Home    News Archive    Translate Traducen

News December 2005

31 December 2005 Descriptions of 140 Trojans added to The Archive. Read more   Guides, Papers, etc isc.sans.org: WMF and Indexing (NEW). Read more www.informit.com: Planning a New Installation of Microsoft Small Business Server (SBS). Read more   Vulnerabilities & Exploits www.iptel.org: Replay Attack Vulnerability on Sonys Instant Video Everywhere Service. Read more securitytracker.com: TinyMCE Compressor Input Validation Bug Discloses File Contents and Permits Cross-Site Scripting Attacks. Read more securitytracker.com: phpDocumentor Include File Flaw Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: VMware ESX Server Management Interface Bug Lets Remote Users Execute Code in the Browser. Read more securitytracker.com: TkDiff Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more securitytracker.com: Hitachi Business Logic - Container Input Validation Holes Permit SQL Injection, Cross-Site Scripting, and HTTP Response Splitting Attacks. Read more securitytracker.com: OpenOffice WWW-Browser Button May Not Properly Enforce Hyperlink Security Restrictions. Read more   News www.internetnews.com: Windows 0-Day Exploit Helped by Open Source? Read more seattlepi.nwsource.com: Hackers seize on newfound flaw in Windows. Read more www.theregister.co.uk: Google AdSense Trojan prowls cyberspace. Read more www.scmagazine.com: Marriott customer data missing. Read more portal.telegraph.co.uk: Hacker faces 10 years' jail for virus attacks on Ebay. Read more www.redherring.com: Google Sued for $5B. Read more

. 30 December 2005 Guides, Papers, etc blogs.securiteam.com: WMF Spyware/Worm on the loose. Read more sunbeltblog.blogspot.com: A note on DEP and the WMF exploit. Read more www.eweek.com: Another WMF (Windows Major Foul-Up). Read more www.blackhat.com: Black Hat Federal and Europe Call for Papers. Read more www.infosecwriters.com: The Role of a Distributed Honeypot in a Post-Worm World. Read more www.infosecwriters.com: DNS Name Prediction With Google. Read more www.infosecwriters.com: The 9 Common Killers of Information Security Programs. Read more www.gray-world.net: Covert channels through the looking glass. Read more www.infosecwriters.com: Sticks and Stones�Read more www.infosecwriters.com: Receive-only UTP cables and Network Taps. Read more www.infosecwriters.com: LMCrack - Cracked in 60 seconds. Read more www.infosecwriters.com: An Introduction to Linux Kernel Backdoors. Read more www.infosecwriters.com: Exploitation of Buffer Overflow Vulnerabilities Under Windows XP. Read more www.infosecwriters.com: The Anatomy of Cross Site Scripting. Read more www.infosecwriters.com: Alert Verification. Determining the success of intrusion attempts. Read more www.infosecwriters.com: A lightweight virtual machine for running user-level operating systems. Read more   Vulnerabilities & Exploits www.securiteam.com Microsoft Internet Explorer Keyboard Shortcut Processing. Read more   News www.securitypipeline.com: Microsoft Promises To Patch Worsening Zero-Day Flaw. Read more www.securityfocus.com: Windows 0-day exploit found on Web. Read more www.securitypronews.com: XP Victim Of Zero-Day Exploit. Read more blogs.washingtonpost.com: Update on the Critical Unpatched Windows Flaw. Read more www.eweek.com: Analysts Fret as Adware Makers Leverage WMF Flaw. Read more www.websensesecuritylabs.com: Informational Alert: Zero-day profiteering. Read more www.wired.com: How Click Fraud Could Swallow the Internet. Read more money.cnn.com: Record bad year for tech security. Read more www.securityfocus.com: Data security moves front and center in 2005. Read more www.securityfocus.com: Settlement proposed in Sony BMG case. Read more www.theregister.co.uk: Spammers eschew porn for penis patches. Read more recordingindustryvspeople.blogspot.com: Programmer Challenges RIAA "Investigation" in Court Papers Filed Dec. 28th to Vacate "Ex Parte" Order. Read more www.redherring.com: Supercomputers Rebound. Read more

. 29 December 2005 Guides, Papers, etc www.microsoft.com: RATs: Remote Access Trojans and how to help avoid them. Read more sunbeltblog.blogspot.com: Workarounds for the WMF exploit. Read more   Vulnerabilities & Exploits www.frsirt.com: Microsoft Windows WMF Handling Remote Code Execution Vulnerability. Read more securitytracker.com: Microsoft Windows Unspecified WMF Rendering Bug Lets Remote Users Execute Arbitrary Code. Read more www.debian.or: DSA-928-1 dhis-tools-dns -- insecure temporary file. Read more www.debian.or: DSA-927-1 tkdiff -- insecure temporary file. Read more securitytracker.com: BZFlag Callsign Input Validation Error Lets Remote Users Deny Service. Read more securitytracker.com: Juniper NetScreen-Security Manager 'guiSrv' and 'devSrv' Bugs Let Remote Users Deny Service. Read more securitytracker.com: dBpowerAMP Music Converter Buffer Overflow in '.m3u' Playlist Files May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Ethereal IRC and GTP Dissectors Let Remote Users Deny Service. Read more securitytracker.com: Spb Kiosk Engine Discloses Administrative Password to Local Users. Read more securitytracker.com: IceWarp Web Mail Multiple Include File Bugs Let Remote Users Execute Arbitrary Code. Read more   News Microsoft Security Advisory (912840) www.microsoft.com: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution. Read more www.securityfocus.com: Windows 0-day exploit found on Web. Read more news.zdnet.co.uk: Exploit targets hole in Windows. Read more www.websensesecuritylabs.com: Malicious Website / Malicious Code: Zero-day IE .WMF Exploit. Read more www.websensesecuritylabs.com: Malicious Website / Malicious Code: Zero-day IE .WMF Exploit. Video www.msnbc.msn.com: NSA used banned data-tracking on Web site. Read more australianit.news.com.au: Phishers target NAB. Read more www.theregister.co.uk: Man admits to eBay DDoS attack. Read more www.detnews.com: Man pleads guilty to unleashing attack on eBay. Read more www.techworld.com: ABN Amro eyes electronic data transfers after tape loss incident. Read more www.redherring.com: Who Owns the Internet 2006? Read more www.betanews.com: Year in Review: Microsoft Takes Charge. Read more today.reuters.co.uk: Men want facts, women seek relations on Web - survey. Read more media.aoltimewarner.com: Hey, 'Donald Trump Wants You'!! (... & Other Lies Told by Spammers in 2005). Read more www.theregister.co.uk: Virus poses as MSN Messenger 8. Read more www.wired.com: Hackers Rebel Against Spy Cams. Read more today.reuters.co.uk: China says winning war on Internet pornography. Read more

. 28 December 2005 Guides, Papers, etc www.schneier.com: Is the NSA Reading Your E-Mail? Read more security.ithub.com: A Man and His Vision for the Browser. Read more   Vulnerabilities & Exploits securitytracker.com: Bugzilla 'syncshadowdb' Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more   News www.betanews.com: Year in Review: Microsoft Takes Charge. Read more www.securitypronews.com:Read more www.chron.com: When it comes to security, the news isn't always grim. Read more searchsecurity.techtarget.com: 2005's IT winners and losers. Read more news.bbc.co.uk: Criminals target viruses for cash. Read more news.zdnet.co.uk: Gartner warns of trap in Vista metadata. Read more today.reuters.co.uk: China to get tough on cellphone fraud, spam. Read more www.redherring.com: Spam Plagues Blogs. Read more www.vnunet.com: Time to come clean about hacking. Read more

. 27 December 2005 Guides, Papers, etc bcheck.scanit.be: The Browser Security Test. A Year Of Bugs. Read more software.newsforge.com: Browser developers meet, see eye to eye on security. Read more www.eweek.com: A Man and His Vision for the Browser. Read more www.theregister.co.uk: Rootkits, cybercrime and OneCare. Read more earchsecurity.techtarget.com: Spyware, application attacks to be biggest 2006 threats. Read more www.securityfocus.com: NSA spying broader than initially reported. Read more blogs.securiteam.com: Chronology of a 0-Day Excel Vulnerability. Read more pakavenue.com: How to Protect Against Computer Viruses. Read more castlecops.com: Make lots of money within 45 days. Read more www.dailysouthtown.com: How to keep eye on kids' computer. Read more www.eweek.com: IM Threats: The Dark Side of Innovation. Read more www.peacefire.org: How to disable your blocking software. Read more www.eweek.com: Latest Vista Beta Is Just a Pretty Face. Read more   Vulnerabilities & Exploits securitytracker.com: DEV web management system Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more securitytracker.com: PC NetLink 'slsadmin' Unsafe Temporary Files Lets Local Users Gain Elevated Privileges. Read more securitytracker.com: PC NetLink 'slsmgr' Unsafe Temporary Files Lets Local Users Gain Elevated Privileges. Read more securitytracker.com: MyBB Input Validation Errors in Multiple Scripts Let Remote Users Inject SQL Commands. Read more securitytracker.com: OracleAS Discussion Forum Portlet Discloses Contents of Files on the System. Read more securitytracker.com: OracleAS Discussion Forum Portlet Input Validation Holes Permit Cross-Site Scripting Attacks. Read more securitytracker.com: McAfee VirusScan Bug in 'naPrdMgr.exe' Lets Local Users Gain Elevated Privileges. Read more www.airscanner.com: Spb Kiosk Engine Administrator Password & Information Disclosure (Local). Read more   News www.betadot.com: NSA Create Spyware, Release to Targets. Read more www.consumerist.com: Sony Style Stores Still Selling Rootkit CDs. Read more www.2-spyware.com: Don�t take any gifts from Santa IM. Read more www.playfuls.com: Spanish Speaking Trojan Hits The Net. Read more www.pcworld.com: Security Trends: Follow the Money. Read more

. 24 December 2005 Guides, Papers, etc www.sockpuppet.org: Why I Love Vulnerability Analysis In 2005. Read more www.securitypipeline.com: Symantec, McAfee Problems May Lead To Sea Change In Antivirus Industry. Read more www.securitypark.co.uk: Protecting against undefined exploits and security threats. Read more www.japantimes.co.jp: Net transactors warned to beware of spyware. Read more www.eweek.com: Tis The Season For Security Software. Read more www.it-observer.com: Demystifying Security Enhanced (SE) Linux. Read more news.com.com: Boy joins a sordid online world through his Webcam. Read more   Vulnerabilities & Exploits securitytracker.com: httprint Input Validation Error in 'Server' Field Lets Remote Users Injection Scripting Code or Deny Service. Read more securitytracker.com: Linux Kernel Can Be Crashed By Local Users Due to Excessive Socket Buffer Memory Consumption. Read more securitytracker.com: FTGate Input Validation Holes Permit Cross-Site Scripting Attacks. Read more www.debian.org: DSA-926-2 ketm -- buffer overflow. Read more www.debian.org: DSA-925-1 phpbb2 -- several vulnerabilities. Read more   News www.informationweek.com: InformationWeek Exclusive: Justice Department Reveals Social Security Numbers. Read more www.ciol.com: 2005: The year of the worm. Read more www.pcworld.com: Spam Wars Still Rage, Critics Say. Read more www.informationweek.com: Opera Denies Microsoft Buyout Rumors. Read more www.digitimes.com: Taiwan companies complain of difficulties getting Skype licenses Read more

. 23 December 2005 Guides, Papers, etc mix06.com: MIX06, a A 72-hour conversation between developers, designers and business professionals to explore high-fidelity commerce, content, media, services and security. Read more www.techworld.com: The secret life of a rootkit. Read more msdn.microsoft.com: Browsing the Web and Reading E-mail Safely as an Administrator. Read more blogs.securiteam.com: Payback for Ciscogate - new trend? Read more www.windowsecurity.com: Remote Authentication: Different Types and Uses. Read more news.bbc.co.uk: Give Mac Explorer to the people. Read more www.sanrasoft.com: 'Rudra,' a breakthrough anti-virus technology. Read more abcnews.go.com: Spam Slayer: FTC's CAN-SPAM Report Card. Read more www.computerworld.com: Encryption: A nice idea that few want to implement? Read more www.eweek.com: A Better Windows Permission Model. Read more blogs.securiteam.com: Defining �Authorized�. Read more firewallmovie.warnerbros.com: Firewall: The Movie. Read & Watch   Vulnerabilities & Exploits www.kb.cert.org: VMware NAT Service vulnerable to buffer overflow via FTP PORT/EPRT commands. Read more securitytracker.com: Apple QuickTime Buffer Overflow in Playing '.mov' Files Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Apple iTunes Buffer Overflow in Playing '.mov' Files Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: PhpGedView Include File Bug in 'help_text_vars.php' Lets Remote Users Execute Arbitrary Commands. Read more securitytracker.com: Portfolio NetPublish Input Validation Hole Lets Remote Users Traverse the Directory. Read more securitytracker.com: Interaction SIP Proxy Buffer Overflow in SIPParser() Lets Remote Users Deny Service. Read more securitytracker.com: Eudora WorldMail Server Buffer Overflow in Processing IMAP Commands Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: McAfee SecurityCenter 'MCINSCTL.DLL' Lets Remote Users Create or Overwrite Arbitrary Files on the Target System. Read more securitytracker.com: udev Insecure File Permissions in '/dev/input' May Let Local Users Obtain Sensitive Information. Read more securitytracker.com: Pegasus Mail Buffer Overflows in Processing POP3 Mail and Displaying Message Headers Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Symantec Anti Virus Library Buffer Overflows in Processing RAR Format Sub-Block Header Length Values Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Fetchmail Can Be Crashed By Remote Users By Sending a Headerless Message. Read more   News www.theregister.co.uk: Critical Symantec bug hits 40 products. Read more www.betanews.com: Security Vulnerability Found in VMware. Read more www.techworld.com: ABN Amro loses two million customers' details. Read more www.newkerala.com: 'Sanrasoft' unveils 'Rudra' . Read more www.betanews.com: EU Threatens Microsoft with Daily Fines. Read more www.redherring.com: Symantec, McAfee Battle Flaws. Read more www.techworld.com: Anti-porn tool now in Mozilla flavour. Read more www.tmcnet.com: The worm returns. Read more www.eweek.com: Botnet Uses BitTorrent to Push Movie Files. Read more www.theinquirer.net: Guidance Software hacked claim - alerts Secret Service. Read more www.theregister.co.uk: Finnish filesharers to be pilloried in public. Read more

. 22 December 2005 Guides, Papers, etc conference.eicar.org: 15th EICAR Annual Conference. Read more blogs.washingtonpost.com: Ranking Response Times for Anti-Virus Programs. Read more blogs.securiteam.com: Payback for Ciscogate - new trend? Read more blogs.securiteam.com: Games and the Dark Side of Security. Read more www.stuff.co.nz: Tunnel rat, global hacker, or white supremacist? Read more www.infectionvectors.com: Brick by brick: Platforms, Viruses, Doorstops. Read more media.libsyn.com: Inside SBS Episode #13 - Spam Prevention on SBS 2003. Listen www.oag.state.tx.us: Sony RootKit. Watch Video   Tools: www.amustsoft.com: AMUST eCondom� for Internet Explorer. Read more www-128.ibm.com: Linux screensaver for Windows. Read more   Vulnerabilities & Exploits www.idefense.com: Macromedia JRun 4 Web Server URL Parsing Buffer Overflow Vulnerability. Read more securitytracker.com: Cisco IOS EIGRP Bugs Let Remote Users Deny Service or Obtain Potentially Sensitive Information. Read more securitytracker.com: HP Software Distributor Unspecified Bug Lets Remote Users Access the System. Read more securitytracker.com: Plogger '/admin/plog-admin-functions.php' Include File Bug Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: ELOG elogd Can Be Crashed By Remote Users. Read more www.securiteam.com: Google.com UTF-7 XSS Vulnerabilities. Read more www.debian.org: DSA-924-1 nbd -- buffer overflow. Read more   News news.zdnet.co.uk: Symantec security products hit by high-risk flaw. Read more news.zdnet.co.uk: Yahoo security weakness revealed. Read more news.com.com: New spyware claim against Sony BMG. Read more www.oag.state.tx.us: Attorney General Abbott Slaps Sony With New Spyware Violation. Read more www.technewsworld.com: IM Worm Dresses Up Like Santa. Read more www.channelregister.co.uk: Hackers download pirate movies onto compromised PCs. Read more www.informationweek.com: Indian Firm Claims Its Anti-Virus Solution Stops Threats. Read more www.theregister.co.uk: You're infected so pay us to get infested. Read more news.zdnet.com: Google plugs 'obscure' phishing holes. Read more

. 21 December 2005 Guides, Papers, etc www.virusbtn.com: VB2006 call for papers. Read more www.emailbattles.com: Rootkit Guru: AntiVirus Makes Me Do It. Read more www.acm.uiuc.edu: Introduction to Reverse Engineering Software. Read more www.hackingciscoexposed.com: Hacking Exposed Cisco Networks. Sample Chapter (pdf). Read more blogs.zdnet.com: Top 10 tricks causing spyware epidemic. Read more mirror.bitform.net: The Risks of Metadata and Hidden Information. Read more   Vulnerabilities & Exploits www.rem0te.com: Symantec Antivirus Library Rem�te Heap Overflows Security Advisory. Read more www.idefense.com: McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite Vulnerability. Read more www.idefense.com: Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability. Read more securitytracker.com: MailEnable Buffer Overflow in IMAP EXAMINE Command Lets Remote Authenticated Users Execute Arbitrary Code. Read more securitytracker.com: HP WBEM Services Unspecified Flaw Lets Remote Users Deny Service. Read more securitytracker.com: Microsoft IIS Lets Remote Users Deny Service With Four Malformed HTTP GET Requests. Read more   News www.techweb.com: Symantec Anti-virus Software Open To Attack. Read more software.silicon.com: Mobile viruses to bite next year? Read more www.securityfocus.com: Sober virus scares up child-porn confession. Read more www.channelregister.co.uk: Computer forensics firm Guidance hacked. Read more www.playfuls.com: Santa IM Worm Is Coming To Town With Rootkits. Read more www.redherring.com: How Google-AOL Alters Search. Read more searchsecurity.techtarget.com: E-greetings, screensavers bring more tears than cheers. Read more

. 20 December 2005 Guides, Papers, etc www.gi-ev.de: SIG SIDAR Conference on Detection of Intrusions and Malware & Vulnerability Assessment. Read more pluralsight.com: Hall Of Shame. This wiki page is dedicated to the thousands of applications that break when run as non-admin. Read more ddanchev.blogspot.com: Cyberterrorism � don�t stereotype and it�s there! Read more p2pnet.net: The new horror: smart viruses. Read more nwc.networkingpipeline.com: The Worst Network Security Horror Stories. Read more www.securenet.de: SESSION RIDING. A Widespread Vulnerability in Today's Web Applications. Read more www.blacklisted411.net: BLACKLISTED 411, Edition 1. Read more   Vulnerabilities & Exploits blogs.securiteam.com: Bypassing Gmail Executable Blocking. Read more   News www.washingtonpost.com: Hackers Break Into Computer-Security Firm's Customer Database. Read more www.theregister.co.uk: UK shelters from smut Trojan blitz. Read more www.theinquirer.net: Christmas worm unleashed. Read more www.securityfocus.com: Selling people information about themselves. Read more www.websensesecuritylabs.com: Informational Alert: Spyware Lures to Install Potentially Unwanted Software. Read more www.theregister.co.uk: Chile and Peru fight merciless hacker war. Read more www.thsv.org: Vietnam Pressured To Release Jailed Internet Users. Read more blogs.washingtonpost.com: Database Hack Exposes Police Financial Data. Read more www.eweek.com: MS Research: Typo-Squatters Are Gaming Google. Read more www.theregister.co.uk: Update glitch spins out IE7 beta testers. Read more news.bbc.co.uk: Hi-tech firms censured over China. Read more www.theregister.co.uk: Gates joins PC as 'person' of year. Read more news.bbc.co.uk: End nears for Mac version of IE. Read more www.redherring.com: Microsoft Updates Vista. Read more www.redherring.com: 3 Charged With Modifying Xbox. Read more www.bbvforums.org: 12-13-05: Devastating hack proven - L...Read more

. 19 December 2005 Guides, Papers, etc www.benedelman.org: Deciding Who To Trust. Read more podcasts.theworld.org: Today's podcast highlights new threats to your computer and its critical systems. We join a press conference given by the SANS Institute, which monitors all manner of cyberthreats across the globe. Find out how hackers are changing their strategies, and what it means, not just for the individual computer user, but also for the military and for the Department of Homeland Security. Listen www.technologyreview.com: The Internet Is Broken. The Net's basic flaws cost firms billions, impede innovation, and threaten national security. It's time for a clean-slate approach, says MIT's David D. Clark. Read more nwc.securitypipeline.com: Survivor's Guide to 2006: Security. Read more csrc.nist.gov: Wireless Network Security. 802.11, Bluetooth and Handheld Devices. Read more www.wormblog.com: Dasher Analysis and Thoughts. Read more edition.cnn.com: Hacking the hackers. Watch www.informit.com: From a Distance: Using RealVNC to Control Your PC from Far Away (for Free). Read more   Vulnerabilities & Exploits securitytracker.com: Cisco Clean Access Lack of Authentication in Secure Smart Manager Lets Remote Users Deny Service. Read more securitytracker.com: Mercury Mail Transport System Buffer Overflow in Mailbox Name Service Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Citrix Program Neighborhood Client Buffer Overflow in Processing Application Names May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Citrix Program Neighborhood Client Lets Local Users Obtain Cached Passwords. Read more www.debian.org: DSA-923-1 dropbear -- buffer overflow. Read more   News news.bbc.co.uk: Holes found in PC virus defences. Read more observer.guardian.co.uk: How Sony became an ugly sister. Read more news.bbc.co.uk: Microsoft's vision of the future. Read more searchsecurity.techtarget.com: Trio of trouble: Malcode targets Windows, IM users. Read more www.internetnews.com: W3C to Workshop Web Security. Read more www.usatoday.com: Meth addicts' other habit: Online theft. Read more

. 17 December 2005 Guides, Papers, etc www.microsoft.com: Security Management - December 2005. Read more www.microsoft.com: ISA Server Port Scan Alerts. Read more techrepublic.com.com: Boost IE security by disabling Active Scripting and ActiveX controls. Read more www.techweb.com: Regular Patch Schedules "Two-Edged Sword". Read more www.eweek.com: Don't Hold Out Hopes For Anti-Rootkit Chips. Read more www.infosecwriters.com: Low Cost Technique for Intrusion Detection. Read more cr.yp.to: Cache-timing attacks on AES. Read more www.daemonology.net: CACHE MISSING FOR FUN AND PROFIT. Read more   Vulnerabilities & Exploits securitytracker.com: ColdFusion MX Sandbox Lets Local Users Bypass CreateObject Restrictions and Obtain Authentication Information. Read more securitytracker.com: JRun Server Discloses Source Code to Remote Users and Lets Remote Users Deny Service. Read more securitytracker.com: ColdFusion MX Bugs Let Remote Users Bypass Sandbox Restrictions and Attach and E-mail Arbitrary Files. Read more securitytracker.com: SSH Tectia Server Host-Based Authentication Error May Let Certain Remote Users Access the Target System. Read more securitytracker.com: IBM AIX Buffer Overflow in slocal Lets Local Users Gain Root Privileges. Read more securitytracker.com: IBM AIX Buffer Overflow in muxatmd Lets Local Users Gain Root Privileges. Read more securitytracker.com: OpenCms Input Validation Error in Login Page in the 'ocUname' Parameter Permits Cross-Site Scripting Attacks. Read more securitytracker.com: Limbo CMS Input Validation Holes Let Remote Users Include Local Files, Execute SQL Commands, and Execute Arbitrary Code. Read more securitytracker.com: Edgewall Trac Input Validation Bug Permits Cross-Site Scripting Attacks. Read more securitytracker.com: Watchfire AppScan Buffer Overflow in Processing HTTP 401 Response Messages Lets Remote Users Execute Arbitrary Code. Read more   News www.emailbattles.com: Rootkit Guru: The Evil in Sony BMG. Read more www.websensesecuritylabs.com: Phishing Alert: Internal Revenue Service. Read more news.zdnet.com: Microsoft patch jams up IE. Read more Microsoft sues resellers over MAPs 'abuse'. Read more www.networkworld.com: Trusted chip assures endpoint integrity. Read more www.clickz.com: The Deadly Duo: Spam and Viruses, November 2005. Read more www.theage.com.au: What's in a (malware) name? Read more www.vnunet.com: Christmas worms target Microsoft. Read more

. 16 December 2005 Guides, Papers, etc blogs.securiteam.com: The Evil of Silent Patches: Microsoft�s Three-Year-Old Hole. Read more www.schneier.com: Crypto-Gram Newsletter. December 15, 2005. Read more astalavista.com: The SASSER Event: History and Implications. Read more astalavista.com: Indirect Detection of Mass Mailing Worm-Infected PC terminals for Learners. Read more www.securityfocus.com: Demystifying Denial-Of-Service attacks, part one. Read more www.infosecwriters.com: Footprinting: What is it and How Do You Erase Them. Read more www.windowsecurity.com: Access Controls: What is it and how can it be undermined? Read more files.malwareblog.com: Symantec Theme Song. Listen   Tools: metasploit.com: Metasploit 3.0 released. Read more   Vulnerabilities & Exploits securitytracker.com: HP-UX TCP/IP Stack May Consume Excessive System Resources When Under IP Fragment Attacks. Read more securitytracker.com: IBM WebSphere Input Validation Flaws in Certain Sample Scripts Permits Cross-Site Scripting Attacks. Read more securitytracker.com: ZixForum Input Validation Hole in 'H_ID' Parameter Lets Remote Users Inject SQL Commands. Read more securitytracker.com: Trend Micro ServerProtect Buffer Overflows and Other Bugs Permit Remote Code Execution, Denial of Service, and File Disclosure. Read more securitytracker.com: Trend Micro PC-cillin Unsafe File Permissions Let Local Users Obtain Elevated Privileges. Read more www.cybsec.com: Watchfire AppScan QA Remote Code Execution. Read more   News www.theregister.co.uk: Dasher worm targets October Windows vuln. Read more www.esecurityplanet.com: Security Researcher: Rootkits Common for Spyware. Read more news.bbc.co.uk: Hackers fuel Peru-Chile rivalry. Read more searchsecurity.techtarget.com: Roundup: 2005's 'curious malicious code'. Read more www.eweek.com: Anti-spyware Battles Rootkits with Rootkit Tactics. Read more news.com.com: Microsoft security zaps laptop tracer. Read more www.pcworld.com: Security Breach Exposes Credit Cards. Read more www.scmagazine.com: Study: employees leak secrets. Read more www.washingtonpost.com: Google Trying to Make Music Searches Smoother. Read more www.vnunet.com: Dutch hacking group cracks Xbox 360. Read more

. 15 December 2005 Guides, Papers, etc www.twitchguru.com: Confessions of an Honest Cracker. Read more users.ece.gatech.edu: Spatial-Temporal Modeling of Malware Propagation in Networks. Read more www.medasys.com: The IP Smart Spoofing. Read more www.msnbc.msn.com: Let�s see some ID, please. The end of anonymity on the Internet? Read more www.eweek.com: Where Do You Put Your Security Dollars? Read more   Tools: www.securityfocus.com: Free, full-featured, still available -- choose any two. Read more   Vulnerabilities & Exploits www.idefense.com: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability. Read more www.idefense.com: Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure. Read more www.idefense.com: Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability. Read more www.idefense.com: Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow. Read more www.debian.org: DSA-922-1 kernel-source-2.6.8 -- several vulnerabilities. Read more www.debian.org: DSA-921-1 kernel-source-2.4.27 -- several vulnerabilities. Read more www.debian.org: DSA-920-1 ethereal -- buffer overflow. Read more securitytracker.com: Apple QuickTime Unspecified Heap Overflow May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: BusinessObjects Web Intelligence Lets Remote Users Lock Out Arbitrary Accounts. Read more securitytracker.com: toendaCMS Input Validation Hole in 'id' Parameter Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more securitytracker.com: Opera Browser May Let Remote Users Obfuscate the Download Dialog Box. Read more securitytracker.com: PHP Support Tickets Input Validation Holes Let Remote Users Inject SQL Commands and Bypass Authentication. Read more securitytracker.com: Envolution Input Validation Holes in News Module Permit SQL Injection and Cross-Site Scripting Attacks. Read more securitytracker.com: Microsoft Internet Explorer Bug in Using HTTPS Proxies May Disclose Web URLs to Remote Users. Read more securitytracker.com: Microsoft Windows Internet Explorer May Let Remote Users Obfuscate the Download Dialog Box. Read more securitytracker.com: Microsoft Internet Explorer Bug in Instantiating COM Objects May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Microsoft Windows 2000 Kernel APC Queue Bug Lets Local Users Gain Elevated Privileges. Read more   News today.reuters.co.uk: EU parliament adopts anti-terrorism data rules. Read more www.tmcnet.com: Experts Gather in Oman for Global Forum on Internet Security. Read more www.theregister.co.uk: Cybercrims target Xmas shoppers. Read more australianit.news.com.au: Hacking 'illegal', says China. Read more www.websensesecuritylabs.com: Malicious Website / Malicious Code: Chinese Government website hosting Trojan Keylogger. Read more www.theregister.co.uk: MS releases IE �berpatch. Read more news.zdnet.com: Microsoft security zaps laptop tracer. Read more www.theregister.co.uk: Dutch piracy link site returns. Read more www.communications-news.com: SECURITY PROFESSIONALS WELL-PAID AND IN INCREASING DEMAND. Read more abcnews.go.com: New Virus Marks New Strategy. Read more www.usdoj.gov: Plano Man Convicted of Computer Sabotage. Read more www.securityfocus.com: Diebold troubled by e-voting security. Read more www.theregister.co.uk: UK shopkeepers beating online fraud. Read more news.bbc.co.uk: Xbox 360 copy protection cracks. Read more

. 14 December 2005 Guides, Papers, etc www.emailbattles.com: Rootkit Guru: Win 9x/ME Are Hopeless. Read more redtape.msnbc.com: A PC CAN BE A RISKY GIFT. Read more www.windowsecurity.com: Will upgrading to 64 Bit Windows make you More Secure? Read more www.informationweek.com: Don't Overlook Internal E-Mail Monitoring. Read more www.eeye.com: Generic Anti-Exploitation Technology for Windows. Read more www.thetechzone.com: Cracking Passwords. Read more   Tools: www.securityfocus.com: Nessus 3 released, remains free. Read more   Vulnerabilities & Exploits secunia.com: Internet Explorer Suppressed "Download Dialog" Vulnerability. Read more securitytracker.com: Flash Media Server Lets Remote Users Deny Service. Read more securitytracker.com: phpCOIN Include File Bug in 'coin_includes/db.php' Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Apache mod_imap Input Validation Flaw in Referer Field Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more securitytracker.com: Imoel CMS Discloses SQL Password to Remote Users. Read more securitytracker.com: SCO UnixWare uidadmin '-S' Buffer Overflow Lets Local Users Gain Root Privileges. Read more   News Microsoft Security Bulletin MS05-054 Cumulative Security Update for Internet Explorer (905915). Read more blogs.washingtonpost.com: Microsoft Patches Critical Browser Flaw. IE patch also removes a component left behind by a patch from Sony BMG designed to remove some of the more dangerous features of anti-piracy software installed by Sony BMG music CDs. Read more www.securityfocus.com: Microsoft fixes five flaws. Read more www.it-observer.com: ISF Report Warns of New VoIP Security Threats. Read more www.scmagazine.com: End of 2005 sees virus count rise with �alarming force�. Read more www.techworld.com: Found a security hole? It could be worth $2,000. Read more www.theregister.co.uk: Sony BMG shortlisted for 'internet villain' gong. Read more www.rollingstone.com: Copy-Protection Troubles Grow. Read more www.techworld.com: eEye enters anti-virus market. Read more www.theregister.co.uk: Hackers topple Kremlin-sponsored broadcaster. Read more www.computerworld.com: Update: Security breach at Sam's Club exposes credit card data. Read more www.tmcnet.com: MS Ignores Plea for Window 98 Security Patches. Read more www.theregister.co.uk: ID fraudsters target job centre staff. Read more www.theregister.co.uk: MSN and MCI do VoIP. Read more www.theregister.co.uk: Virtual war is worrying. Read more

. 13 December 2005 Guides, Papers, etc www.sysinternals.com: Circumventing Group Policy as a Limited User. Read more www.informit.com: Who owns an exploit? Read more today.reuters.com: Fears over identity theft overblown: US study. Read more www.mcpressonline.com: Building a Better Virus Trap. Read more www.securityfocus.com: Users inundated with pop-ups. Read more www.wired.com: The Firefox Hacks You Must Have. Read more www.rootkit.com: The Tamper Proof Container, Rootkits, and the Sony Rant. Read more cnscenter.future.co.kr: Computer Parasitology. Read more   Vulnerabilities & Exploits securitytracker.com: Nortel SSL VPN Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting and Command Execution Attacks. Read more securitytracker.com: Apani Networks EpiForce IPSec IKE Processing Lets Remote Users Deny Service. Read more securitytracker.com: FlatNuke 'read' Module Discloses Authentication Credentials to Remote Users. Read more securitytracker.com: Torrential 'getdox.php' Input Validation Bugs Disclose Files on the Target System and Permit Cross-Site Scripting Attacks. Read more www.idefense.com: SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability. Read more www.debian.org: DSA-919-1 curl -- buffer overflow. Read more   News www.boingboing.net: Privacy implications of Microsoft's Windows Live Local. Read more www.2-spyware.com: Beware of malicious e-greetings and fraudulent seasonal e-mails. Read more www.smh.com.au: Hacker knocks TV channel off air. Read more www.securityfocus.com: New SSL certificates coming. Read more news.bbc.co.uk: Sony BMG repents over CD debacle. Read more news.bbc.co.uk: Malicious worm that talks back. Read more www.securityfocus.com: SANS looks to security by degrees. Read more news.bbc.co.uk: Online anti-piracy service closes. Read more www.theregister.co.uk: Small security bug in Firefox, users unscathed. Read more www.technewsworld.com: 'Tis the Season for Holiday Spamming. Read more www.betanews.com: Woman Loses Appeal Against RIAA. Read more www.betanews.com: Music Industry to Attack Lyric, Tab Sites. Read more

. 12 December 2005 Guides, Papers, etc www.infectionvectors.com: Agobot and the .Kit.chen Sink. Read more astalavista.com: Bots and Botnets : Risks, Issues and Prevention. Read more blogs.securiteam.com: On �Responsible Disclosure�: Stripping the Veil From Corporate Censorship. Read more astalavista.com: Anti-Malware Tools: Intrusion Detection Systems. Read more www.eweek.com: Post-New Year's Sobriety, Guaranteed. Read more www.yubanet.com: Clarkson University Engineer Outwits High-Tech Fingerprint Fraud. Read more www-128.ibm.com: Mastering Ajax, Part 1: Introduction to Ajax. Read more   Vulnerabilities & Exploits securitytracker.com: Ethereal Buffer Overflow in OSPF Dissector dissect_ospf_v3_address_prefix() Function May Permit Remote Code Execution. Read more securitytracker.com: HP Secure Web Server for Tru64 UNIX XMLRPC Bug Lets Remote Users Execute Arbitrary PHP Code. Read more securitytracker.com: Website Baker Username Input Validation Error Lets Remote Users Inject SQL Commands. Read more securitytracker.com: DRZES HMS Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more   News www.eweek.com: Vista Stakes Its Future on Security. Read more english.yna.co.kr: S. Korea unveils steps against hacking of online game items. Read more www.vnunet.com: Zero day Excel hacker takes on ebay. Read more www.newsfactor.com: New Virus Spreads by Chatting with You. Read more fraudwar.blogspot.com: Should We Consider Nazis Potential Terrorists? Read more msnbc.msn.com: Users confuse search results and ads. Read more www.technewsworld.com: Attention, Online Shoppers: Be Wary. Read more www.networkworld.com: Airport passcodes leaked from virus-infected PC. Read more www.betanews.com: P2P Flooder Overpeer Ceases Operation. Read more www.eweek.com: Flash Memory: Today the iPod, Tomorrow the World? Read more

. 10 December 2005 Guides, Papers, etc www.zdnet.com.au: To catch a spy: Anti-spyware tools reviewed. Read more www.securitypipeline.com: Anti-Virus Vendors Struggle To Keep Up With Attacks. Read more reviews.cnet.com: Your antivirus software has B.O. Read more www.vnunet.com: Lock down your USB ports. Read more   Vulnerabilities & Exploits securitytracker.com: Microsoft Excel Unspecified Stack Overflow May Let Remote Users Cause Arbitrary Code to Be Executed. Read more securitytracker.com: PerlCal Input Validation Error in 'p0' Parameter Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more securitytracker.com: Sun Solaris Sun Update Connection Services May Disclose Web Proxy Password to Local Users. Read more securitytracker.com: [Vendor Disputes Claim] Mozilla Firefox Buffer Overflow in Loading 'history.dat' Lets Remote Users Deny Service. Read more   News www.securityfocus.com: Sober reality set to strike again. Read more www.theregister.co.uk: Microsoft tackles pirate software firm. Read more www.securityfocus.com: eBay pulls vulnerability auction. Read more www.theregister.co.uk: Click fraud suit changes hand. Read more techrepublic.com.com: Is Sony's rootkit just the tip of the iceberg? Read more www.theregister.co.uk: SonyBMG backtracks on buggy bug fix. Read more www.freedom-to-tinker.com: CD Copy Protection: The Road to Spyware. Read more news.bbc.co.uk: Sony BMG repents over CD debacle. Read more software.silicon.com: Hackers steal details of 2,000 charity donors. Read more www.internetnews.com: Do Hackers Look Before They Leap? Read more www.techweb.com: eBay Yanks Listing For Excel Bug. Read more www.theinquirer.net: Symantec to sell Norton as a service. Read more www.theregister.co.uk: Mobile WiMax spec becomes a standard. Read more msnbc.msn.com: Think your PC is safe online? Think again. Read more news.bbc.co.uk: The Big Poker Gamble. Read more

. 09 December 2005 Guides, Papers, etc www.securitypipeline.com: Rootkits Making More Spyware, Adware Stick. Read more www.f-secure.com: How Sober activates. Read more www.csoonline.com: How to Prevent and Detect Fraud. Read more www.eweek.com: By Larry Seltzer. Post-New Year's Sobriety, Guaranteed. Read more www.windowsecurity.com: Biometrics and You. Read more www-128.ibm.com: The future of HTML, Part 1: WHATWG. Read more www.net-security.org: The Unspoken Taboo � The Never Expiring Password. Read more   Tools: fileforum.betanews.com: RootkitRevealer 1.60. Read more www.insecure.org: Diet Nmap v3.95 Released. Read more   Vulnerabilities & Exploits www.eff.org: Media Max Access Control Vulnerability. Read more www.debian.org: DSA-918-1 osh -- programming error. Read more www.debian.org: DSA-917-1 courier -- programming error. Read more securitytracker.com: Sony Music CD (SunnComm Media Max) Unsafe Permissions Let Local Users Gain Elevated Privileges. Read more securitytracker.com: Check Point VPN-1 SecureClient Lets Local Users Bypass Security Policy. Read more securitytracker.com: Dell TrueMobile 2300 Wireless Router Lets Remote Users Reset the Authentication Credentials. Read more securitytracker.com: KDE KOffice kpdf Buffer Overflows in Processing DCT and JPX Streams May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: SimpleBBS Input Validation Hole in 'name' Parameter Lets Remote Users Execute Arbitrary Commands. Read more securitytracker.com: Sugar Suite Include File Bug Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: IBM AIX umountall Absolute Path Bug Has Unspecified Impact. Read more securitytracker.com: HP-UX IPSec ESP Bug May Grant Access to Remote Users. Read more securitytracker.com: HP-UX IPSec Bug May Grant Access to Remote Users. Read more   News www.scmagazine.com: New attacks target small U.S. banks. Read more www.thisismoney.co.uk: The ignorant online fraud. Read more www.securityfocus.com: Significant fraction of online domains falsely registered. Read more software.silicon.com: Microsoft preps two-for-one security special. Read more www.pcworld.com: Intel Working on Rootkit Detection Techniques. Read more zdnet.com.au: Sober code cracked. Read more software.silicon.com: More flaws: Sony's latest patch comes unstuck. Read more news.bbc.co.uk: Anti-piracy CD problems vex Sony. Read more searchsecurity.techtarget.com: Fighting adware with� adware. Read more www.securityfocus.com: Consumers improving security, but gaps remain. Read more www.technewsworld.com: AOL Reports Imperiled User Security. Read more www.theregister.co.uk: Sober worm plans 5 January attack. Read more www.theregister.co.uk: Yahoo! targets! Skype! with! improved! VoIP! offer! Read more software.silicon.com: DoS attack risk for Firefox 1.5 users. Read more www.pcmag.com: Target: Firefox? Read more today.reuters.com: Study says 1 in 4 targets of e-mail phishing scams. Read more www.macnn.com: GoDaddy services unavailable to Safari users. Read more

. 08 December 2005 Guides, Papers, etc www.f-secure.com: F-Secure's Data Security Summary for 2005 is available in PDF. Part 1 Part 2 www.staysafeonline.org: One in Four Computer Users Hit by Phishing Attempts Each Month, According to Major In-Home Computer Safety Study. Read more www.eweek.com: Where are Rootkits Coming From? Read more www.security-assessment.com: Exploiting Freelist[0] On Windows XP Service Pack 2. Read more www.security-assessment.com: Bugger The Debugger - Pre Interaction Debugger Code Execution. Read more www.seomoz.org: Beginner's Guide to Search Engine Optimization. Read more   Vulnerabilities & Exploits securitytracker.com: HP-UX IPSec ESP Bug May Grant Access to Remote Users. Read more securitytracker.com: HP-UX IPSec Bug May Grant Access to Remote Users. Read more securitytracker.com: Ipswitch IMail Server IMAP LIST Command Bug Lets Remote Authenticated Users Deny Service. Read more securitytracker.com: Ipswitch Collaboration Suite SMTP Command Format String Bug Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: ASP Resources Forum Input Validation Flaws in 'forum.asp', 'register.asp', and 'search.asp' Permit SQL Injection Attacks. Read more securitytracker.com: Horde Internet Messaging Program (IMP) Lets Remote Users Conduct Cross-Site Scripting Attacks Using Special Character Encoding. Read more securitytracker.com: MultiVOIP Buffer Overflow in Processing INVITE Packet May Let Remote Users Execute Arbitrary Code. Read more www.idefense.com: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability. Read more www.debian.org: DSA-916-1 inkscape -- buffer overflow. Read more   News www.idefense.com: iDefense Exposes Sober Worm Variant Timed with Nazi Party�s 87th Anniversary. Read more www.varbusiness.com: Symantec Warns of '06 Security Threat. Read more www.freedom-to-tinker.com: MediaMax Bug Found; Patch Issued; Patch Suffers from Same Bug. Read more news.zdnet.co.uk: EFF lifts curtain on new act of Sony DRM farce. Read more www.wired.com: Music Man Cracks DRM Schemes. Read more www.emailbattles.com: Rootkitters Lay in Wait for Vista 2006. Read more www.techworld.com: Security experts criticise malware list. Read more www.securityfocus.com: Trusting software. Read more today.reuters.co.uk: Yahoo undercuts Skype on voice call rates. Read more www.betanews.com: MS to Lock Down Security Zones in IE7. Read more www.securityfocus.com: Consumers improving security, but gaps remain. Read more www.securityfocus.com: Simple DoS for Firefox 1.5. Read more www.theregister.co.uk: Microsoft vows to fight South Korean antitrust ruling. Read more

. 07 December 2005 Guides, Papers, etc www.gi-ev.de: International Conference on IT-Incident Management & IT-Forensics. Read more www.theregister.co.uk: Anatomy of a failed virus attack. Read more monitor.auckland.ac.nz: New Mail System Detection Statistics. Read more astalavista.com: Botnets as a Vehicle for Online Crime. Read more fettig.net: How to make XmlHttpRequest calls to another server in your domain. Read more www.isecpartners.com: Cross�Site�Reference�Forgery�An�introduction�to�a�common�web�application�weakness. Read more� ha.ckers.org: XSS cheat sheet Esp: for filter evasion. Read more www.windowsecurity.com: Protect your network from rogue users. Read more   Vulnerabilities & Exploits www.eff.org: SunnComm Makes Security Update Available To Address Recently Discovered Vulnerability On Its MediaMax Version 5 Content Protection Software, Which Is Included On Certain SONY BMG CDs. Read more www.hacker.co.il: Google Desktop Exposed: Exploiting an Internet Explorer Vulnerability to Phish User Information. Read more securitytracker.com: Sun Java System Messaging Server May Disclose Top-Level Administrator Password to Remote Users. Read more securitytracker.com: Sun Java System Application Server Reverse SSL Proxy Permits Man-in-the-Middle Attacks. Read more securitytracker.com: Total Commander Weak Encryption Algorithm Lets Local Users Obtain FTP Passwords. Read more securitytracker.com: Blog System Input Validation Holes Permit SQL Injection. Read more securitytracker.com: Xpdf Buffer Overflows in Processing DCT and JPX Streams May Let Remote Users Execute Arbitrary Code. Read more   News www.eweek.com: Microsoft: Stealth Rootkits Are Bombarding XP SP2 Boxes. Read more www.securityfocus.com: MSBlast infected more than 25 million. Read more www.securityfocus.com: Bots doing the mambo. Read more news.com.com: New IM worm chats with intended victims. Read more wired-vig.wired.com: Firm Allegedly Hiding Cisco Bugs. Read more www.eff.org: Another Sony-BMG Security Vulnerability Discovered. Read more www.theregister.co.uk: EFF volunteers to lose important suit over Sony 'rootkit'. Read more www.networklifemag.com: Malware and rootkits team up for mayhem. Read more www.vnunet.com: November breaks all malware records. Read more news.zdnet.co.uk: McAfee: We can compete with Microsoft. Read more news.zdnet.co.uk: Sophos: Gates will be proved wrong about spam. Read more www.vnunet.com: Arabic news station hit by phishing attack. Read more msnbc.msn.com: Kazaa accused of flouting court order. Read more www.channelregister.co.uk: eBay UK takes down pirate software sales. Read more

. 06 December 2005 Guides, Papers, etc blogs.securiteam.com: On �Responsible Disclosure�: Stripping the Veil From Corporate Censorship. Read more www.infosyssec.com: The 2005 Christmas Security Girls. Read more www.securitypronews.com: Security Fluff: Hottest Ladies In Security. Read more www.fepproject.org: WILL FAIR USE SURVIVE? Free Expression in the Age of Copyright Control. Read more www.eweek.com: By Larry Seltzer. Is a New Vulnerability the Tip of the Perl Iceberg? Read more www.eweek.com: Two Years Later, Blaster Worm Still Squirming. Read more www.f-secure.com: Old skool virus fighting. Read more channel9.msdn.com: Video: Chris St.Amand and Jeff Stucky - Debugging Microsoft.com. Read more abclocal.go.com: Protect Yourself From Wi-Fi Hackers. Read more itmanagement.earthweb.com: Wireless Hackers 101. Read more antivirus.about.com: Don't Care for Windows OneCare. Read more www.vnunet.com: Virus honey-pots to immunise the web. Read more www.redherring.com: Video Game Ads Sway Users. Read more   Tools: taosecurity.blogspot.com: Tools Used in USENIX Day One Class. Read more   Vulnerabilities & Exploits securitytracker.com: DoceboLMS 'connector.php' Bugs Let Remote Users View Directory Contents and Upload and Execute Arbitrary PHP Code. Read more www.infohacking.com: - Cisco IOS HTTP Server code injection vulnerability-Read more www.infohacking.com: - IE file downloading security warnings bypass - Read more   News www.theregister.co.uk: Bush administration control will cause net to split. Read more www.freedom-to-tinker.com: Hidden Feature in Sony DRM Uses Open Source Code to Add Apple DRM. Read more www.boingboing.net: Sony rootkit ripped off anti-DRM code to break into iTunes. Read more www.theinquirer.net: First wave of trojans washes over unpatched IE. Read more www.scmagazine.com: Sober now one in 13 emails. Read more wildcat.arizona.edu: The cold war on computers. Read more www.biosmagazine.co.uk: Be Warned Christmas MP3 Boom Brings Big Security Risks. Read more www.computerworld.com: Diebold faces e-voting machine hack test in California. Read more www.businessweek.com: For Sony, a Pain in the Image. Read more news.com.com: Cisco to enable advanced wireless services. Read more www.betanews.com: Microsoft Sued for Xbox 360 Problems. Read more

. 05 December 2005 Guides, Papers, etc www.zdnet.com.au: Inside Vista's Security Center. Read more www.dsv.su.se: Deficiencies in Current Software Protection Mechanisms and Alternatives for Securing Computer Integrity. Read more www.cs.nott.ac.uk: Cooperative Automated worm Response and Detection ImmuNe ALgorithm(CARDINAL) inspired by T-cell Immunity and Tolerance. Read more www.infectionvectors.com: Holiday Scheming. Read more www.infectionvectors.com: The Brains Behind the Operation. Read more   Vulnerabilities & Exploits secway.org: WinEggDropShell Multiple Remote Stack Overflow. Read more securitytracker.com: Help Desk 'install.php' Script Grants Remote Users Administrative Access. Read more securitytracker.com: Zen Cart Input Validation Hole in 'password_forgotten.php' Lets Remote Users Inject SQL Commands. Read more securitytracker.com: Citrix NFuse Elite Input Validation Flaw in Login Pages Permits Cross-Site Scripting Attacks. Read more securitytracker.com: Citrix MetaFrame Secure Access Manager Input Validation Flaw in Login Pages Permits Cross-Site Scripting Attacks. Read more securitytracker.com: Open Motif Buffer Overflows in diag_issue_diagnostic() and open_source_file() May Let Users Execute Arbitrary Code. Read more securitytracker.com: Edgewall Trac Input Validation Flaw in 'group' Parameter Permits SQL Injection. Read more securitytracker.com: FreeWebStat Input Validation Holes Permit Cross-Site Scripting Attacks. Read more securitytracker.com: PHPX Input Validation Hole in 'auth.inc.php' Lets Remote Users Inject SQL Commands to Bypass Authentication. Read more   News news.zdnet.co.uk: Sober worm clogs Hotmail connections. Read more www.msnbc.msn.com: Cyber criminals gather on forgotten Web sites. Read more www.heraldsun.news.com.au: Google under attack on ads. Read more www.usatoday.com: Sony closes in on new program to cleanse PCs. Read more www.theregister.co.uk: Netgear admits wireless speed claims are misleading. Read more www.theregister.co.uk: Intellectual property rights to be reviewed in UK. Read more www.computerworld.com.au: Sony rootkit: A black eye for security vendors? Read more www.infoworld.com: Gmail virus scanning draws some user complaints. Read more www.informationweek.com: Security's Shaky State. Read more news.com.com: SNARFing your way through e-mail. Read more www.iht.com: New form of hacking raises alarms. Read more

. 03 December 2005 Guides, Papers, etc fraudwar.blogspot.com: Fraud, Phishing and Financial Misdeeds. Read more www.nature.com: How to immunize your computer. Read more www.cs.berkeley.edu: A Two-Layer Approach for Novel Email Worm Detection. Read more   Tools: www.xray-ids.com: The XRAY-IDS is the first Intrusion Detection System only for the Windows Operating System. Read more   Vulnerabilities & Exploits www.hacker.co.il: Google Desktop Exposed: Exploiting an Internet Explorer Vulnerability to Phish User Information. Read more www.debian.org: DSA-915-1 helix-player -- buffer overflow. Read more www.debian.org: DSA-914-1 horde2 -- missing input sanitising. Read more www.debian.org: DSA-913-1 gdk-pixbuf -- several vulnerabilities. Read more   News news.com.com: Sober worm stalls MSN, Hotmail. Read more news.com.com: Microsoft tweaks browser to avoid liability. Read more www.securityfocus.com: Federal flaw database commits to grading system. Read more www.securityfocus.com: IRS warns of phishing scam. Read more www.theregister.co.uk: Phishing with Google Desktop. Read more www.theregister.co.uk: Anti-virus scanner added to Google Gmail. Read more www.macworld.com: Gmail virus scanning draws some user complaints. Read more www.mail-archive.com: from the bad idea department. Read more www.news24.com: Hacker gets seven years. Read more www.technewsworld.com: Rooting Out Spyware: Sony's Lesson. Read more www.businessweek.com: For Sony, a Pain in the Image. Read more www.computerworld.com: Gartner: 2005 hurricanes prompt more companies to store data off-site. Read more

. 02 December 2005 Guides, Papers, etc www.microsoft.com: Win32/Blaster: A Case Study From Microsoft's Perspective. Read more www.microsoft.com: Defeating Polymorphism: Beyond Emulation White Paper. Read more www.sysinternals.com: Premature Victory Declaration? Read more wired-vig.wired.com: Don't Call It Spyware. Read more www.cs.wfu.edu: Malware Defense Using Network Security Authentication. Read more www.mitretek.org: Analytically Modeling Worm Attacks in Internet Protocol Networks. Read more bnrg.cs.berkeley.edu: Protocol-Independent Adaptive Replay of Application Dialog. Read more www.crypto.com: Signaling Vulnerabilities in Wiretapping Systems. Read more   Vulnerabilities & Exploits securitytracker.com: PHP mb_send_mail() May Let Users Inject SMTP Headers. Read more securitytracker.com: Panda Antivirus Heap Overflow in Processing ZOO Archives May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Apple Safari WebKit Buffer Overflow May Let Remote Users Execute Arbitrary Code and Other Bugs May Permit JavaScript Dialog Box Spoofing and File Download Location Modification. Read more securitytracker.com: Mac OS X syslog May Let Local Users Forge Log Entries. Read more securitytracker.com: Mac OS X passwordserver May Let Local Users Gain Elevated Privileges. Read more securitytracker.com: Mac OS X iodbcadmintool Lets Local Users Gain Elevated Privileges. Read more securitytracker.com: Mac OS X CoreFoundation Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: pcAnywhere Pre-Authentication Buffer Overflow Lets Remote Users Deny Service. Read more securitytracker.com: Cisco Security Agent Lets Local Users Execute Applications With Elevated Privileges. Read more securitytracker.com: Sun Java Runtime Environment (JRE) Unspecified Bug Lets Applets Gain Elevated Privileges. Read more securitytracker.com: Sun Java Runtime Environment (JRE) JMX Bug Lets Applets Gain Elevated Privileges. Read more securitytracker.com: Sun Java Runtime Environment (JRE) Reflection API Bugs Let Applets Gain Elevated Privileges. Read more securitytracker.com: GuppY Input Validation Flaw in 'error.php' Lets Remote Users Execute Arbitrary Code. Read more www.adrianpv.com: Google Talk Beta Messenger cleartext credentials in process memory. Read more www.ush.it: Free Web Stat Multiple XSS Vulnerabilities. Read more www.debian.org: DSA-911-1 gtk+2.0 -- several vulnerabilities. Read more www.ush.it: Multiple Vulnerabilities in WebCalendar. Read more   News www.theregister.co.uk: Trojan exploits unpatched IE flaw. Read more www.theregister.co.uk: Zone Labs sued over spyware classification. Read more www.techworld.com: Yet more Microsoft attacks. Read more www.theregister.co.uk: ICANN kills .xxx porn domain. Read more spamkings.oreilly.com: Blacklist stats suggest anti-spam progress. Read more www.computing.co.uk: Microsoft launches anti-virus service. Read more in.today.reuters.com: INTERVIEW - Cybercrime yields more cash than drugs - expert. Read more www.theregister.co.uk: Skype does video VoIP. Read more news.bbc.co.uk: Rush expected on EU domain name. Read more www.eweek.com: Podcast Hijacked, Held for Ransom. Read more

Copyright� MegaSecurity.org