benetton falls victim to hackers. Read more www.crn.com: Fast-Spreading Worm Exploits Microsoft IIS Flaw. Read more it.mycareer.com.au: Bogus Microsoft bulletin links to trojan worm. Read more www.newsbytes.com: Phony E-mail Offers Cure For Magistr Worm. Read more www.theregister.co.uk: Hackers run amok during Defcon. Read more www.theregister.co.uk: WinXP product activation cracked: totally, horribly, fatally. Read more computerworld.com: Microsoft still struggling with Windows XP downloads. Read more www.worldnews.com: Bush Plans Different Cyber Security. Read more europe.cnn.com: Decoy PCs give hackers a security lesson. Read more www.stuff.co.nz: Jury split over computer hacker's guilt. Read more www.nzherald.co.nz: Jury finds half of hacking counts proven. Read more www.businessweek.com: Give Hackers Headaches. Read more

17 July 2001 A new version of Skydance, the Gibson version. About Steve Gibson, Microsoft and Windows XP by Edrin. Read more Update Georgi Guninski security advisory #49 The previously-released Outlook E-mail Security Update that is integrated into Outlook 2002 would prevent this vulnerability from being exploited via e-mail in all affected Outlook versions. This claim is false. The exploit works from email on Outlook XP (2002). Read more www.securiteam.com: Multiple Exploit Codes Released for the CFingerD Vulnerability. Read more www.securiteam.com: ColdFusion Server Zero Byte Overwrite and Read Delete Access Vulnerabilities (Patch Available). Read more www.securiteam.com: Vulnerabilities Found in Cisco SN 5420 Storage Routers. Read more www.securiteam.com: SimpleServer:WWW Command Execution Vulnerability. Read more www.securiteam.com: phpMyAdmin Vulnerability Leads to Local File Exposure and Arbitrary Command Execution. Read more www.securiteam.com: Weakness Found in OpenSSL PRNG Algorithm. Read more www.newsbytes.com: Malicious Web Attacks May Be New IIS Worm. Read more www.newsbytes.com: Lapse At SANS May Have Been Self-Inflicted. Read more www.thestandard.com: Hackers Are Developing Anti-Censorship Software. Read more www.pcworld.com: Hacking for a Better World. Read more australianit.news.com.au: Hacker back door into ISPs. Read more www.vnunet.com: Israeli m0sad hackers crack 480 sites. Read more www.lasvegassun.com: Las Vegas hacking party seems filtered, Def Con attendees say. Read more www.idg.net: Def Con, Black Hat: Hacker shows offer tips, tricks. Read more www.nzherald.co.nz: Hacker awaits verdict in 'Back Orifice' case. Read more australianit.news.com.au: Hacking 'a military risk'. Read more cgi.usatoday.com: Hackers scope out new prey More users of cellphones, handhelds now fall victim to hack attacks, viruses. Read more www.lasvegassun.com: Computer experts warn about holes in software. Read more www.net-security.org: Hacking for human rights. Read more www.zdnet.com: Which Is More Secure? -- Open Source Vs. Proprietary. Read more web.lexis-nexis.com: 2001: The Year of the Worm;Fast-spreading code is the weapon of choice for Net vandals. Read more web.lexis-nexis.com: CIA keeps watch as hackers ply for hire Computer hackers. Read more

16 July 2001 Y3K Rat is a remote administration tool,which controls a remote computer. This version is dedicated to MegaSecurity. By -/Chucky-\- and [Firelarm]. Read more www.adonai.fr.st: MEPForge. A Packet Forger under Win32 --Send Raw Packet: Igmp Udp Und Pup Idp Protocol. By AdonAi and Del_Armg0. Read more hackerzlair.org: Windows 2000 Security? Diary of a Windows 2000 hack and the dangers. Read more www.cerberus-infosec.co.uk: Analysis of the winhlp32.exe buffer overrun. Read more www.headstrong.de: WebClicker uses public proxies to create artificial banner ad clicks. Emulates complete browser HTTP transfer and can be used for banner/link exchanges and toplists as well. Read more Working link: FireWall-1 RDP Bypass Vulnerability Exploit Code. Read more www.securiteam.com: LMail Local Root Exploit. Read more www.securiteam.com: TrendMicro InterScan WebManager HttpSave.dll Buffer Overflow Vulnerability. Read more www.guninski.com: Georgi Guninski security advisory #49 MS Office XP - the more money I give to Microsoft, the more vulnerable my Windows computers are. Read more ecommercetimes.com: 'Network-Aware' Viruses Spreading Fast - Report. Read more news.cnet.com: U.S. government wants a few good hackers. Read more www.smh.com.au: Computer invaders become gatekeepers. Read more finance.individual.com: Hackers advised against life of crime at DefCon jamboree. Read more news.bbc.co.uk: Hacking Las Vegas. Read more www.stuff.co.nz: Hackers advised against crime. Read more www.nzherald.co.nz: Security experts unveil plan to track hackers. Read more web.lexis-nexis.com: Masters of disguise. Read more www.vancouversun.com: Canadian system protects superpower secrets. Read more

15 July 2001 Little Witch FTP 1.0 Rat Cracker 1.60 Hostile Java www.inflict.org: A3I stands for AIM IM Image IP Sniffer. It is a GUI frontend that uses the netstat included with Windows to "sniff" the the IP address of the people you are connected to though AOL Instant Messenger's "IM Image" function. Read more darkirc.fateback.com: DarkIRC is a program that is to be used on your own box and your own irc server... it is to test your irc server's strength and anti flood system. DARKIRC is not to be used for illegal purposes (bot nets / dos attacks / flooding) and other illegal things like that. Read more packetstormsecurity.org: Distributed Denial of Service Defense Tactics. Read more www.securiteam.com: FireWall-1 RDP Bypass Vulnerability Exploit Code Released. Read more www.securiteam.com: Exploits Released for the Solaris Libsldap Buffer Overflow (LDAP_OPTIONS). Read more net-security.org: In the early hours of Friday morning, a defacer known as "Fluffi Bunni" defaced the website of SANS. As of this posting the site is still not responding. On the defacement, it asks "would you really trust these guys to teach you security?". Mirror www.securitywatch.com: Look mummy i'm on sans! Read more web.lexis-nexis.com: Masters of disguise. The hackers are back with code that looks different every time. The hackers' new tool, known as polymorphic code, camouflages scripts so they can evade detection. Read more computerworld.com: Outlook e-mail vulnerability found; Microsoft criticizes 'bug hunter'. Read more www.securitywatch.com: You know Def Con is on when� Read more www.securitywatch.com: continuing the list of WoH defacements starting with the "E's". Read more And now with the "O's". Read more www.ciol.com: 'Honey Pot�: This tracker will nail a hacker. Read more www.newsbytes.com: Mass Site Defacement Relied On Cheap Trick. Read more www.wired.com: Hackers in Suits? Gadzooks! Read more web.lexis-nexis.com: Hackers and their opponents party in Las Vegas. Read more www.pcworld.com: Decoy PCs Trick Hackers Into Teaching Security. Read more www.idg.net: At Black Hat, ties seen tightening between hackers, legal officials. Read more

14 July 2001 Optix Lite 0.1 by th3 r1pp3rz packetstormsecurity.org: Tcpip_lib V3.2 is a library for Windows 2000 which allows constructing custom packets, IP spoofing, attacks, and more. It uses sockets 2 and opens up a raw socket, allowing you to send raw IP headers, do IP spoofing, and play with the nuts and bolts of networking protocols. Download www.laurentconstantin.com: Lcrzo is a network library, for network administrators and network hackers. Lcrzoex contains over 200 functionnalities to test an Ethernet/IP network (sniff, spoof, configuration, clients, servers, etc.). Read more sourceforge.net: StMichael is a LKM that attempts to detect and divert attempts to install a kernel-module backdoor into a running linux system. Read more odin.prohosting.com: UltimateRat Plugins. Read more www.infosecuritymag.com: Personal Firewalls Under Fire "We hacked away at three personal firewalls to see how well they protect a remote system". BlackICE Defender v2.5, WinRoute 4.1 and ZoneAlarm Pro 2.6 tested. Read more A security consulting firm based in Irvine, California, Foundstone teaches an intensive, four-day Ultimate Hacking course for administrators, engineers, and other IT professionals charged with the increasingly difficult task of fighting digital intruders. In exchange for the $3,995 course fee, participants get to learn all the tricks of the hacking trade. Read more www.securiteam.com: Outlook View Control Exposes Unsafe Functionality (Exploit Code). Read more www.securiteam.com: Solaris Whodo Buffer Overflow Vulnerability (Exploit, SOR, CFTIME). Read more www.securiteam.com: Cisco IOS PPTP Vulnerability. Read more www.securiteam.com: VPN-1/FireWall-1 Format String Vulnerability. Read more www.securiteam.com: CGI Flat File Database Manipulation Vulnerability. Read more www.theregister.co.uk: Guninski finds new ActiveX security hole in OXP. Read more www.symantec.com: Trojan.VBS.PWStroy is a script that can modify the Autoexec.bat file so that drive C is reformatted when the computer is restarted. Read more www.theregister.co.uk: MS security chief talks raw sockets with the Reg. MS Security Program Manager Scott Culp , has become a fan of Steve Gibson raw sockets coverage. Read more www.antioffline.com: Minimizing Denial of Sevice Attacks. Read more www.antioffline.com: Theories on new DoS Attacks v.1. Read more web.lexis-nexis.com: Alien virus invades PCs. Read more www.pcworld.com: Decoy PCs Trick Hackers Into Teaching Security. Security conference highlights legal weapons, hacker insurance proposal, and 'honeypots' that lure intruders. Read more www.computerworld.com: At Black Hat, ties seen tightening between hackers, legal officials. Read more www.computerworld.com: Internet worm purports to be a Microsoft security alert. The worm could eventually be used to prepare target machines for involvement in distributed denial-of-service attacks that can bring Web sites to their knees. Read more www.vnunet.com: Hackfest reveals worms getting smarter. Read more www.itworld.com: Black Hat Briefings: Internet too complex to secure. Read more www.idg.net: Internet too complex to secure, says exec. Read more www.thestandard.com: Wireless Drive-By Hacking. Read more news.cnet.com: Wireless networks wide open to hackers. Read more www.pcworld.com: Your Wireless LAN Can Be Hacked. Read more investor.cnet.com: Honeynet Project sweetens hacker bait. Read more www.vnunet.com: Hackers slam Bugtraq. Read more www.ireland.com: Verification of e-mail signatures gains ground. Read more www.washtimes.com: Separate events host computer pros, hackers. Read more web.lexis-nexis.com: EVERYONE IS A TARGET FOR HACKERS. Read more www.antioffline.com: Recently Slashdot was forced to remove a post off their site by Scientology. This document seems to be hated by those looney Scientology retards. Read more

13 July 2001 MoonPie 2.2 beta Analysis of the Buschtrommel Trojan by Magnus Mischel. Read more Microsoft Security Bulletin MS01-038 Outlook View Control Exposes Unsafe Functionality. Read more www.securiteam.com: myCIO HTTP Server Directory Traversal Vulnerabilty. Read more www.securiteam.com: BasiliX Webmail Security Hole (DUMMY). Read more www.efnet.org: EFNet under a denial of service attack. Read more www.theregister.co.uk: IRC network comes under denial of service attack. Read more www.newsbytes.com: DDOS Attacks On The Rise - Efnet Latest Target. Read more www.vnunet.co: EFNet attacks may herald its last days. Read more www.theregister.co.uk: BTinternet users banned by IRC network. BTinternet users have been banned from using a popular IRC network whilst the hunt for a vandal spreading a Trojan continues. Read more www.symantec.com: VBS.Blank.A is a Visual Basic Script that changes the current Internet Explorer home page to the \Windows\AboutBlank.htm. Read more www.symantec.com: W32.Malot.int is a mass-mailing worm. Read more www.zdnet.com: Marijuana worm too mellow to spread. Read more www.vnunet.com: Bug Watch: wise up to the wireless worm. Read more www.vnunet.com: Fake security bulletin hides Leave worm. Read more www.ecommercetimes.com: 'Network-Aware' Viruses Spreading Fast - Report. Read more www.freeos.com: Exorcise FTP, Telenet And Other Evil Daemons. Read more www.vulnwatch.org: Non-Profit, Independent Vulnerability Disclosure List Created. Read more www.newsbytes.com: Hackers Launch New E-Mail List For Security Bugs. Read more www.securityfocus.com: Tool makes hackers obsolete. Read more news.bbc.co.uk: The hacker who sent Viagra to Bill Gates. Read more www.2600.com: HEARING IN DVDCCA CASE LATER TODAY. Read more web.lexis-nexis.com: One evil hacker puts all others to shame. Read more news.cnet.com: Wireless networks wide open to hackers. Read more www.nst.com.my: Laws to deal with computer crimes. Read more www.washtimes.com: Separate events host computer pros, hackers. Read more www.economictimes.com: Net has also revolutionised business frauds�. Read more www.smh.com.au: Warning on cyber terrorism. Read more www.theregister.co.uk: Can WinXP Product Activation be reverse engineered? Read more www.licenturion.com: Inside Windows Product Activation. Read more www.theregister.co.uk: WinXP Product Activation decoded and analysed. Read more www.cw360.com: Glitches block WinXP beta downloads. Read more www.cw360.com: XP or not XP? Read more www.vnunet.com: Safeway delivers porn by email. Read more

12 July 2001 Clandestine 1.0 Latinus 1.3 source www.adonai.fr.st: DaaTH, Designed to kill : Ftp Server Daemon SERV-U 2.5 (crash 3.0 too). Read more www.geocities.com: Babel, DDoS of Biblical proportions, by Floydman. Read more www.securiteam.com: Various Security Problems with Trend Micro's AppletTrap URL Filtering. Read more www.securiteam.com: Living Waterfalls Poses a Major Security Risk. Read more www.securiteam.com: Exploit Code Released for Solaris 'at' Arbitrary Command Execution (Format String). Read more www.securityfocus.com: Cfingerd local vulnerability (possibly root). Read more www.theregister.co.uk: DoS risk from Zip of death attacks on AV software? Read more www.newsbytes.com: Microsoft Addresses Encryption Flaw In Win2K. Read more www.securitywatch.com: Virtual business cards vulnerable to attack. Read more www.itworld.com: ISS warns of security flaw in RADIUS servers. Read more www.pcworld.com: Watch Out: Worms are Getting Smarter, Expert Warns. Peer-to-peer networks may be breeding ground for the next generation of nasties. Read more news.cnet.com: Worm threat to worsen. Read more www.itworld.com: Worms will become dynamic, smarter. Read more www.securitywatch.com: Keep away from that Microsoft security bulletin! Read more news.zdnet.co.uk: Netscape ruling a boost for privacy. Read more www.wired.com: XP Not Privy to Computer Privates. Read more ecommercetimes.com: Hackers Convene Amid Signs Computer Security Is Eroding. Hacker conventions, such as those being held in Las Vegas this week, are no longer considered the sinister gatherings they once were. Read more www.worldnews.com: Computer Guardians, Hackers Meet. Read more www.securitywatch.com: Suspects in Mumbai hack traced to cyber cafe. Read more www.itworld.com: Microsoft loosens grip on Windows configuration. Read more www.datasync.com: THE MICROSOFT CONSPIRACY INTERPRETATION OF "AMERICAN PI". Read more www.securitywatch.com: Mass attack on Chinese government sites. Read more web.lexis-nexis.com: Companies complacent about hackers, e-security threats: expert. Read more web.lexis-nexis.com: NET LIFE; Scrappy crackers hack first, and ask questions later. Read more news.cnet.com: Group sets cybercrime-fighting priorities. Read more www.zdnet.com: The war over 802.11x security. Read more

11 July 2001 Bushtrommel 1.21 mdcrack.multimania.com: Bruteforce your MD5 Hashes. Read more Georgi Guninski security advisory #48, 2001 FreeBSD 4.3 local root, yet Linux and *BSD much better than Windows Systems affected: FreeBSD 4.3 and probably earlier versions. Risk: High Description: There is local root compromise in FreeBSD 4.3 due to design flaw which allows injecting signal handlers in other processes. Read more www.securityfocus.com: Chasing the Wind, Episode Eight: Still Waters. Read more Chasing the Wind, Part Seven was earlier published. Read more Internet Security Systems Security Alert Summary July 9, 2001 Volume 6 Number 8. Read more www.securiteam.com: IBM Net.Data Show SQL Vulnerability. Read more www.securiteam.com: Opera Browser Heap Overflow (Session Replay Attack). Read more www.securiteam.com: Many WAP Gateways Do Not Properly Check SSL Certificates. Read more www.securiteam.com: Insecure Temporary Files Handling in Tripwire. Read more linuxtoday.com: EnGarde Secure Linux Security Advisory: OpenSSL PRNG Weakness. Read more www.net-security.org: Messenger/Hotmail passwords at risk. Read more www.informationweek.com: Security Flaw Found In Common DSL Modem. Read more www.zdnet.com: Living in a state of denial. If service providers don't move faster to prevent distributed denial-of-service attacks, hackers and script kiddies can grab their suntan lotion and head for the beach this summer because there will still be ample opportunity to bring sites to a screeching halt once the season is over. Read more www.zdnet.com: Mob Stoppers. One the most aggravating internet security threats today is a distributed denial-of-service attack � a flood of bogus network traffic that can effectively shut down a Web site. Far from going away, the phenomenon is evolving in different permutations, but new tools are emerging to help Internet administrators fight this vexing problem. Read more www.wired.com: Smoking Mad Over Pot Virus. Read more www.theregister.co.uk: Marijuana virus puts security to pot. Read more www.newsbytes.com: Bogus Microsoft Bulletin Spreads Internet Worm. Read more ecommercetimes.com: Hackers Convene Amid Signs Computer Security Is Eroding. Hacker conventions, such as those being held in Las Vegas this week, are no longer considered the sinister gatherings they once were. Read more www.chron.com: Hackers and their trackers come together in Vegas. Read more www.theregister.co.uk: FireWall-1 users feel the heat from security bug. Read more www.rediff.com: Lashkar web site hacked. Read more www.msnbc.com: Government payroll system in Denver open to hackers, report says. Read more www.rediff.com: Two suspects picked up for hacking into Bombay police web site. Read more www.zdnet.com: Privacy: Win XP activation 'innocuous'. Read more www.nandotimes.com: Technology: Microsoft to enlist VeriSign security. Read more web.lexis-nexis.com: HACKERS' TOOL MAKES INNOCENT VICTIMS LAUNCH SPAM ATTACKS. Read more web.lexis-nexis.com: Hackers use emotions to infect computers. Read more

10 July 2001 Sequel 0.1 beta 1 download.insecure.org: Nmap 2.54BETA26 released. Read more CERT� Advisory CA-2001-17 Check Point RDP Bypass Vulnerability. Read more www.securiteam.com: Check Point FireWall-1 RDP Bypass Vulnerability. Read more grc.com: A Brief Summary of My Position on the Windows XP Raw Socket Controversy. Read more www.theregister.co.uk The Gibson letters Thank God someone's finally exposing this charlatan. Read more You both make good points, but we're still leaning in Steve's direction. Read more Steve walks on water; you're a moron, and so's your old man. Read more Reg temporarily disappoints Gibson fans/bashers. Read more www.theregister.co.uk: Steve Gibson picks a fight with Microsoft and The Register. Read more www.chron.com: Hackers and their trackers come together in Vegas. Read more www.theregister.co.uk: PoisonBOx hacks past security firm's 'honey pot'. Read more it.mycareer.com.au: CERT warns firewall leaves open door to attackers. Read more www.zdnet.com: Security firms asleep at the firewall. Read more thestar.com.my: Security hole plagues Win2000. Read more www.securitywatch.com: IIS plus .gov equals trouble. Read more www.securitywatch.com: Directory traversal bug plagues BasiliX Webmail. Read more www.idgnet.co.nz: Anti-child porn virus on the loose. Read more www.symantec.com: W32.Mineup.Worm. Read more www.securitywatch.com: Brazilian posse hacks UNESCO site. Read more www.computerworld.com: Big, Ugly Security. Read more www.idg.net: Top 10 Security Mistakes. Read more news.zdnet.co.uk: Cisco patches security flaws. Read more www.theregister.co.uk: How to own a Cisco router in one easy step. Read more www.nikkeibp.asiabiztech.com: Microsoft Teams with China Software Firm on Data Security Protection. Read more news.cnet.com: Microsoft to tap VeriSign for security. Read more europe.cnn.com: Eli Lilly cites human error for e-mail gaffe. Read more www.individual.com: Multi-nation cybercrime pact gets OK (ZDNet News ZDNN). Read more www.vnunet.com: US Government admits security blunder. Read more www.zdnet.com: U.S. military backs open-source security. Read more

09 July 2001 NeuroticKat 1.1 www.adonai.fr.st: KAbAL, a M.S. Net-Meeting Attack tool. KAbAL can crash nt and win2k unpatch netmeeting version very fastly, even if not common port are used. Read more CERT� Incident Note IN-2001-07 W32/Leaves: Exploitation of previously installed SubSeven Trojan Horses. Read more www.nipc.gov: "New Scanning Activity (with W32-Leaves.worm) Exploiting SubSeven Victims ". Read more www.vmyths.com: They call it 'messiah complex' for a reason. Steve Gibson: "I forced Microsoft into a Kobayashi Maru scenario." Read more vmyths.com: Will raw sockets create "serious problems for the ordinary user with a DSL connection?" Read more vmyths.com: Gibson applauds Microsoft security, fears Linux will destroy Internet. Read more vmyths.com: Aureate DLLs Trojan. Various 'alerts' claim Aureate Media (now known as Radiate) gathers personal data on Internet users via covert software. Read more www.securiteam.com: New DoS: Creating Small Packets Causes a Large Overhead. Read more www.securiteam.com: Remote Buffer Overflow in Several RADIUS Implementations. Read more www.securiteam.com: POPRelayD Relay Authentication Vulnerability. Read more www.securiteam.com: Make Your BSD a TCP/UDP Black Hole. Read more linuxtoday.com: Red Hat Security Advisory: xinetd. Read more www.individual.com: Microsoft Bug Report Page Is Missing. Read more cryptome.org: Final resolution on Echelon adopted on 3 July by the European Parliament. Read more news.cnet.com: Congress fears European privacy standards. Read more jumpfn.123jump.com: TEENAGE HACKER ESCAPES PRISON. Read more www.computeruser.com: Hacker goes on defacement spree in Australia. Read more www.securityfocus.com: Mass web banking hack probed. Read more web.lexis-nexis.com: Full arsenal of defenses needed to protect computer privacy. Read more www.individual.com: Lilly discloses e-mail addresses of Prozac patients, blames programming error. Read more

08 July 2001 Theef 1.23 www.securiteam.com: Citrix NFuse True Path Revealing. Read more www.securiteam.com: Xvt Buffer Overflow Vulnerability (-T, -name). Read more www.securiteam.com: Authentication Error in Windows 2000 SMTP Service Could Allow Mail Relaying. Read more www.securiteam.com: Remote Command Execution Vulnerabilities in SquirrelMail. Read more www.securiteam.com: Using PHP Securely. Read more Vulnerability Test. SMTP Authentication Error Summary: Checks if the remote mail server can be used as a spam relay. Read more windowsxp.narod.ru: Windows XP, IE 6.0. Read more www.securitywatch.com: Friday's defacement shame parade: NASA, Washington Court, etc. Read more www.securitywatch.com: Fast cars, faster viruses. Read more finance.news.com.au: Online brokers 'terrorised'. Read more slashdot.org: Aussie Bill Would Ban Hacking Tools, Virus Code. Read more news.cnet.com: U.S. scrutinizes security hole at privacy site. Read more news.zdnet.co.uk: IT directors not gambling on security. Read more www.thestandard.com: Cybercrime Skyrockets, Say Security Reports. Read more

07 July 2001 PSYchoFiles 1.8 www.securiteam.com: Cisco IOS HTTP Authorization Exploit Code. Read more news.independent.co.uk: Hacker learns internet deception isn't child's play. Read more www.siliconvalley.com: Hacker sentenced to probation, psychiatric care. Read more www.computerworld.com.au: Cybercrime bill 'draconian and dangerous'. Under the bill, which proposes seven new computer offences carrying jail terms of up to 10 years, it is illegal to possess hacker toolkits, scanners and virus code. Read more finance.news.com.au: Online brokers 'terrorised'. Read more www.newsbytes.com: U.K. Student Given Three Years Probation For Hacking. Read more www.zdnet.com: Gates' credit-card hacker sentenced. Read more www.guardianunlimited.co.uk: Welsh teen hacker sentenced. Read more

06 July 2001 M2 Trojan 1.5 Microsoft Security Bulletin MS01-037 Authentication Error in SMTP Service Could Allow Mail Relaying. Read more RuX FireCracker v 2.0, "discovered" by Astonsoft disables most popular firewalls. Read more See our news of 30 june. www.symantec.com: Trojan.Billrus.Texto. Read more www.tuxedo.org: Hacker Jargon. Read more www.idgnet.co.nz: Security specialist succumbs to hackers. Read more www.linuxsecurity.com: Defaced Commentary: Evil Angelica. Read more www.ananova.com: Teenage hacker to be sentenced for internet 'crusade'. Read more www.theinquirer.net: Big Brother Web site falls apart. Read more www.zdnet.com: Hacker posts code to exploit MS bug. Read more www.computeruser.com: Attack program exploits new Microsoft bug. Read more news.cnet.com: Oracle patches high-risk security hole. Read more www.blackhat.com: The Black Hat Briefings, July 11-12th Las Vegas. Read more www.individual.com: Euro Parliament Plans September Vote On Echelon Protest. Read more webserv.vnunet.com: Strewth! Aussie hacker on the rampage. Read more www.newsbytes.com: Hacker Goes On Defacement Spree In Australia. Read more www.siliconvalley.com: Report: Lilly inadvertently divulged IDs of 600 Prozac users in e-mail. Read more www.newsbytes.com: Eli Lilly Has Net Privacy Lapse. Read more dailynews.yahoo.com: U.S. Military Pursues Higher-Tech Security. Read more www.theregister.co.uk: Government, military scramble for encryption technology. Read more web.lexis-nexis.com: Shssh, secrecy! bootcamp top traumas solved. Read more web.lexis-nexis.com: INSTANT MESSAGES OPEN TO HACKERS. Read more

05 July 2001 HomeUNIX 1.0 www.dwheeler.com: Flawfinder is a program that examines source code looking for security weaknesses. Read more www.securiteam.com: Oracle 8i SQLNet Header Vulnerability. Read more www.securiteam.com: Cisco Multiple SSH Vulnerabilities. Read more www.securiteam.com: LiteWebServer JSP Source File Discolsure. Read more www.securiteam.com: BisonFTP Server Directory Traversal Vulnerability (BDL files). Read more www.securiteam.com: CesarFTP Vulnerable to a Buffer Overflow (HELP command). Read more www.securiteam.com: LiteServe Exposes CGI Source Code (8.3 filename). Read more www.securiteam.com: Multiple Vendors Vulnerable to LNK File Directory Traversal. Read more www.securiteam.com: Solaris Mailtool Buffer Overflow Exploit Code (OPENWINHOME). Read more www.securiteam.com: Linux Allows Reading from Execve()ed Setuid Memory. Read more www.securiteam.com: Xdm Cookies Fast Brute Force. Read more www.theregister.co.uk: Magistr continues three month reign as top virus. Read more www.theregister.co.uk: Unicode bug restyled as DoS tool. Read more www1.odt.co.nz: Hacker success `terrifies'. Read more it.mycareer.com.au: Cracker targets Australian Web servers. Read more jumpfn.123jump.com: OTS calls in police over hackers. Read more www.zdnet.com: OS X flaws draw hackers' eyes. Read more iwsun4.infoworld.com: Euro report 'downplays Echelon dangers,' say Greens. Read more www.wired.com: Echelon Furor Ends in a Whimper. Read more www.smh.com.au: Bush facing EU condemnation over spy network. Read more

04 July 2001 Theef 1.22 grc.com: Microsoft Does Not Understand Security. What This Means About the Future of Denial of Srvice? Read more www.pgp.com: Vulnerability in Oracle 8i TNS Listener. Read more www.securiteam.com: LPRng and Tetex Temp Files Race Vulnerability (UID LP Exploit). Read more www.securiteam.com: Exploit Code for the Buffer Overflow in XInetD Released (log.c). Read more www.securiteam.com: SmallHTTP Server Vulnerable to DoS (Long URL). Read more www.securiteam.com: vWebServer ASP Viewing and DoS Vulnerabilities (ASP Source, DOS Device, Long URL). Read more www.securiteam.com: TrendMicro InterScan VirusWall SmtpScan.dll Buffer Overflow. Read more www.securiteam.com: TrendMicro InterScan VirusWall HttpSaveCVP.dll Buffer Overflow. Read more www.securiteam.com: Exploit Code Released for the Crontab -e Vulnerability (.swp). Read more www.securiteam.com: Active Web Classifieds Authentication Failure Allows Arbitrary Code Execution. Read more www.securiteam.com: GNATS Allows Viewing Files and Arbitrary Code Execution (gnatsweb.pl). Read more freshmeat.net: remote vulnerability scanner 4.8. Read more www.theregister.co.uk: Unicode bug restyled as DoS tool. Read more www.pcworld.com: Usenet May Be a Virus Minefield. Read more www.zdnet.com: OS X flaws draw hackers' eyes. Read more uk.news.yahoo.com: �650,000 - Now that's what we call an expensive hack. Read more www.internetnews.com: Of Hackers, Spies and E-Terrorists. Read more www.informationweek.com: Getting Inside The Criminal Mind. Read more news.zdnet.co.uk: Crackers suspected of rigging Big Brother vote. Read more www.wired.com: Most Hacking Hides Real Threats. Read more www.zdnet.com: Hackers May Profit From Spam. Read more www.vnunet.com: Britney hacker faces the music. Read more www.ananova.com: Hacker fined for crashing Emirates' computer system. Read more www.nzherald.co.nz: Jurors witness hacking demonstration. Read more www.vnunet.com: User group proposes OS security standards. Read more www.newsfactor.com: Tech-Savvy Teens Swamp Police with Fake IDs. Read more www.securitywatch.com: UNICEF Pakistan defaced! Read more www.zdnet.com: Windows XP enters final testing. Read more

03 July 2001 Moonpie 2.0 www.securiteam.com: Exploit Code Released for the MS Windows 9x NETBIOS Password Verification Vulnerability. Read more www.securiteam.com: MacOS Personal Web Sharing DoS (Long Password). Read more www.newsbytes.com: Microsoft Does Not Understand Security.What This Means About the Future of Denial of Service. Read more www.vmyths.com: Aboout Raw Sockets. Read more www.newsbytes.com: XP Critic: Microsoft Misses The Point On Security. Read more www.nzherald.co.nz: Computer hacking trial opens. Read more australianit.news.com.au: Tougher online crime law. Read more it.mycareer.com.au: Hackers force business to muster the experts. Read more www.gulf-news.com: Computer whizkid fined for hacking into Internet system. Read more www.ireland.com: British hacker fined in Emirates. Read more

02 July 2001 Theef 1.21 news.com.au: Defence prepares for cyber-war. Read more www.theage.com.au: Cyber warfare on rise: Defence. Read more www.newsfactor.com: 'Peekabooty' Anonymous Web Browser Delayed. Read more www.theregister.co.uk: Microsoft fails to renew its digital certificate. Read more www.siliconvalley.com: Albuquerque teen accused of hacking NASA computer. Read more news.bbc.co.uk: Briton guilty of Dubai hacking, Read more www.accessatlanta.com: Computer upgrade mixes porn with Legislature's site. Read more biz.yahoo.com: Net Crime-Stoppers. Read more www.thetimes.co.uk: How secure is your money in cyberspace? Read more www.montrealgazette.com: Beware of the spy in your PC. Read more

01 July 2001 Internal Revise 1.0 Little Witch 4.2 www.securiteam.com: Cisco IOS HTTP Authorization Vulnerability. Read more www.securiteam.com: A-FTP Anonymous FTP Server Remote DoS Attack. Read more www.securiteam.com: Format String Vulnerability in KAV* for Sendmail. Read more www.securiteam.com: Anti-Spam and Security Fix Available for Formmail.pl. Read more www.computeruser.com: Microsoft battles another Win2K password. Read more www.nandotimes.com: New Mexico teen charged in NASA computer attack. Read more www.siliconvalley.com: Albuquerque teen accused of hacking NASA computer. Read more

Copyright� MegaSecurity.org