Home    News Archive    Translate Traducen

News October 2005

31 October 2005 Guides, Papers, etc moneycentral.msn.com: 22 ways to foil credit card thieves. Read more nwc.securitypipeline.com: IT Security In China Shows Cracks. Read more www.infectionvectors.com: Shoot the Messenger: IM Worms. Read more www.redherring.com: Blue Security Spams Spammers. Read more www.eweek.com: Shutting Down the Highway to Internet Hell. Read more   Vulnerabilities & Exploits www.idefense.com: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability. Read more   News news.zdnet.co.uk: Zombie masters hunted down. Read more news.bbc.co.uk: Campaign to combat 'cyber crime'. Read more www.dw-world.de: Internet Fraud Costs Europe Millions. Read more www.thenewstribune.com: Banks fight online fraud. Read more www.informationweek.com: Rootkit-Armed Worm Attacking AIM. Read more pittsburghlive.com: No longer lost in translation. Read more news.com.com: Google wants to dominate Madison Avenue, too. Read more www.esecurityplanet.com: SMBs Getting Hammered by New Threats. Read more today.reuters.co.uk: "Sophisticated" eBay fraudsters jailed in Britain. Read more www.networkworld.com: Bring on the wireless apps, users tell WiMAX World. Read more www.vnunet.com: IBM signs up for Google Desktop Search. Read more cooltech.iafrica.com: Supercomputer beats own record. Read more www.m-travel.com: Google introduces a new search feature. Read more

. 29 October 2005 Guides, Papers, etc rfidanalysis.or: Security Analysis of a Cryptographically-Enabled RFID Device. Read more www.securiteam.com: How-To: Hack NetStumbler to Enable Wireless Zero Configuration. Read more www.vnunet.com: Exclusive vnunet.com interview: Carrot and stick approach to internet safety. Read more www-users.cs.umn.edu: Worms: Taxonomy and Detection. Read more   Vulnerabilities & Exploits www.debian.org: DSA-878-1 netpbm-free -- buffer overflow. Read more www.debian.org: DSA-877-1 gnump3d -- cross-site scripting, directory traversal. Read more   News seattlepi.nwsource.com: Microsoft targets 'zombie' spam network. Read more www.securityfocus.com: Spam zombie, meet the Microsoft legal team. Read more www.securityfocus.com: U.S. makes securing SCADA systems a priority. Read more www.channelregister.co.uk: Microsoft warns that Korea may have to do without Windows. Read more news.zdnet.com: AIM worm plays nasty new trick. Read more management.silicon.com: Exclusive: The cost of joining Get Safe Online. Read more news.bbc.co.uk: US internet use rises as do fears. Read more www.technewsworld.com: Tough State Laws Won't Stop 'Phishing' Scams, Experts Say. Read more www.latimes.com: Hijacker of 'Sex.com' Is Arrested. Read more

. 28 October 2005 Guides, Papers, etc www.antispywarecoalition.org: Anti-Spyware Coalition Risk Model Description. Read more www.irishdev.com: Stopping Zombies Before They Attack. Read more www.windowsecurity.com: Delegating Group Policy Privilege using the GPMC. Read more www.pcworld.com: Privacy Watch: Who's Your Software Talking To? Read more news.com.com: FAQ: Identity fraud uncovered. Read more www.securitypipeline.com: 10 Security Myths That Need To Be Put To Rest. Read more www.sans.org: An Assessment of the Oracle Password Hashing Algorithm. Read more www.eweek.com: By Larry Seltzer. Who's Getting Rich in the .Com Market? Read more news.com.com: Photos. Supercomputers ready for work. Read more   Vulnerabilities & Exploits securitytracker.com: PAM with SELinux Lets Local Users Invoke unix_chkpwd to Conduct Password Guessing Attacks. Read more securitytracker.com: Mantis Include File in 't_core_path' Parameter Lets Remote Users Execute Arbitrary Code. Read more www.debian.org: DSA-876-1 lynx-ssl -- buffer overflow. Read more www.debian.org: DSA-875-1 openssl094 -- cryptographic weakness. Read more www.debian.org: DSA-874-1 lynx -- buffer overflow. Read more   News www.securitypipeline.com: Microsoft Hunts For Zombie Spammers. Read more www.vnunet.com: Microsoft takes on spamming botnets. Read more www.computerworld.com.au: Microsoft outlines Explorer 7 security changes. Read more www.smh.com.au: Online banking syndicate cracked. Read more www.theregister.co.uk: Malware authors unleash bird flu-themed Trojan. Read more www.techweb.com: Summer's Zotob Attack Cost Companies $100K Each In Clean-Up. Read more news.bbc.co.uk: Microsoft aims to trounce Google. Read more www.theregister.co.uk: Gates pitches child protection tech to French. Read more today.reuters.com: Microsoft threatens to withdraw Windows in S.Korea. Read more news.com.com: Microsoft's 'big bang' could be its last. Read more www.computerworld.com: Judge questions Microsoft project delays. Read more www.washingtonpost.com: New Rules On Internet Wiretapping Challenged. Read more software.silicon.com: Oracle password system under fire. Read more news.zdnet.com: Motorola, Intel team on mobile WiMax. Read more

. 27 October 2005 Guides, Papers, etc www.ifs.tuwien.ac.at: ARES 2006. The First International Conference on Availability, Reliability and Security. Read more www.windowsecurity.com: Shells for Sale! (Part 1). Read more www.insecuremagazine.com: (IN)SECURE Magazine 1.3. Read more www.skype.com: SKYPE SECURITY EVALUATION. Read more   Vulnerabilities & Exploits securitytracker.com: libgda2 Format String Bugs May Let Users Execute Arbitrary Code. Read more securitytracker.com: gCards 'news.php' Input Validation Error in 'limit' Parameter May Permit SQL Injection Attacks. Read more securitytracker.com: RSA ACE/Agent for Web Input Validation Error in 'image' Parameter Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more securitytracker.com: Snoopy Input Validation Hole in _httpsrequest() Lets Remote Execute Arbitrary Commands. Read more www.skype.net: SKYPE-SB/2005-003: Heap overflow in networking routine. Read more www.debian.org: DSA-873-1 net-snmp -- programming error. Read more www.debian.org: DSA-872-1 koffice -- buffer overflow. Read more www.sven-tantau.de: chmlib exploitable buffer overflow. Read more   News news.bbc.co.uk: Net users told to get safe online. Read more cgi.ebay.com: Gates for Sale on eBay. Read more www.vnunet.com: Skype fixes three critical flaws. Read more news.bbc.co.uk: Keeping net users safe from harm. Read more loosewire.typepad.com: ZoneAlarm's Sneaky Spyware Scare? Read more news.bbc.co.uk: Microsoft joins book search plan. Read more today.reuters.com: Gates foresees Chinese, Indian competitors. Read more www.terra.net.lb: Gates hails Israel's hi-tech know-how. Read more www.betanews.com: Gates: Microsoft Not Afraid of Google. Read more www.zdnet.com.au: Microsoft adds to OneCare security beta. Read more www.commsdesign.com: Microsoft, Nokia team on security appliance. Read more www.securityfocus.com: Web defacer sentenced, facing deportation. Read more www.securityfocus.com: DNS trust issues. Read more www.theregister.co.uk: Cyber-cafe owner arrested for turfing out 419 fraud. Read more

. 26 October 2005 Guides, Papers, etc www.securityelf.org: The Magic of magic byte. Read more www.voipsa.org: VoIP Security and Privacy Threat Taxonomy. Read more www.securityfocus.com: VoIP security threats defined. Read more www.securityfocus.com: Exploit published for Snort open-source IDS. Read more www.betanews.com: Chasing Vulnerabilities for Fun and Profit. Read more www.newsfactor.com: Are You Ready To Be Hacked? Read more en.wikiquote.org: Bill Gates. Read more Software Misuse: from malicious actions to mind control. Read more www.mikeindustries.com: How to Snatch an Expiring Domain. Read more www.cl.cam.ac.uk: Phantom withdrawals, on-line resources for victims of ATM fraud. Read more   Vulnerabilities & Exploits isc.sans.org: New Skype vulnerabilities. Read more securitytracker.com: Network Appliance Data ONTAP iSCSI Security Controls Can Be Bypassed. Read more securitytracker.com: PHP iCalendar Input Validation Holes Permit Remote Code Execution and Cross-Site Scripting Attacks. Read more securitytracker.com: Microsoft Internet Explorer J2SE Runtime Environment Bug Lets Remote Users Crash the Target User's Browser. Read more securitytracker.com: ar-blog Bugs Let Remote Users Bypass Authentication or Conduct Cross-Site Scripting Attacks. Read more securitytracker.com: SCO OpenServer Buffer Overflow in authsh and backupsh Lets Local Users Gain Elevated Privileges. Read more securitytracker.com: SCO UnixWare Buffer Overflow in ppp Lets Local Users Gain Root Privileges. Read more securitytracker.com: Symantec Discovery Creates Database Accounts Without Passwords. Read more securitytracker.com: BMC CONTROL-M Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more securitytracker.com: DBoardGear Input Validation Bugs in 'buddy.php' and 'u2u.php' May Permit SQL Injection Attacks. Read more www.debian.org: DSA-871-1 libgda2 -- format string. Read more www.debian.org: DSA-870-1 sudo -- missing input sanitising. Read more   News www.theregister.co.uk: MS adopts stronger encryption for IE7. Read more www.theregister.co.uk: Scramble to fix Skype security bug. Read more www.theregister.co.uk: VoIP security framework erected. Read more www.computerworld.com.au: MessageLabs Survey Finds Spyware No.1 Web Security Issue for Australian Businesses. Read more www.eweek.com: Windows OneCare Refresh Adds MSN Messenger Scanning. Read more www.net-security.org: 12 Months of Progress for the Microsoft Security Response Centre. Read more www.techworld.com: Cisco security head defends recent bug alerts. Read more www.infoworld.com: Microsoft security initiative in Germany moves forward. Read more www.securitypark.co.uk: Increasing demand for high quality security professionals. Read more www.alpha.gr: Alpha Bank. Fraud e-mail messages - Important announcement. Read more www.finextra.com: Phishers target Nordea's one-time password system. Read more ww.sophos.com: Sophos issues health warning after spammers peddle drugs to combat bird flu. Read more www.betanews.com: Microsoft Refreshes OneCare Beta. Read more today.reuters.co.uk: Skype adds new service as growth accelerates. Read more www.redherring.com: Google May Take on eBay. Read more www.betanews.com: Google to Offer Giant Web Database. Read more

. 25 October 2005 Guides, Papers, etc dns.measurement-factory.com: DOMAIN NAME SERVERS: PERVASIVE AND CRITICAL, YET OFTEN OVERLOOKED. Read more blogs.msdn.com: Upcoming HTTPS Improvements in Internet Explorer 7 Beta 2. Read more www.rootkit.com: KEEPING BLIZZARD HONEST - Announcing the release of 'The Governor'. Read more www.securityfocus.com: The click-wrap conundrum. Read more australianit.news.com.au: Inside hackers' kindergarten. Read more www.latimes.com: Cyber scammers in Nigeria: 'I Will Eat Your Dollars'. Read more www.bitdefender.com: BitDefender's bug hunting contest is underway, and will reward the most prolific beta tester with 1000 German beers and a trip to Romania. Read more www.itarchitect.com: Strategies & Issues: Honeypots - Sticking It to Hackers. Read more The Philippine Honeynet Project Honeypots 101: A Brief History of Honeypots. Read more Honeypots 101: Risks and Disadvantages. Read more Honeypots 101: What�s in it for me? Read more www.cse.msu.edu: Can a Network be Protected from Single-Packet Warhol Worms? Read more   Vulnerabilities & Exploits securitytracker.com: MWChat Input Validation Hole in 'Username' Permits SQL Injection Attacks. Read more securitytracker.com: Apache Memory Leak in MPM 'worker.c' Code May Let Remote Users Deny Service. Read more securitytracker.com: phpMyAdmin 'grab_globals.php' Lets Remote Users Include and Execute Local Files. Read more securitytracker.com: ZipGenius Buffer Overflows in Processing ACE and ZIP Archives and UUE Encoded Files Let Remote Users Execute Arbitrary Code. Read more   News www.theregister.co.uk: Most DNS servers 'wide open' to attack. Read more www.theregister.co.uk: Virus writers craft PnP botnet client. Read more www.securityfocus.com: Software hack reveals online game maker's "spying". Read more www.theregister.co.uk: Flaw finders score loyalty rewards from iDefense. Read more www.mb.com.ph: The hacker as terrorist? Read more management.silicon.com: We need UN body to combat cyber crime, says MP. Read more www.theregister.co.uk: Met police hooks up with commonwealth to fight cybercrime. Read more www.vnunet.com: US agency to locate surfers by IP address. Read more news.zdnet.co.uk: Mobile adult sites face hacking threats. Read more www.theregister.co.uk: VMware sets partitioning software free . . . as in beer. Read more www.redherring.com: Iran Tightens Web Filters. Read more www.redherring.com: Yahoo�s Big Content Adventure. Read more

. 24 October 2005 Guides, Papers, etc blog.outer-court.com: A chat with the guy behind the recent MySpace XSS worm. Read more www.windowsecurity.com: New Security Features in IE 7.0. Read more today.reuters.com: More lawmakers back U.S. control of Internet. Read more www.redherring.com: Cashing In on Cyber Crime. Read more www.telegraphindia.com: Dangers of phishing and pharming. Read more www.cs.berkeley.edu: Semi-Supervised Learning on Email Characteristics for Novel Worm Detection. Read more astalavista.com: Anti-honeypot technology. Read more astalavista.com: Cloaking and Redirection: A Preliminary Study. Read more googleblog.blogspot.com: The point of Google Print. Read more   Vulnerabilities & Exploits secunia.com: ZipGenius Multiple Archive Handling Buffer Overflow. Read more   News www.itnews.com.au: Microsoft clarifies second critical Windows 2000 patch. Read more software.silicon.com: We need UN body to combat cyber crime, says MP. Read more www.iht.com: Universities balk at computer security rules. Read more www.technewsworld.com: Cybercrime Being Fought in New Ways. Read more www.newsday.com: Cyber crime grows up. Read more www.pcworld.com: School Traps Infected PCs. Read more blogs.msdn.com: Upcoming HTTPS Improvements in Internet Explorer 7 Beta 2. Read more news.com.com: Intel chip glut may bring holiday cheer to PC buyers. Read more news.com.com: Publishers to build own online book network. Read more

. 22 October 2005 Guides, Papers, etc www.microsoft.com: The Windows XP Security Guide has been updated to provide specific recommendations about how to harden computers that run Windows XP with Service Pack 2 (SP2). Read more support.microsoft.com: The computer may not be updated after you install the "Security Update for DirectX 7.0 for Windows 2000 (KB904706)" on a Windows 2000-based computer that is running DirectX 8 or DirectX 9. Read more Rootkits. Hide'n Seek revisited - Full stealth is back. Read more www.windowsecurity.com: Robot Wars � How Botnets Work. Read more www.esecurityplanet.com: Gambling, Porn in Workplace Breed Spyware. Read more news.com.com: Ballmer: Trusting Vista, battling Google. Read more www.theregister.co.uk: How ATM fraud nearly brought down British banking. Read more www.computerworld.com: Guard against Titan Rain hackers. Read more www.eweek.com: By Larry Seltzer. A Bad Week for Patch QA. Read more wired.com: Creating the Global Hot Spot. Read more www.electricnews.net: Virus writers motivated by money: expert. Read more www.betadot.com: Linux Vs. Windows Security: How About The Truth? Read more www.silicon.com: Leader: Why teach students malware techniques? Read more www.silicon.com: 'Nigerian' money scam: What happens when you reply? Read more www.washingtonpost.com: Bypassing the Password Prompt. Read more www.forbes.com: Talent Wars. Read more   Tools: Flock Browser Takes Flight New �social browser� has �web 2.0� functions built in, allowing users to blog, share photos, and bookmark. Read more   Vulnerabilities & Exploits securitytracker.com: eBASEweb Input Validation Flaw Permits SQL Injection Attacks. Read more securitytracker.com: Zomplog Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more securitytracker.com: TikiWiki Unspecified Bug Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more   News news.zdnet.com: Exploit out for Zotob-like Windows flaw. Read more www.technewsworld.com: Former Intermix CEO Settles Spyware Case. Read more www.theregister.co.uk: Two get death sentence for cybercafe fire. Read more www.esecurityplanet.com: Snort's Intrusion System Blows a Hole. Read more www.redherring.com: What Google Must Do. Former Netscape executives recommend the search engine avoid angering Microsoft. Read more www.smh.com.au: Microsoft recants exclusive music deals. Read more www.betanews.com: Microsoft Music Deals Raise Questions. Read more www.macworld.com: Microsoft backs off on music player contracts. Read more www.earthtimes.org: Microsoft's patchy times continue to the ennui of users. Read more www.theregister.co.uk: Hunt for Swedish file sharers steps up. Read more

. 21 October 2005 Guides, Papers, etc www.securityfocus.com: Evolution of Web-based worms. Read more palisade.paladion.net: Stealing passwords via browser refresh. Read more sunbeltblog.blogspot.com: Misleading dialog box of the day. Read more sunbeltblog.blogspot.com: Adware community cackles with glee. Read more www.computerworld.com: Guard against Titan Rain hackers. Read more www.esecurityplanet.com: Email Security: How Much is Enough? Read more blogs.washingtonpost.com: Why You Need to Guard Your Computer. Read more wired.com: Sue Companies, Not Coders. Read more wired.com: Furor Grows Over Internet Bugging. Read more   Tools: www.betanews.com: VMware Ships Free Virtual Machine App. Read more   Vulnerabilities & Exploits www.idefense.com: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation. Read more www.debian.org: DSA-869-1 eric -- missing input sanitising. Read more www.debian.org: DSA-868-1 mozilla-thunderbird -- several vulnerabilities. Read more www.debian.org: DSA-867-1 module-assistant -- insecure temporary file. Read more securitytracker.com: BMV Buffer Overflow in openpsfile() Lets Local Users Gain Elevated Privileges. Read more securitytracker.com: Squid rfc1738_do_escape() FTP Server Response Processing Bug Lets Remote Users Deny Service. Read more securitytracker.com: Norton Anti-Virus for Macintosh DiskMountNotify Execution Path Lets Local Users Gain Elevated Privileges. Read more securitytracker.com: Symantec LiveUpdate Java Interface Lets Local Users Gain Elevated Privileges. Read more securitytracker.com: Ethereal Bugs in Multiple Dissectors Let Remote Users Execute Arbitrary Code or Cause Denial of Service Conditions. Read more securitytracker.com: Cisco 11500 Content Services Switch Lets Remote Users Deny Service With Malformed SSL Client Certificates. Read more securitytracker.com: PHP-Nuke Input Validation Errors in 'modules.php' Lets Remote Users Traverse the Directory. Read more securitytracker.com: Xerver Bugs Let Remote Users View Index Directory Listings, Obtain Script Source Code, and Conduct Cross-Site Scripting Attacks. Read more securitytracker.com: NetFlow Analyzer Input Validation Holes Permit Cross-Site Scripting Attacks. Read more   News www.securityfocus.com: Dutch bot-net suspects infected 1.5 million PCs, officials say. Read more www.vnunet.com: Botnet operation controlled 1.5m PCs. Read more news.bbc.co.uk: Spyware 'rampant' in UK computers. Read more www.betanews.com: Microsoft to Offer Education Grants. Read more www.securitypipeline.com: Internet Fraud, Deception Targeted By N.Y. Attorney General. Read more www.theregister.co.uk: Webroot guesstimates inflate UK spyware problem. Read more www.theregister.co.uk: O2 pushes ahead with super-fast mobile service. Read more www.techweb.com: Hackers, Scammers Hide Malicious JavaScript On Web Sites. Read more www.smh.com.au: Intermix man settles spyware suit. Read more news.bbc.co.uk: Ads fuel soaring Google profits. Read more news.bbc.co.uk: Has the Google juggernaut got a roadmap? Read more www.informationweek.com: Google To Blame For Spam-Related Blog Entries, Some Say. Read more news.bbc.co.uk: Wi-fi cities spark hotspot debate. Read more news.com.com: Scientology spoof site has its own cult following. Read more

. 20 October 2005 Guides, Papers, etc www.out-law.com: OUT-LAW Phishing Conference. Read more www.argeniss.com: Story of a dumb patch. Read more www.eweek.com: By Larry Seltzer: Only Suckers Renew. Read more www.securityfocus.com: Snort vulnerability "wormable" but not widespread. Read more software.silicon.com: Hackers to attack VoIP in two years. Read more software.silicon.com: Should security companies be regulated? Read more www.securityfocus.com: Two-factor banking. Read more www.windowsitpro.com: Secure Your Wireless Network. Read more   Tools: www.deviceforge.com: Cellphones learn to recognize their owners' faces. Read more   Vulnerabilities & Exploits www.debian.org: DSA-866-1 mozilla -- several vulnerabilities. Read more securitytracker.com: MySource Include File Bug Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Oracle Database and Application Server Have Multiple Unspecified Vulnerabilities With Unspecified Impact. Read more securitytracker.com: Xloadimage Buffer Overflows in Processing NIFF Format Files Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Netpbm Buffer Overflow in 'pnmtopng' May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Snort Buffer Overflow in Back Orifice Preprocessor Lets Remote Users Execute Arbitrary Code. Read more www.securiteam.com: IIS RSA WebAgent Redirect Buffer Overflow Exploit. Read more www.securiteam.com: Microsoft Windows Network Connection Manager Local DoS (Exploit, MS05-045). Read more   News news.zdnet.co.uk: Keep Internet out of UN control, says US. Read more www.vnunet.com: Rootkit creators turn professional. Read more bink.nu: Microsoft Security Bulletin Minor Revisions. Read more www.eweek.com: Microsoft Consults Ethical Hackers at Blue Hat. Read more news.zdnet.co.uk: Microsoft: Africa doesn't need free software. Read more news.bbc.co.uk: Wi-fi cities spark hotspot debate. Read more wired.com: Cities Unleash Free Wi-Fi. Read more www.cio-today.com: New Plans To Safeguard LANs. Read more news.bbc.co.uk: Broadband net goes stratospheric. Read more www.theregister.co.uk: Snort plugs Back Orifice as Oracle issues mega-fix. Read more www.theregister.co.uk: Bruce Schneier talks cyber law. Read more news.com.com: Kerio to scrap desktop firewall. Read more www.technewsworld.com: Google Targeted in 'Splogging' Attacks. Read more news.bbc.co.uk: Google is sued by book publishers. Read more news.zdnet.com: Schools get tailored cyberattack data. Read more

. 19 October 2005 Guides, Papers, etc www.auug.org.au: AUUG 2005. The Conference for Unix, Linux and Open Source Professionals. Read more software.silicon.com: Criminal IT: Unlocking the power of computer crime evidence. Read more www.fraudlabs.com: 10 Measures to Reduce Credit Card Fraud for Internet Merchants. Read more wiki.ccert.edu.cn: Active Technologies to Contain Internet Worm. Read more searchopensource.techtarget.com: Stopping Linux desktop adoption sabotage. Read more www.technewsworld.com: Codes Make Printers Stool Pigeons. Read more   Tools: www.betanews.com: Microsoft Research Ships Wi-Fi Tool. Read more   Vulnerabilities & Exploits www.us-cert.gov: Snort Back Orifice Preprocessor Buffer Overflow. Read more xforce.iss.net: Snort Back Orifice Parsing Remote Code Execution. Read more securitytracker.com: e107 Input Validation Hole in 'resetcore.php' Lets Remote Users Inject SQL Commands. Read more securitytracker.com: Flexbackup Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more securitytracker.com: Opera HTML Parsing Bugs Let Remote Users Deny Service. Read more securitytracker.com: Lynx Buffer Overflow in HTrjis() in Processing NNTP Headers Lets Remote Users Execute Arbitrary Code. Read more   News www.itweb.co.za: Costly virus damage. Read more www.auug.org.au: AUUG 2005: DRM and wiretapping huge threats to cyber freedom. Read more www.vnunet.com: Skype spoof hides IRCbot Trojan. Read more www.technewsworld.com: Malware Writers Exploit Skype Hype. Read more www.eweek.com: Microsoft Bakes Windows AntiSpyware into Vista. Read more www.csmonitor.com: Want to check your e-mail in Italy? Bring your passport. Read more www.theregister.co.uk: Security pros win out in office politics. Read more www.silicon.com: Microsoft warns ID cards pose massive security risk. Read more news.com.com: Security flaw touches Windows Media Player, IE. Read more www.theregister.co.uk: Old dog VMware learns new server partitioning tricks. Read more www.wired.com: India: Google Maps Too Graphic. Read more www.theregister.co.uk: Say hello to the Skype Trojan. Read more www.fcw.com: Davidson: Lessons of warfare for IT security. Read more news.bbc.co.uk: Up in the air. Read more www.wired.com: '4G' Leapfrogs Next-Gen Wireless. Read more news.bbc.co.uk: Nintendo in McDonald's wi-fi deal. Read more www.wired.com: DVD Jon Lands Dream Job Stateside. Read more

. 18 October 2005 Guides, Papers, etc www.benedelman.org: Claria Shows Ads Through Exploit-Delivered Popups. Read more www.eweek.com: As Threats Evolve, Defenses Must Adapt. Read more www.theregister.co.uk: Google Earth: the black helicopters have landed. Read more techrepublic.com.com: Photo Gallery: Installing the Vista beta. Read more evilscientists.de: Cisco Password Encryption reversed. Read more antiphishing.org: Phishing Activity Trends Report August, 2005. Read more www.vnunet.com: The hackers who can put your IT security to the test. Read more www1.cs.columbia.edu: A Cooperative Immunization System for an Untrusting Internet. Read more wired.com: Spyware: What You Need to Know. Read more   Vulnerabilities & Exploits www.zataz.net: flexbackup default config insecure temporary file creation. Read more securitytracker.com: MailSite Express Lets Remote Users Upload Scripting Files and Execute Them. Read more securitytracker.com: Sun Solairs chdir() Null Pointer Dereference Lets Local Users Deny Service. Read more   News news.com.com: Trojan masquerades as Skype update. Read more news.com.com: Windows patch backfires on the security-minded. Read more www.securityfocus.com: Windows patch + ACL = Trouble. Read more news.zdnet.com: Cisco extends NAC security to switches. Read more news.com.com: Samy opens new front in worm war. Read more news.zdnet.co.uk: Online banking security standard 'by the end of 2005'. Read more news.bbc.co.uk: Gates cheers on computer museum. Read more www.smh.com.au: NY spammer sentenced in closed session. Read more news.yahoo.com: Google Offers Glimpse at Data Collection. Read more news.com.com: Google widens book search effort in Europe. Read more www.internetweek.com: Scammers Dupe Online Daters for Millions Of Dollars. Read more www.theregister.co.uk: Millions of UK households at risk of ID theft. Read more www.theregister.co.uk: Web 2.0 worm downs MySpace. Read more www.pcworld.com: Intel Slashes PC Power-up Time. Read more news.bbc.co.uk: Wanadoo ups basic broadband speed. Read more news.bbc.co.uk: Copyright for the digital age. Read more

. 17 October 2005 Guides, Papers, etc www.whitedust.net: Interview with NMAP Creator Fyodor . Read more www.opensolaris.org: A Comparison of Solaris, Linux, and FreeBSD Kernels. Read more www.signonsandiego.com: Tracking mobile phones for real-time traffic data. Read more www.zdnet.com.au: Wireless crackdown. Read more www.zdnet.com.au: Wireless security: Pringles peril. Read more www.webpronews.com: When In Hacker Doubt, Have A Burrito. Read more archives.neohapsis.com: MSDTC. [Dailydave] sky != falling. Read more www.sensepost.com: The very informal guide to understand what BiDiBLAH actually does. Read more business.scotsman.com: VoIP - the internet phone revolution. Read more pb.specialised.info: Exploiting Windows Device Drivers. Read more   Tools: www.terra.net.lb: Samsung launches cell phone with 3-gigabyte memory. Read more   News www.boston.com: Don't give UN control over Internet. Read more nwc.networkingpipeline.com: Newest Mobile Devices Are Latest Threat To Network Security. Read more www.zdnet.com.au: Web sites threatened by Samy worm. Read more www.detnews.com: FBI puts stop to spam king. Read more www.wired.com: Wi-Fi Cloud Covers Rural Oregon. Read more www.vnunet.com: Microsoft to spark desktop security software price war. Read more www.computerworld.com: Microsoft patch problematic for some, security firm says. Read more news.zdnet.com: Phishing fight may be paying off. Read more blog.outer-court.com: How to Make 1 Million Friends on MySpace. Read more news.bbc.co.uk: UK 'lax' over identity theft. Read more www.technewsworld.com: Venture Capital Flows to Firms Targeting ID Theft. Read more www.int.iol.co.za: Top gamers caught cheating at cybergames. Read more

. 16 October 2005 Guides, Papers, etc www.int.iol.co.za: Forget about forgetting your passwords. Read more www.informationweek.com: IT Confidential: Would You Like Spyware With That? Read more   Vulnerabilities & Exploits securitytracker.com: IBM AIX lscfg Command May Let Local Users Gain Elevated Privileges. Read more securitytracker.com: Gallery Input Validation Bug in Processing Internal Cache Files Lets Remote Users Traverse the Directory. Read more   News www.microsoft.com: Microsoft Security Bulletin Minor Revision. Read more www.tgdaily.com: Microsoft exec warns of 'fake' XP update. Read more www.itp.net: Jailed hackers prove crime does not pay. Read more google.weblogsinc.com: O�Reilly Google Hacks Code Online. Read more msmvps.com: Trend Micro Study Reveals Spyware Encounters Are Increasing at Work. Read more www.int.iol.co.za: MS supports development of Eskimo language. Read more software.silicon.com: Leader: The beginning of the end for 419 scams? Read more www.smh.com.au: 101 held for 'obscene' net activity. Read more

. 15 October 2005 Guides, Papers, etc www.securityfocus.com: Worm worries don't wait for Windows exploits. Read more news.com.com: Time for a real Internet highway. Read more www.it-observer.com: Behind the Scams--How to Follow the Clues at an Internet Crime Scene. Read more net-security.org: Insider Security Threats Q&A. Read more arachnid.homeip.net: Bots and botnets � risks, issues and prevention. Read more   Vulnerabilities & Exploits securitytracker.com: Sun Solaris SCTP Socket Option Processing Bugs Let Local Users Deny Service. Read more securitytracker.com: Hitachi TP1 Lets Remote Users Deny Service. Read more securitytracker.com: cURL/libcurl Buffer Overflow in Processing NTLM Authentication Values May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: wget Buffer Overflow in Processing NTLM Authentication Values May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: XMail Buffer Overflow in AddressFromAtPtr() May Let Local Users Gain Elevated Privileges. Read more securitytracker.com: Complete PHP Counter Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more   News www.technewsworld.com: Viruses Increasingly Infecting Enterprise Networks Via IM. Read more news.zdnet.com: Critical Windows patch may wreak PC havoc. Read more www.usatoday.com: Spyware can constitute illegal trespass on home computers. Read more www.schneier.com: Blizzard Entertainment Uses Spyware to Verify EULA Compliance. Read more news.zdnet.com: ' Nigeria enlists Microsoft to fight spam scammers. Read more news.zdnet.com: ' Phishing fight may be paying off. Read more www.theregister.co.uk: US cybersecurity all at sea. Read more aawsat.com: Infamous Al-Qaeda Bloggers Nationalities Revealed. Read more news.zdnet.com: Al-Qaida proving elusive on the Net. Read more www.techworld.com: Symantec to unleash 'Big Brother' on the world. Read more seattlepi.nwsource.com: Gates talks about a future with even easier communication. Read more news.com.com: Gates to students: Microsoft wants you. Read more www.informationweek.com: Massachusetts Hits "Internet Spam Gang" With $37 Million Fine. Read more software.silicon.com: Veritas issues another security flaw warning. Read more www.vnunet.com: Lloyds TSB trials token-based security device. Read more news.bbc.co.uk: Hollywood pursues fake film sites. Read more

. 14 October 2005 Guides, Papers, etc cyber.law.harvard.edu: Empirical Analysis of Internet Filtering in China. Read more www.bangkokpost.com: Big Brother decides what you see in Burma. Read more www.rootkit.com: 4.5 million copies of EULA-compliant spyware. Read more forums.worldofwarcraft.com: WoW is Spyware author = Bot Coder/Hacker!!! Read more www.securityfocus.com: ICANN on center stage. Read more www.windowsecurity.com: Changing Passwords for Key User Accounts. Read more www.unixreview.com: Computer Security, It�s Not About the Software. Read more www.biosmagazine.co.uk: Cybercrime Wars. Read more internet.newsforge.com: How to keep instant messaging off the record. Read more ww.cs.vu.nl: SweetBait: Zero-Hour Worm Detection and Containment Using Honeypots. Read more www.informationweek.com: Analysis: Microsoft, Yahoo Alliance Takes Aim At IM Competition. Read more telephonyonline.com: Why security is the key to wireless profitability. Read more   Vulnerabilities & Exploits www.frsirt.com: Microsoft Collaboration Data Objects Buffer Overflow PoC Exploit (MS05-048). Read more www.frsirt.com: Microsoft Windows Network Connection Manager Local DoS Exploit (MS05-045). Read more www.frsirt.com: Microsoft Windows FTP Client File Transfer Location Tampering Exploit. Read more www.idefense.com: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability. Read more www.idefense.com: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability. Read more www.debian.org: DSA-865-1 hylafax -- insecure temporary files. Read more securitytracker.com: Sun Solaris pwdx Discloses Process Directory Information to Local Users. Read more securitytracker.com: Sun Solaris secpolicy_fs_common() Null Pointer Dereference Lets Local Users Panic the System. Read more securitytracker.com: Symantec Brightmail AntiSpam Lets Remote Users Deny Service With Malformed MIME Content. Read more securitytracker.com: HP-UX Itanium Stack Bug Lets Local Users Deny Service. Read more   News www.theregister.co.uk: Desktop search and malware: friend or foe? Read more www.computerworld.com.au: Cisco exec on security, Black Hat brouhaha. Read more www.bakutoday.net: China arrests 101 people for obscene Internet activity. Read more www.computerworld.com.au: Exploit code discovered for new Microsoft flaw. Read more www.theglobeandmail.com: Gates strokes Canada's high-tech talent pool. Read more www.sky.com: INTERNET FRAUD TARGETED. Read more news.zdnet.co.uk: Symantec raises Norton prices. Read more www.technewsworld.com: US Still the Ruling Land of Spam. Read more www.technewsworld.com: Experts: Computer Crime Down But Caution Still Needed. Read more www.betanews.com: Cross-Site Scripting Worm Hits MySpace. Read more www.theregister.co.uk: Yahoo! clamps down on predatory chat. Read more software.silicon.com: Veritas issues another security flaw warning. Read more networks.silicon.com: Mobile anti-theft device that knows how you walk. Read more news.com.com: Xbox plays starring role in Windows update. Read more www.technewsworld.com: Feds File Charges in Largest US Piracy Case. Read more

. 13 October 2005 Guides, Papers, etc www.pulltheplug.org: PullThePlug Contest. Call For Papers. Read more www.securityfocus.com: Arrests unlikely to impact bot net threat, say experts. Read more www.vnunet.com: Who's that knocking at your PC? Read more www.securityfocus.com: OpenBSD's network stack. Read more www.prolexic.com: The Prolexic Zombie Report. Read more darkfader.net: Notice on the DS bricker trojan. Read more www.airscanner.com: Close Encounters of the Hacker Kind: A Story from the Front Lines. Read more www.airscanner.com: Owned by the THR34T Krew...Part II. Read more files.malwareblog.com: EFFECTIVE SECURITY POLICY MANAGEMENT. Read more   Vulnerabilities & Exploits www.zerodayinitiative.com: VERITAS NetBackup Remote Code Execution. Read more securitytracker.com: Novell NetMail Buffer Overflow in Network Messaging Application Protocol Agent Lets Remote Authenticated Users Execute Arbitrary Code. Read more securitytracker.com: Sun Java System Application Server May Disclose JSP Source Code to Remote Users. Read more securitytracker.com: GFI MailSecurity Web Module Buffer Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Computer Associates Buffer Overflow in iGateway Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Microsoft Windows Multiple COM Objects Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Microsoft Network Connection Manager Lets Remote Users Deny Service. Read more securitytracker.com: Microsoft Windows Plug and Play Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.debian.org: DSA-864-1 ruby1.8 -- programming error. Read more   News www.theregister.co.uk: Worm fears over MS October patch batch. Read more www.itnews.com.au: Windows 2000 bug could mean repeat of Zotob. Read more www.itnews.com.au: Exploit already out for new Win2K Bug. Read more www.theregister.co.uk: Phishing attack targets one-time passwords. Read more networks.silicon.com: MSN-Yahoo! IM love-in could spread worms. Read more www.vnunet.com: Grisoft predicts Linux virus plague. Read more www.timesonline.co.uk: Banks caught by �5m spy sting. Read more www.news.wisc.edu: Bill Gates surprises students as "stand in" professor. Read more www.rednova.com: Bedroom IT Skills Were Designed to Create a Devastating Worm. Read more www.arnnet.com.au: Firewall goes wireless. Read more wired.com: Don't Let Fear Kill Muni Wi-Fi. Read more www.itnews.com.au: Australia drops off 'Dirty Dozen' spammers list. Read more news.bbc.co.uk: Spammer's net name scam revealed. Read more news.com.com: Three indicted in massive bust of pirated CDs. Read more www.theregister.co.uk: Sweden takes file sharer to court. Read more

. 12 October 2005 Guides, Papers, etc software.silicon.com: Opinion: So why can't Microsoft build in security? Read more www.newsfactor.com: Spyware Spreads Despite Security Efforts. Read more blogs.washingtonpost.com: Positive News in the War on Spyware. Read more www.bindshell.net: The Cross-site Scripting Virus. Read more www.microsoft.com: Avoid wireless attacks through your Bluetooth cell phone. Read more www.microsoft.com: Help thwart online scams with Microsoft Phishing Filter. Read more www.microsoft.com: How to tell whether a Microsoft security-related e-mail message is genuine. Read more www.microsoft.com: Retire that computer more safely. Tips on how to help reduce risks when selling or discarding computer hardware. Read more www.staysafeonline.info: An Action Agenda for Securing the Nation�s Digital Resources: Start in Kindergarten! Read more blogs.securiteam.com: Skype�s encryption. Read more   Vulnerabilities & Exploits www.idefense.com: Microsoft Distributed Transaction Controller TIP DoS Vulnerability. Read more www.idefense.com: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability. Read more www.frsirt.com: Microsoft Internet Explorer Multiple Remote Vulnerabilities (MS05-052). Read more www.frsirt.com: Microsoft Windows MSDTC and COM+ Multiple Vulnerabilities (MS05-051). Read more www.frsirt.com: Microsoft Windows DirectShow Remote Code Execution (MS05-050). Read more www.frsirt.com: Microsoft Windows Shell and Web View Vulnerabilities (MS05-049). Read more www.frsirt.com: Microsoft Collaboration Data Objects Code Execution (MS05-048). Read more www.frsirt.com: Microsoft Windows Plug and Play Remote Code Execution (MS05-047). Read more www.frsirt.com: Microsoft Client Service for NetWare Remote Code Execution (MS05-046). Read more www.frsirt.com: Microsoft Windows Network Connection Manager DoS (MS05-045). Read more secunia.com: WinRAR Format String and Buffer Overflow Vulnerabilities. Read more securitytracker.com: PHP Advanced Transfer Manager HTML Files Let Remote Users Conduct Cross-Site Scripting Attacks. Read more securitytracker.com: OpenSSL SSL_OP_MSIE_SSLV2_RSA_PADDING Option May Let Remote Users Rollback the Protocol Version. Read more securitytracker.com: SGI IRIX 'runpriv' Input Validation Error Lets Certain Local Users Gain Elevated Privileges. Read more securitytracker.com: Cyphor Input Validation Holes Permot SQL Injection and Cross-Site Scripting Attacks. Read more www.securiteam.com: phpMyAdmin Directory Traversal (Exploit). Read more www.debian.org: DSA-863-1 xine-lib -- format string vulnerability. Read more   News www.microsoft.com: Microsoft Security Bulletin Summary for October, 2005. Read more www.theregister.co.uk: Security pros savage Tsunami hacker verdict. Read more news.zdnet.com: Symantec won't 'whine' about Microsoft. Read more www.theregister.co.uk: Microsoft and Yahoo! 'to merge IM chat'. Read more www.theregister.co.uk: Users want ISPs to filter spyware. Read more seattletimes.nwsource.com: Microsoft sees a future on the small screen. Read more news.bbc.co.uk: Defending Google's licence to print. Read more news.zdnet.co.uk: Google closes security hole. Read more www.electricnews.net: Group pushes for faster Wi-Fi. Read more

. 11 October 2005 Guides, Papers, etc www.demop.com: User Phishing Awareness Survey. Read more www.immunityinc.com: Nematodes � Beneficial Worms. Read more www.cnn.com: A convicted hacker debunks some myths. Read more www.eweek.com: Larry Seltzer : MS-YASS 1.0? (Yet Another Security Suite). Read more www.pulltheplug.org: The PullThePlug Contest is a unique opportunity for individuals in the information security community to share their knowledge in the form of interesting and innovative papers and win a prize in the process. Read more www.informit.com: Details Emerge on the First Windows Mobile Virus. Read more blogs.securiteam.com: The Changing Face of Crime - What�s Out There? Read more www.microsoft.com: 10 tips for safer instant messaging. Read more   Tools: fileforum.betanews.com: Tor for Windows 0.1.1.8 Alpha. Read more   Vulnerabilities & Exploits www.idefense.com: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability. Read more www.securitytracker.com: Kaspersky Anti-Virus May Fail to Detect Viruses in Modified Archives. Read more www.securitytracker.com: Sophos Anti-Virus May Fail to Detect Viruses in Modified Archives. Read more www.securitytracker.com: Symantec AntiVirus May Fail to Detect Viruses in Modified Archives. Read more www.securitytracker.com: McAfee VirusScan May Fail to Detect Viruses in Modified Archives. Read more www.frsirt.com: Computer Associates iGateway Remote Buffer Overflow Vulnerability. Read more www.securitytracker.com: Clam VirusScan May Fail to Detect Viruses in Modified Archives. Read more www.debian.org: DSA-862-1 ruby1.6 -- programming error. Read more www.debian.org: DSA-861-1 uw-imap -- buffer overflow. Read more www.debian.org: DSA-860-1 ruby -- programming error. Read more www.debian.org: DSA-859-1 xli -- buffer overflows. Read more www.debian.org: DSA-858-1 xloadimage -- buffer overflows. Read more www.securiteam.com: MailEnable Logging Buffer Overflow (Nematoda, Exploit). Read more www.securiteam.com: ProZilla Buffer Overflow (Exploit). Read more   News www.theregister.co.uk: MS security bundling plan causes waves. Read more news.bbc.co.uk: Net power struggle nears climax. Read more today.reuters.co.uk: Wireless industry comes together for faster Wi-Fi. Read more www.theregister.co.uk: Anti-spam user authentication is 'worse than useless'. Read more www.itnews.com.au: Microsoft opens Hotmail Kahuna beta. Read more software.silicon.com: Google fixes phishing flaw. Read more www.theregister.co.uk: Google Sun (Office) not a threat, says MS. Read more www.theregister.co.uk: We'll index the world by 2310, says Google. Read more news.bbc.co.uk: Web enjoys year of biggest growth. Read more www.theregister.co.uk: DDoS by mobile phone: is it a goer? Read more www.vitalsecurity.org: They whacked Google! Read more www.finjan.com: Finjan Identifies Dangerous Cross Site Scripting Vulnerability on Google. Read more news.zdnet.co.uk: Tsunami 'hacker' is innocent, say readers. Read more

. 10 October 2005 Guides, Papers, etc astalavista.com: How to Cheat at Chess: A Security Analysis of the Internet Chess Club. Read more www.cnn.com: A convicted hacker debunks some myths. Read more www.insipid.com: Next Generation DHCP Deployments. Read more www.cs.jhu.edu: Analysis of the WinZip Encryption Method. Read more www.cse.ucsd.edu: Attacking and Repairing the WinZip Encryption Scheme. Read more www.smsanalysis.org: Exploiting Open Functionality in SMS-Capable Cellular Networks. Read more astalavista.com: Astalavista Group Security Newsletter Issue 21 - 30 September 2005. Read more www.betanews.com: Windows, Windows Everywhere. Read more   Vulnerabilities & Exploits securitytracker.com: HAURI ViRobot Buffer Overflow in Processing ALZ Archives Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: HAURI LiveCall Buffer Overflow in Processing ALZ Archives Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Oracle Forms Lets Remote Users Shutdown the TNS Listener. Read more www.debian.org: DSA-857-1 graphviz -- insecure temporary file. Read more www.debian.org: DSA-856-1 py2play -- design error. Read more www.debian.org: DSA-855-1 weex -- format string vulnerability. Read more www.debian.org: DSA-854-1 tcpdump -- infinite loop. Read more www.debian.org: DSA-853-1 ethereal -- several vulnerabilities. Read more   News www.informationweek.com: Microsoft Details Antivirus And Anti-Spyware Timetable. Read more bink.nu: Microsoft warns, don't use "Windows XP Service Pack 3 Preview". Read more www.usatoday.com: At age 30, Microsoft grapples with growing up. Read more www.betanews.com: MS Patch Tuesday to Bring Nine Fixes. Read more news.com.com: Google ETA? 300 years to index the world's info. Read more www.usatoday.com: Mystery surrounds Google. Read more www.vnunet.com: Cops smash 100,000 node botnet. Read more

. 09 October 2005 Guides, Papers, etc files.malwareblog.com: ANTI-VIRUS IN THE WILD. Read more www.eweek.com: Larry Seltzer: Kill Pests, Don't Spread Them. Read more www.securitypipeline.com: Review: Spyware Detectors. Read more www.macdevcenter.com: Mac Security: Identifying Changes to the File System. Read more   Tools: www.securiteam.com: Cisco Password Cracker. Read more www.redherring.com: Rugged Laptops Gain Popularity. Read more   Vulnerabilities & Exploits www.debian.org: DSA-852-1 up-imapproxy -- format string vulnerability. Read more www.debian.org: DSA-851-1 openvpn -- programming errors. Read more www.debian.org: DSA-850-1 tcpdump -- infinite loop. Read more www.debian.org: DSA-849-1 shorewall -- programming error. Read more www.debian.org: DSA-848-1 masqmail -- several vulnerabilities. Read more   News news.zdnet.co.uk: Tsunami 'hacker' conviction worries experts. Read more news.zdnet.co.uk: Security guru urges banks to beat ID theft. Read more news.zdnet.co.uk: Secure Wi-Fi hot spots rolled out. Read more www.securitypipeline.com: Attackers Could Text Message Cell Services To Death. Read more www.redherring.com: Microsoft Draws E.U. Scrutiny. Read more cnews.canoe.ca: Microsoft to test security services for business customers. Read more www.redherring.com: Mr. Google Goes to Washington. Read more www.redherring.com: Governator Bans Violent Games. Read more

. 08 October 2005 Guides, Papers, etc www.microsoft.com: WPA Wireless Security for Home Networks. Read more www.tomsnetworking.com: The Feds can own your WLAN too. Read more computer.howstuffworks.com: How Virtual Private Networks Work. Read more www.cs.wright.edu: Hacking Techniques in Wireless Networks. Read more spywarewarrior.com: The Spyware Warrior Guide to Anti-Spyware Programs. Read more www.scs.carleton.ca: ARP-based Detection of Scanning WormsWithin an Enterprise Network. Read more news.bbc.co.uk: Bill Thompson: Taking on software liability. Read more www.infoworld.com: Roger A. Grimes: Malicious attack trends: good, bad, and worse. Read more www.technewsworld.com: Poll: Public Perceives Net as Threat to Kids. Read more   Vulnerabilities & Exploits rgod.altervista.org: Cyphor 0.19 SQL Injection / Board takeover / cross site scripting. Read more www.debian.org: DSA-846-1 cpio -- several vulnerabilities. Read more www.debian.org: DSA-847-1 dia -- missing input sanitising. Read more www.red-database-security.com: Shutdown TNS Listener via Oracle Forms Servlet. Read more www.red-database-security.com: Cross-Site-Scripting Vulnerability in Oracle XMLDB. Read more securitytracker.com: Utopia News Pro Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more securitytracker.com: aspReady FAQ Manager Missing Input Validation Lets Remote Users Inject SQL Commands. Read more securitytracker.com: Sun Directory Server Unspecified Bug Lets Remote Users Compromise the System. Read more securitytracker.com: PHP-Fusion Input Validation Holes in 'register.php' and 'faq.php' Permit SQL Injection Attacks. Read more securitytracker.com: Webroot Desktop Firewall Lets Local Users Gain Elevated Privileges or Disable the Firewall. Read more securitytracker.com: Mozilla Firefox Buffer Overflow in Processing IFRAME Widths May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: ALZip Buffer Overflows in Processing Multiple Archives Lets Remote Users Execute Arbitrary Code. Read more   News www.int.iol.co.za: Dutch arrest alleged 'W32.Toxbot' hackers. Read more www.theregister.co.uk: Dutch smash 100,000-strong zombie army. Read more news.bbc.co.uk: Hackers jailed over global virus. Read more www.theregister.co.uk: Pair jailed over virus plot. Read more english.chosun.com: Sports Chosun 'Infected With Spyware'. Read more software.silicon.com: Security firms put the boot into the media. Easier than admitting their own failings...Read more www.vnunet.com: Microsoft warms up for security push. Read more news.zdnet.com: Net backbone outage fixed, for now. Read more www.theregister.co.uk: Malware turns PSP into expensive brick. Read more www.theregister.co.uk: China purges spam SMS. Read more

. 07 October 2005 Guides, Papers, etc www.newsfactor.com: New Security Nightmare: Robot Networks. Read more www.windowsecurity.com: Standardization and the security appliance. Read more www.adrianpv.com: Interesting idea for a covert channel or I just didn't research enough? Backdoor receives commands from the attacker by interpreting the properties of the dropped packets which were logged by the firewall. Read more www.wired.com: By Bruce Schneier: A Real Remedy for Phishers. Read more www.microsoft.com: Rootkits: The Obscure Hacker Attack. Read more news.com.com: FAQ: Inside Microsoft's Client Protection. Read more news.com.com: Blackout shows Net's fragility. Read more   Vulnerabilities & Exploits secunia.com: HAURI Anti-Virus ALZ Archive Handling Buffer Overflow. Read more secunia.com: Webroot Desktop Firewall Two Vulnerabilities. Read more secunia.com: PHP-Fusion Two SQL Injection Vulnerabilities. Read more www.debian.org: DSA-845-1 mason -- programming error. Read more   News www.networkworld.com: Report: Symantec brings Microsoft complaint to EU. Read more seattlepi.nwsource.com: Microsoft, nudged by competitors, to step up business security. Read more www.theregister.co.uk: Sober worm comeback poses as schoolfriend pic. Read more www.vnunet.com: Warning on bilingual Sober virus. Read more www.theregister.co.uk: Virus naming scheme gets mixed reception. Read more www.newsfactor.com: First Trojan for Sony PSP on the Loose. Read more news.zdnet.co.uk: Microsoft announces imminent security release. Read more news.zdnet.co.uk: Kaspersky confirms antivirus flaw. Read more www.theregister.co.uk: Victims coughing up to online extortionists. Read more www.theregister.co.uk: MS goes a bundle on malware protection. Read more www.betanews.com: MS to Ship Malware Protection Utility. Read more blogs.securiteam.com Snort Gone Commercial. Read more www.theregister.co.uk: How Dell repels attempts to buy its 'open source' PC. Read more www.guardian.co.uk: Third of top companies break email privacy laws. Read more www.theregister.co.uk: Tsunami hacker convicted. Read more www.computerweekly.com: Microsoft goes on hacker charm offensive. Read more today.reuters.co.uk: Microsoft says Windows is safer than you think. Read more www.smh.com.au: US cracks down on spyware operation. Read more www.ecommercetimes.com: Feds Point Finger at US Spyware Operation. Read more news.bbc.co.uk: Google-Sun alliance hints at future deals. Read more news.zdnet.co.uk: Secure Wi-Fi hot spots rolled out. Read more news.zdnet.co.uk: Nokia reacts to mobile virus threat. Read more www.theregister.co.uk: T-Mobile goes large on mobile net access. Read more

. 06 October 2005 Guides, Papers, etc www.gi-ev.de: SIG SIDAR Conference on Detection of Intrusions and Malware & Vulnerability Assessment. Read more www.pakcon.org: PAKCON II, a cyber security convention held annually in Pakistan. Read more thesecuritynetwork.org: Cyber Security Event to be held on October 19th at National University's Spectrum Business Park location in Kearny Mesa. Read more www.securityfocus.com: Reducing browser privileges. Read more msdn.microsoft.com: Browsing the Web and Reading E-mail Safely as an Administrator. Read more www.websensesecuritylabs.com: Security Trends Report, First Half 2005. Read more www.securityfocus.com: Can writing software be a crime? Read more www.newyorker.com: THE ZOMBIE HUNTERS. Read more deseretnews.com: Spyware spreads despite security. Read more www.sciam.com: Stopping Spam. What can be done to stanch the flood of junk e-mail messages? Read more www.perlcode.org: Blocking Windows Worms at the Server with Procmail on a VPS. Read more   Tools: www.thehotfix.net: Windows XP Service Pack 3 Preview Download. Read more   Vulnerabilities & Exploits www.idefense.com: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability. Read more www.websensesecuritylabs.com: Phishing Alert: Sooper Credit Union. Read more www.websensesecuritylabs.com: Phishing Alert: Colonial Bank. Read more www.websensesecuritylabs.com: Phishing Alert: Escrow.com. Read more www.debian.org: DSA-844-1 mod-auth-shadow -- programming error. Read more www.debian.org: DSA-843-1 arc -- insecure temporary file. Read more www.debian.org: DSA-842-1 egroupware -- missing input sanitising. Read more www.debian.org: DSA-841-1 mailutils -- format string vulnerability. Read more securitytracker.com: Uim Input Validation Flaw in Environment Variables May Let Local Users Gain Elevated Privileges. Read more securitytracker.com: Symantec Anti Virus Scan Engine Buffer Overflow in Web Service Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: UW-IMAP Buffer Overflow in Processing Mailbox Name Lets Remote Authenticated Users Execute Arbitrary Code. Read more securitytracker.com: MailEnable Buffer Overflow in W3C Format Logging May Let Remote Users Execute Arbitrary Code. Read more   News software.silicon.com: Are online firms doing secret deals with DDoS attackers? Read more software.silicon.com: Symantec security hole puts systems at risk. Read more today.reuters.co.uk: Internet crime shifts to Russia. Read more news.com.com: FTC sues company over spyware. Read more www.zdnet.com.au: Nessus security tool closes its source. Read more www.physorg.com: Another view of the Internet's fragility. Read more www.latimes.com: Hackers Could Cripple Mobile Phone Networks, Study Says. Read more www.computerweekly.com: No jobs for the bad boys. Read more www.seniorjournal.com: FTC Targets Company Secretly Installing Spyware that Can�t Be Uninstalled. Read more www.theregister.co.uk: Microsoft FAT patent rejected - again. Read more www.washingtonpost.com: AOL boosts anti-phishing protection. Read more www.620ktar.com: Microsoft to Offer New Security Service. Read more www.theregister.co.uk: 'DEC hacking' trial opens. Read more

. 05 October 2005 Guides, Papers, etc www.windowsecurity.com: Review of Security Planning Guides from Microsoft. Read more www.benedelman.org: Video: New.net Installed through Security Holes. Read more www.suse.de: x86-64 buffer overflow exploits and the borrowed code chunks exploitation technique. Read more astalavista.com: Do Security Toolbars Actually Prevent Phishing Attacks? Read more astalavista.com: A Strong Authentication Mechanism for Consumer-Facing Online Transactions. Read more   Tools: www.microsoft.com: SyncToy: the smart way to copy files. Read more   Vulnerabilities & Exploits securitytracker.com: Hitachi JP1/Cm2/Network Node Manager Unspecified Bugs Let Remote Users Deny Service or Execute Arbitrary Commands. Read more   News www.theregister.co.uk: Zombie bots clog internal networks. Read more www.techworld.com: Firefox site hacked again. Read more news.bbc.co.uk: Web helps criminals trap victims. Read more www.smh.com.au: China shuts three anti-govt sites. Read more management.silicon.com: Security consultants writing their own pay cheques. Read more www.theglobeandmail.com: Google, Sun Micro link up on software. Read more www.channelregister.co.uk: Kaspersky in heap-based buffer overflow vuln. Read more www.informationweek.com: Kaspersky Says It's Fixed AV Scanner Flaw. Read more www.infoworld.com: Click fraud is growing concern. Read more www.vnunet.com: Expert witness questions child porn jailings. Read more beta.news.com.com: Text hackers may threaten cell phones. Read more news.bbc.co.uk: Future mobiles to get chip boost. Read more

. 04 October 2005 Guides, Papers, etc www.secureenterprisemag.com: Q&A With 'Wormologist' Vern Paxson. Read more www.truste.org: How Not to Look Like a Phish. Read more   Vulnerabilities & Exploits www.rem0te.com: Kaspersky Antivirus Library Rem�te Heap Overflow Security Advisory. Read more www.frsirt.com: Kaspersky Anti-Virus Products Remote Heap Overflow Vulnerability. Read more securitytracker.com: ApacheTop Unsafe Temporary File May Let Local Users Gain Elevated Privileges. Read more securitytracker.com: MyBloggie Input Validation Hole in 'login.php' Lets Remote Users Inject SQL Commands to Bypass Authentication. Read more securitytracker.com: Citrix MetaFrame Presentation Server ClientName Policies Can Be Bypassed By Remote Authenticated Users. Read more securitytracker.com: Virtools Web Player Buffer Overflow and Directory Traversal. Read more securitytracker.com: Texinfo 'texindex' Unsafe Temporary File May Let Local Users Gain Elevated Privileges. Read more securitytracker.com: IBM AIX getconf Utility Lets Local Users Gain Elevated Privileges. Read more www.debian.org: DSA-840-1 drupal -- missing input sanitising. Read more www.debian.org: DSA-839-1 apachetop -- insecure temporary file. Read more   News www.theregister.co.uk: Backdoor Trojan targets Microsoft Access. Read more beta.news.com.com: Worms biting harder into IM, P2P. Read more beta.news.com.com: Flaw found in Kaspersky antivirus. Read more informationweek.com: Researcher Claims Kaspersky Anti-Virus Has Security Flaw. Read more www.zdnet.com.au: Virus attacks fall. Read more news.zdnet.co.uk: Government creates network to fight hackers. Read more www.theregister.co.uk: Political hackers deface Novell SUSE sites. Read more fraudwar.blogspot.com: The Social Solution to Internet Fraud. Read more beta.news.com.com: PGP set to release encryption package. Read more beta.news.com.com: Google faces obstacles in S.F. Wi-Fi bid. Read more beta.news.com.com: Google, Sun plan partnership. Read more wired.com: 'UnGoogleables' Hide From Search. Read more www.sci-tech-today.com: Next-Gen Processor: Supercomputer on a Chip. Read more www.thebusinessonline.com: Microsoft invents a �one-play only� DVD to combat Hollywood piracy. Read more seattlepi.nwsource.com: Microsoft shows off new games. Read more news.zdnet.co.uk: EC to rival Google with massive digital library. Read more

. 03 October 2005 Guides, Papers, etc www.infosecwriters.com: A Closer Look at the Worm_Mimail.A. Read more   Tools: www.theregister.co.uk: Nokia 9300: our long term test. Read more   News www.techtree.com: New Adware Alters Search Results. Read more sclblog.com: Schwarzenegger Signs Anti-Phishing Law. Read more www.themercury.news.com.au: An angel on cyber space patrol. Read more www.theinquirer.net: Microsoft's PDF support conceals hidden agenda. Read more recordingindustryvspeople.blogspot.com: Oregon RIAA Victim Fights Back; Sues RIAA for Electronic Trespass, Violations of Computer Fraud & Abuse, Invasion of Privacy, RICO, Fraud. Read more

. 02 October 2005 Guides, Papers, etc astalavista.com: A Self-Learning Worm Using Importance Scanning. Read more itmanagement.earthweb.com: New Tools May Beat Rootkits. Read more itmanagement.earthweb.com: IceSword Author Speaks Out On 'Rootkits'. Read more windowssecrets.com: Antispyware apps vie for top spot. Read more astalavista.com: ON PRIVACY AND THE WEB. Read more   Tools: www.terra.net.lb: Sony's new AIBO robo-dog talks but needs petting. Read more   Vulnerabilities & Exploits www.debian.org: DSA-837-1 mozilla-firefox -- buffer overflow. Read more www.debian.org: DSA-836-1 cfengine2 -- insecure temporary files. Read more www.debian.org: DSA-835-1 cfengine -- insecure temporary files. Read more   News www.washingtonpost.com: New Bans Show China's Concerns About Tech. Read more management.silicon.com: VoIP wiretapping rules to be considered. Read more www.brownwoodbulletin.com: Police warn of Internet scam involving motel reservations. Read more news.bbc.co.uk: Net phoning starts to win friends. Read more www.duluthsuperior.com: Yahoo accused of raiding workers. Read more www.terra.net.lb: Give up web domination, US told. Read more arstechnica.com: Google offers free WiFi network for San Francisco. Read more www.bloomberg.com: Google May Be Bad for You; Battelle's `The Search' Explains Why. Read more www.terra.net.lb: China hands over American jailed for selling pirated DVDs. Read more

. 01 October 2005 Updated: Trojan News September. Read more   Guides, Papers, etc www.pcworld.com: 10-Step Security. Read more seattletimes.nwsource.com: Firewalls are still the best for protecting computer. Read more networks.ecse.rpi.edu: Early Detection of BGP Instabilities Resulting from Internet Worm Attacks. Read more   Tools: www.theregister.co.uk: Sony unveils Memory Stick Micro. Read more   Vulnerabilities & Exploits securitytracker.com: Macromedia Breeze Password Reset Feature May Disclose Passwords. Read more securitytracker.com: ASPEdit Discloses Administrative Password to Local Users. Read more www.debian.org: DSA-834-1 prozilla -- buffer overflow. Read more www.debian.org: DSA-833-1 mysql-dfsg-4.1 -- buffer overflow. Read more www.debian.org: DSA-832-1 gopher -- buffer overflows. Read more www.debian.org: DSA-831-1 mysql-dfsg -- buffer overflow. Read more   News news.com.com: Malicious code could trick ZoneAlarm firewall. Read more www.theregister.co.uk: NetSky-P tops moribund malware chart. Read more beta.news.com.com: Trojan rides in on unpatched Office flaw. Read more beta.news.com.com: New worm spoofs Google, Yahoo and MSN sites. Read more www.pcworld.idg.com.au: Destructive power of mobile viruses could rise fast. Read more catless.ncl.ac.uk: Router worms and International Infrastructure. Read more beta.news.com.com: Microsoft confirms next XP service pack. Read more www.newsfactor.com: Microsoft Presents IE 7 to Hackers. Read more www.pcworld.com: Threat Alert: Spear Phishing. Read more news.zdnet.co.uk: Visa backtracks over ID theft case. Read more www.computerworld.com: Hackers fail to break into Via's StrongBox $5,000 prize was at stake. Read more today.reuters.com: Microsoft plans cheaper Windows version for India. Read more beta.news.com.com: Mozilla plugs Thunderbird holes. Read more www.theregister.co.uk: RIAA files 757 more P2P lawsuits. Read more

Copyright� MegaSecurity.org