Home    News Archive    Translate Traducen

News December 2006

31 December 2006 Guides, Papers, etc www.f-secure.com: First MMS exploit for phones has been released. Read more isc.sans.org: Postcard.exe - Let the mutations begin. Read more www.symantec.com: Me Code Write Good: The l33t Skillz of the Virus Writer. Read more www.linklogger.com: Capture, care and analysis of Malware made easy. Read more www.computerworld.com: Finding software security flaws. Read more www.informationweek.com: Microsoft: Vista's Secure, Not Perfect. Read more www.techworld.com: Wireless security starts with drivers. Read more www.techworld.com: CIO study finds Linux ready for prime-time. Read more www.symantec.com: Information Security in an Increasingly Collaborative World. Read more cryptome.org: The Futility of Digital Copy Prevention. Read more   Vulnerabilities & Exploits www.geekzone.co.nz: MMS exploit in the wild for Windows Mobile devices. Read more securitytracker.com: Total Commander Buffer Overflow in iso_wincmd Plugin Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: EasyNews PRO Discloses Password to Remote Users. Read more securitytracker.com: Durian Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more   News www.eetimes.com: 2006 declared 'Year of the Zombies'. Read more www.slipperybrick.com: GMail Users Reporting Mass Deletions. Read more news.com.com: Virtual reality to get its own network? Read more www.technologyreview.com: Plastic Sheet of Power. Printing flexible electronics on plastic provides a way to wirelessly power gadgets. Read more

. 30 December 2006 Guides, Papers, etc www.technewsworld.com: Predicting the Top Security Threats for 2007. Read more www.darkreading.com: 2007: Trouble Ahead. Read more blogs.securiteam.com: Postcard.exe - be aware! Read more blogs.securiteam.com: Database errors - real life of security vendors too. Read more www.viruslist.com: Like clockwork. Read more www.darkreading.com: Resolved to Hack. Read more msmvps.com: The reminder of security. Read more www.newsfactor.com: Microsoft Looks Beyond Vista Bugs. Read more aolradio.podcast.aol.com: Audio: Security Now 72: Your Questions, Steve's Answers 14. Listen   Vulnerabilities & Exploits securitytracker.com: AIDeX WebServer Lets Remote Users Deny Service By Sending Multiple Requests. Read more   Tools: www.f-secure.com: BlackLight Beta for Windows Vista and Windows 2003 Server x64. Read more www.dailytech.com: New Samsung Fuel Cell Dock Powers Laptop for a Full Month. Read more   News economictimes.indiatimes.com: Beware that anti-virus software. Read more searchengineland.com: Of Disappearing Sex Blogs & Google Updates. Read more www.wired.com: Computer Warming a Privacy Risk. Read more www.securityfocus.com: OneDOJ stokes privacy fears. Read more

. 29 December 2006 Guides, Papers, etc www.f-secure.com: More malicious New Year postcards. Read more isc.sans.org: Pain reliever with serious side effects (NEW). Read more www.symantec.com: Rustock: Deep Dive. Read more blog.info-pull.com: Flawed antivirus products. Read more www.technewsworld.com: Vista and the Future of OS Security, Part 2. Read more www.theregister.co.uk: Vista's Suicide Bomb: who gets hurt? Read more www.darkreading.com: Voice Cracks. Read more www.infoworld.com: New year's resolution No. 1: Get OpenBSD. Read more   Vulnerabilities & Exploits securitytracker.com: Windows Client-Server Run-time Subsystem NtRaiseHardError Discloses Memory to Local Users. Read more securitytracker.com: KSirc Client PRIVMSG Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Limbo CMS Event Calendar Module Include File Bug in 'eventcal/mod_eventcal.php' Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Cacti 'cmd.php' Lets Remote Users Inject SQL Commands. Read more securitytracker.com: ELOG Configuration File Parsing NULL Pointer Dereference Lets Remote Users Deny Service. Read more securitytracker.com: PHP iCalendar Input Validation Holes in 'cpath' and 'getdate' Parameters Permit Cross-Site Scripting Attacks. Read more   Tools: www.pctools.com: PC Tools AntiVirus� 3.1 Free Edition. Read more www.mcs.vuw.ac.nz: Snort Rule Permutator released with HoneyC version 1.2.0. Read more   News www.securityfocus.com: Bot-infected PCs get a refresh. Read more www.post-gazette.com: Microsoft ad push is all about you. Read more www.theregister.co.uk: MS sees out year with another Vista attack. Read more www.boston.com: As deadline nears, banks toughen Net protections. Read more www.theregister.co.uk: Stock scammer gets coal for the holidays. Read more www.darkreading.com: SEC Exposes Online Fraudster. Read more popsci.typepad.com: our Computer is Hot -- And I Know Where You Live. Read more www.securitypronews.com: Rootkits Pose Big 2007 Threat. Read more www.informationweek.com: Rustock Trojan A Model For Future Threats. Read more www.informationweek.com: Brief: Personal Information Showing Up On Google Notebook Search. Read more www.techtree.co: India is '06 Hot Spot for Hackers. Read more news.com.com: Companies probe possible high-def DVD hack. Read more www.engadget.com: AACS DRM cracked by BackupHDDVD tool? Read more www.betanews.com: PayPal 'Virtual Debit Card' Beta Seeks to Eliminate ID Theft. Read more www.terra.net.lb: Asia Internet slowly comes back online. Read more www.seacoastonline.com: Church's old Web domain converted into porn site. Read more

. 28 December 2006 Guides, Papers, etc www.commtouch.com: 2006 Spam Trends Report: Year of the Zombies. Read more www.technewsworld.com: Same Spam, Different Image. Read more www.esecurityplanet.com: The Evolution Of Malware Continues. Read more isc.sans.org: Christmas Botnet Follow-up. Read more www.bindshell.net: : The Advanced Cross-site Scipting Virus. Read more www.darkreading.com: The Six Dirtiest Tricks of 2006. Read more www.techworld.com: Vista crippled by content protection. Read more www.microsoft-watch.co: Another Vista Activation Crack Appears. Read more www.computerworld.com.au: Microsoft WGA says: 'Prove your innocence'. Read more www.attrition.org: The Communications Director for Montana's Congressman Denny Rehberg email exchange. Read more   Vulnerabilities & Exploits securitytracker.com: Secure Login Manager Missing Input Validation Permits Cross-Site Scripting Attacks in Certain Cases. Read more securitytracker.com: Hosting Controller 'FolderManager.aspx' Lets Remote Authenticated Users View and Modify Files. Read more securitytracker.com: pNamazu Input Validation Hole Permits Cross-Site Scripting Attacks. Read more securitytracker.com: CMS Made Simple Input Validation Flaw in Comments Module Permits Cross-Site Scripting Attacks. Read more securitytracker.com: logahead UNU edition WidgEd Plugin Lets Remote Users Upload Files and Execute Arbitrary Code. Read more securitytracker.com: PhpbbXtra Include File Bug in 'archive_topic.php' Lets Remote Users Execute Arbitrary Code. Read more   Tools: www.bindshell.net: Odysseus is a proxy server, which acts as a man-in-the-middle during an HTTP session. Read more www.diehard-software.org: DieHard helps buggy programs run correctly and protects them from a range of security vulnerabilities. Read more   News www.securityfocus.com: Bots, breaches and bugs plague 2006. Read more www.securityfocus.com: Researcher: AppleScript great for malware. Read more www.theregister.co.uk: Congressional aide fired after trying to hire hackers. Read more www.latimes.com: FTC gets broader authority to pursue foreign spammers. Read more ipcommunications.tmcnet.com: New Computer Program Prevents Crashes And Hacker Attacks. Read more www.informationweek.com: Chinese Hackers Launch New Office Attack. Read more www.tinynibbles.com: Google clamps down on porn; removes sex-positive sites from search results. Read more www.playfuls.com: HD DVD's AACS Protection Bypassed. In Only 8 Days?! Read more

. 27 December 2006 Guides, Papers, etc www.benedelman.org: Bad Practices Continue at Zango, Notwithstanding Proposed FTC Settlement and Zango's Claims. Read more www.f-secure.com: Happy New Warezov. Read more blogs.securiteam.com: CCC report: day 0. Read more blogs.securiteam.com: Google debug. Read more blogs.securiteam.com: Second Life: Virtual Worlds Botnet Attacks. Read more blogs.securiteam.com: Comment spam: iframe usage. Read more www.darkreading.com: Postcard from Nigeria. Read more www.cs.auckland.ac.nz: A Cost Analysis of Windows Vista Content Protection. Read more www.pcworld.com: Lab Tests: Vista's Fast If You Have the Hardware. Read more www.computerworld.com.au: Microsoft WGA says: 'Prove your innocence'. Read more www.betanews.com: Is Vista Really Bug-Plagued as the NY Times Claims? Read more shampoo.antville.org: (somewhat) breaking the same-origin policy by undermining dns-pinning. Read more www.eweek.com: Who Are You Surfin? New Ways to Be Cert'in. Read more www.shoemoney.com: How Hackers Are Using Google To Pwn Your Site. Read more www.newsfactor.com: Is Malware Hiding Behind that Certified Site? Read more   Vulnerabilities & Exploits securitytracker.com: Microsoft Windows Workstation Service Memory Allocation Error in NetrWkstaUserEnum() Lets Remote Users Deny Service. Read more securitytracker.com: w3m Format String Bug in Processing Certificates May Permit Remote Code Execution. Read more securitytracker.com: ChatWM Input Validation Flaw in 'login.asp' Lets Remote Users Inject SQL Commands. Read more securitytracker.com: TimberWolf Input Validation Hole in 'shownews.php' Permits Cross-Site Scripting Attacks. Read more securitytracker.com: Novell NetMail Buffer Overflows in IMAP and NMAP Services Let Remote Users Execute Arbitrary Code. Read more   News www.theregister.co.uk: Xmas malware frenzy. Read more www.chicagotribune.com: Flaw in Vista operating system could let hacker control PC. Read more seattletimes.nwsource.com: Vista security flaws investigated. Read more www.pcworld.com: Microsoft Sees Botnets as Top Cyberthreat. Read more ipcommunications.tmcnet.com: Online Bank Security Has A Big Hole. Read more www.theregister.co.uk: Windows DRM is the 'longest suicide note in history'. Read more

. 23 December 2006 Guides, Papers, etc blogs.securiteam.com: Botnets: a retrospective to 2006, and where we are headed in 2007. Read more www.sciencedirect.com: Analyzing terror campaigns on the internet: Technical sophistication, content richness, and Web interactivity. Read more isc.sans.org: The Snort Top 10 (NEW). Read more www.eweek.com: It's Time to Sell Security Services. Read more www.cs.auckland.ac.nz: A Cost Analysis of Windows Vista Content Protection. Read more www.watchguard.com: A plea for an end to Months of Irresponsible Disclosure. Read more www.avertlabs.com: IMs, VoIP and Spam. Read more www.microsoft-watch.com: Keep the Grinch Out of Your Network This Holiday. Read more www.microsoft-watch.com: Vista Won't End Windows XP Availability. Read more www.isi.qut.edu.au: Preliminary Call for Papers Recent Advances in Intrusion Detection 2007 10th International Symposium. Read more   Vulnerabilities & Exploits securitytracker.com: @Mail Input Validation Holes Permit Cross-Site Scripting and Cross-Site Request Forgery Attacks. Read more securitytracker.com: SugarCRM Input Validation Bug in Email Messages Permits Cross-Site Scripting Attacks. Read more securitytracker.com: Windows Client-Server Run-time Subsystem Lets Local Users Gain Elevated Privileges. Read more securitytracker.com: Http explorer Lets Remote Users Traverse the Directory on the Target System. Read more securitytracker.com: RateMe Include File Bug Lets Remote Users Execute Arbitrary Code. Read more   Tools: www.trendmicro.com: Trend Micro RootkitBuster is a rootkit scanner that offers ability to scan for hidden files, registry entries, processes, drivers and hooked system service. Read more sqid.rubyforge.org: SQL injection digger is a command line program that looks for SQL injections and common errors in websites. Read more   News www.vnunet.com: Microsoft blames Vista insecurity on third-party apps. Read more www.pegasusnews.com: Personal data of 15,000 TWU students made vulnerable. Read more www.boingboing.net: NPR "Xeni Tech": US losing war of web to terror groups? Read more www.charleston.net: Bank says customer data may have been stolen. Read more www.securityfocus.com: Stock scammer gets coal for the holidays. Read more www.securityfocus.com: Congressional aide punk'd, then fired. Read more www.canada.com: Police in Ontario consider YouTube effective crime fighting tool. Read more www.betanews.com: Windows Bug Via Message Boxes Gives Security Team Holiday Headaches. Read more www.theregister.co.uk: CafePress wilts under DDoS assault. Read more

. 22 December 2006 Guides, Papers, etc blogs.technet.com: New report of a Windows vulnerability . Read more www.viruslist.com: Google helps phishers. Read more www.darkreading.com: Weaker Than You Think. Read more www.darkreading.com: Popping the Vista Kernel. Read more www.avertlabs.com: PassWord Stealer for the virtual world. Read more www.computerdefense.org: Nmap vs SinFp. Read more www.f-secure.com: Merry Christmas. Read more www.scriptingmagic.com: Clipboard Theft. Read more www.oreillynet.com: Using Google to View MySpace or Any Restricted Site. Read more www.revenews.com: Now Microsoft Thinks It Invented RSS? Read more www.itnews.com.au: Cyber-security new year resolutions for 2007. Read more www.podtrac.com: Audio: Security Now 71: Securable. Listen   Vulnerabilities & Exploits isc.sans.org: PoC for local elevation of privilege on Windows 2000 SP4 upwards (NEW). Read more blogs.securiteam.com: Firefox 2.0.0.1 - no fix to Password Manager flaw yet. Read more securitytracker.com: Mono Discloses File Source Code to Remote Users. Read more securitytracker.com: CA CleverPath Portal May Let Remote Users Access Portal Sessions of Other Users in Certain Cases. Read more securitytracker.com: TYPO3 Input Validation Holes in 'rtehtmlarea' Sysext Let Remote Users Execute Arbitrary Code. Read more   Tools: www.gomor.org: SinFP is a new approach to OS fingerprinting, which bypasses limitations that nmap has. Read more www.reghardware.co.uk: VMware opens Mac virtual machine tech to public. Read more www.nliteos.com: nLite is a tool for permanent Windows components removal and pre-installation Windows setup. Read more   News news.com.com: Judge: Can't link to Webcast if copyright owner objects. Read more cbs2.com: USC Hacker Gets 6 Months Of Home Detention. Read more www.computing.co.uk: German virus gang jailed. Read more passivemode.net: Microsoft Presents Draft of Security Interfaces. Read more www.securityfocus.com: Sony BMG settles rootkit lawsuits. Read more www.securityfocus.com: Opera adds anti-phishing to browser. Read more www.theregister.co.uk: Online criminals threatened with sex offenders' register. Read more www.techworld.com: Days of big virus are over. Read more blogs.ittoolbox.com: How Not To Hire A Hacker. Read more www.sfgate.com: Sex.com: A URL -- All Crime And No Sex. Read more online.wsj.com: How Biometric Security Is Far From Foolproof. Read more

. 21 December 2006 Guides, Papers, etc portal.spidynamics.com: IE7 - Phishing vs. Privacy. Read more secdev.zoller.lu: Microsoft monitors Search queries - SP2. Read more www.f-secure.com: Phishing Filters - No Add-ons Required. Read more www.avien.org: The New Face of Malware. Stories from the Battlefield. Read more www.theregister.co.uk: All I want for Christmas...Read more www.azureuswiki.com: Bad ISPs. Here's a list of ISPs (Internet service provider) that are known to cause trouble for BitTorrent clients or P2P in general. Read more   Vulnerabilities & Exploits www.info-svc.com: CIS Finds Flaws in Firefox v2 Password Manager. Read more www.info-svc.com: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip. (POC) Read more isc.sans.org: Multiple vulnerabilities in Symantec Veritas NetBackup. Read more www.frsirt.com: Mozilla Products Multiple Remote Command Execution and Security Bypass Vulnerabilities. Read more www.security.nnov.ru: Microsoft Windows memory corruption. Read more securitytracker.com Java Runtime Environment Discloses Applet Information to Remote Users. Read more securitytracker.com Java Runtime Environment Serialization Bugs Let Remote Applets Gain Elevated Privileges. Read more securitytracker.com Java Runtime Environment Buffer Overflows Let Remote Users Execute Arbitrary Code. Read more   Tools: fileforum.betanews.com: AutoIt is a simple tool that can simulate keystokes, mouse movements and window commands (maximize, minimize, wait for, etc.) in order to automate any windows based task (or even windowed DOS tasks). Read more   News www.microsoft.com: Re-Release: Microsoft Security Bulletin MS06-078. Read more www.theinquirer.net: Linking to copyrighted material could get you sued. Read more www.zdnet.com.au: Double Skype attack confuses security firms. Read more www.startribune.com: Lawsuit challenges government's right to read your e-mail. Read more www.wired.com: Media Takes on AT&T in Spy Case. Read more www.sjgames.com: Steve Jackson Games v. US Secret Service. Read more www.ecoustics.com: Automatic Security-Software Renewals. Be aware of auto-renewal agreements before you sign up. Read more www.itbinternet.com: Microsoft Unlikely To Lead Anti-Virus Field Despite Security Enhancements To Vista And OneCare, Says Natalya Kaspersky. Read more www.securityfocus.com: Web facial matching stirs privacy worries. Read more www.cbc.ca: Image search tool raises privacy concerns. Read more www.theregister.co.uk: Hackers call on Skype to spread Trojan. Read more www.computerworld.com: Spam: The digital coal in your stocking. Read more www.platinax.co.uk: Google Search convicts hacker. Read more www.theregister.co.uk: Sysadmin 'tried to boobytrap' drug firm database. Read more www.theregister.co.uk: NASA shares space with Google. Read more www.washingtonpost.com: Google Book-Scanning Efforts Spark Debate. Read more

. 20 December 2006 Guides, Papers, etc blogs.securiteam.com: How Not to Protect Your Customers from Phishing. Read more blogs.securiteam.com: My name is Chatosky - I spread with Skype. Read more www.securityfocus.com: Password Management Concerns with IE and Firefox, part one. Read more www.securityfocus.com: Password Management Concerns with IE and Firefox, part two. Read more www.darkreading.com: An Apple (Bug) a Day. Read more www.viruslist.com: Who wants to be a money launderer? Read more www.eweek.com: SPIT: It's Not Just For Terrell Owens Anymore. Read more isc.sans.org: Sun JDK 5.0 Update 10 (NEW). Read more www.f-secure.com: Skype Worm. Read more blogs.ittoolbox.com: Interview With Whistleblower TripleZ. Read more www-128.ibm.com: Crossing borders: JavaScript's language features. Read more www.eetimes.com: Are you suffering from 'Mouse Rage Syndrome? Read more   Vulnerabilities & Exploits securitytracker.com: Mozilla Firefox Outer Window Function Object Lets Remote Users Bypass Cross-Site Scripting Protections. Read more securitytracker.com: Mozilla Firefox SVG Processing Bug Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Mozilla Firefox May Disclose RSS Feed URLs to Remote Systems. Read more securitytracker.com: Mozilla Firefox IMG SRC Tag Can Be Modified to Bypass Cross-Site Scripting Protections. Read more securitytracker.com: Mozilla Firefox LiveConnect May Use Freed JavaScript Objects and Execute Arbitrary Code. Read more securitytracker.com: Mozilla Firefox JavaScript watch() Function Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Mozilla Firefox Memory Corruption in Layout Engine and Javascript Engine May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Mozilla Firefox Windows Cursor Image Conversion Heap Overflow Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: GNU tar GNUTYPE_NAMES Record Directory Traversal Flaw May Let Remote Users Overwrite Arbitrary Files. Read more securitytracker.com: Mozilla Thunderbird E-mail Header Heap Overflows Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Mozilla Seamonkey E-mail Header Heap Overflows Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Mozilla Seamonkey SVG Processing Bug Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Mozilla Thunderbird IMG SRC Tag Can Be Modified to Bypass Cross-Site Scripting Protections. Read more securitytracker.com: Mozilla Seamonkey IMG SRC Tag Can Be Modified to Bypass Cross-Site Scripting Protections. Read more securitytracker.com: Mozilla Thunderbird LiveConnect May Use Freed JavaScript Objects and Execute Arbitrary Code. Read more securitytracker.com: Mozilla Seamonkey LiveConnect May Use Freed JavaScript Objects and Execute Arbitrary Code. Read more securitytracker.com: Microsoft Outlook Recipient ActiveX Control Lets Remote Users Deny Service. Read more securitytracker.com: NeoScale CryptoStor 700 Series Appliance Lets Remote Users Bypass Token-Based Authentication. Read more securitytracker.com: QuickTime Quartz Composer Composition Bug Lets Remote Users Obtain Information from the Target User's System. Read more   Tools: www.kishkish.com: KishKish Lie Detector. Read more   News news.zdnet.co.uk: Sony forced to pay for rootkit debacle. Read more www.securityfocus.com: Month of Apple bugs coming. Read more pcworld.co.nz: Microsoft releases APIs for Vista security. Read more www.securityfocus.com: Check Point snaps up NFR Security. Read more www.theregister.co.uk: Opera adds tech to foil phishers. Read more www.techworld.com: Five critical holes patched in Firefox 2.0. Read more www.internetnews.com: Mozilla Fixes Firefox Flaws, Misses One. Read more www.betanews.com: Purported Skype Worm a False Alarm. Read more news.zdnet.co.uk: IT worker arrested over hacking plot. Read more online.wsj.com: Software to Spot 'Phishers' Irks Small Concerns. Read more www.newscientisttech.com: Face-hunting software will scour web for targets. Read more www.techtree.com: Alternative to Google Image Search? Read more www.terra.net.lb: Photolurking, blog streaking and cheesepodding: The new Internet addictions. Read more

. 19 December 2006 Guides, Papers, etc isc.sans.org: Skype worm (NEW). Read more isc.sans.org: ORDB Shutting down (NEW). Read more www.securityfocus.com: PHP security under scrutiny. Read more www.esj.com: Security: A Look Back and the Year Ahead. Read more www2.csoonline.com: Damaging Malware Declining, Older Variants On the Rise. Read more linuxhelp.blogspot.com: Various ways of detecting rootkits in GNU/Linux. Read more www.darkreading.com: Vulnerability Tools Get Teeth. Read more www.smh.com.au: Shields up for summer. Read more www.internetnews.com: Real Phishing Tool Probes User Gullibility. Read more www.darkreading.com: Phishing Your Own Users. Read more www.darkreading.com: Laptop Encryption the Service Way. Read more www.informit.com: How Not To Use Cookies. Read more www.technewsworld.com: Vista and the Future of OS Security. Read more ddanchev.blogspot.com: Phishing Domains Hosting Multiple Phishing Sites. Read more oedb.org: The Ultimate Guide to the Invisible Web. Read more zdpub.vo.llnwd.net: Audio: Where We Stand, 2007, issues of the day, including net neutrality, the ethics of search practices, data security and open source. Listen   Vulnerabilities & Exploits securitytracker.com: MailEnable Buffer Overflow in POP3 PASS Command Lets Remote Authenticated Users Execute Arbitrary Code. Read more securitytracker.com: MANDIANT First Response FRAgent Lets Remote Users Deny Service and Local Users Hijack Connections. Read more securitytracker.com: Sambar Server FTP SIZE Command Lets Remote Authenticated Users Deny Service. Read more securitytracker.com: Omniture SiteCatalyst Input Validation Hole in Login Page Permits Cross-Site Scripting Attacks. Read more securitytracker.com: SQL-Ledger Input Validation Flaw in 'login.pl' Lets Remote Users Execute Arbitrary Code. Read more   Tools: pandora.sourceforge.net: Pandora is a monitoring application to watch systems and applications, that allows to know the status of any element of your systems, watch for your hardware, your software, your multilayer system and of course your Operating System. Read more sourceforge.net: With SIP Proxy you will have the opportunity to eavesdrop and manipulate SIP traffic. Furthermore, predefined security test cases can be executed to find weak spots in VoIP devices. Read more arstechnica.com: Opera 9.1 released, adds real-time phishing protection. Read more   News www.theregister.co.uk: 100m US records exposed by security blunders. Read more securitywatch.eweek.com: MS Investigating Vista Zero-Day Exploit Sale. Read more www.theregister.co.uk: Yahoo! Messenger! in! security! flap! Read more news.zdnet.co.uk: Skype worm spotted. Read more www.newsnow.co.uk: ESET NOD32 Wins Virus Bulletin 100% Award Once Again. Read more www.pcadvisor.co.uk: $50,000 Vista exploit "for sale". Read more www.betanews.com: Firefox Continues to Gain Market Share. Read more www.itp.net: Small firms advised to hunt out hackers� help. Read more ipcommunications.tmcnet.com: Universities targeted by computer hackers. Read more www.boston.com: Iran bloggers test regime's tolerance. Read more www.wired.com: Pluggd: A Google for Podcasts. Read more www.usatoday.com: Google, NASA finalize imagery, info deal. Read more

. 18 December 2006 Guides, Papers, etc www.itnews.com.au: Sturdier botnets mean more spam in 2007. Read more www.computerworld.com: Plugging Holes in Antivirus Shield. Read more technology.timesonline.co.uk: They're turning me into a zombie. Read more www.sacbee.com: Editorial: 'Phishing' and 'vishing'. Read more isc.sans.org: Ping floods at multiple sites (NEW). Read more honeyblog.org: CWSandbox vs. Banking Spyware. Read more www.playfuls.com: More Information on Windows Vista Software Protection Policies. Read more   Vulnerabilities & Exploits securitytracker.com: Microsoft Word Unspecified Vulnerability Lets Remote Users Execute Arbitrary Code. Read more   Tools: www.bindshell.net: Odysseus is a proxy server, which acts as a man-in-the-middle during an HTTP session. Read more internetfreedomdisk.blogspot.com: Internet Freedom Disk. Read more   News www.computerworld.com.au: Security experts in dangerously short supply. Read more www.fin24.co.za: Hackers turn table on Symantec. Read more www.usatoday.com: Cybercrooks hold PC data captive. Read more www.computerworld.com: Copyright holders sign China piracy agreement. Read more www.msnbc.msn.com: Seduced into scams: Online lovers often duped. Read more www.news.com.au: Tool to fight internet fraud. Read more techdirt.com: Philips The Latest To Try A Magic Bullet Solution To Unauthorized Copying. Read more news.bbc.co.uk: ePassports 'at risk' from cloning. Read more www.informationweek.com: Microsoft Turns Up The Heat On Windows 2000 Users. Read more www.boston.com: 'Blogjackings' offer unwelcome surprises. Read more www.theregister.co.uk: Microsoft wins UK ruling to ban spam list sales. Read more cnews.canoe.ca: Cops use YouTube to solve crimes. Read more

. 16 December 2006 Guides, Papers, etc www.avertlabs.com: MS Word Zero-Day Trio. Read more www.heise-security.co.uk: The hole trick. How Skype & Co. get round firewalls. Read more www.f-secure.com: 'Tis the Season ...Read more www.eweek.com: Get the NAC in 2007. Read more www.privacyrights.org: A Chronology of Data Breaches. Read more www.it-observer.com: Non-OS-dependant malware. Read more www.itnews.com.au: Fortinet reviews the year's security trends. Read more www.technologyreview.com: P2P: From Internet Scourge to Savior. Read more www.darkreading.com: 'Not Much Resistance at the Door'. Read more www.darkreading.com: PHP Security Expert Quits. Read more www.microsoft-watch.com: Vista Isn't Windows' Last Destination. Read more www.microsoft-watch.com: Vista? Yes, Bother. Read more www.microsoft-watch.com: Who's Afraid of a Monster? Read more www.itnews.com.au: Patch craze to continue in 2007. Read more www.networkcomputing.com: Audio: The Worldwide growth of Spyware and Adware; Detecting and Defeating Rootkits. Listen   Vulnerabilities & Exploits securitytracker.com: Yahoo Messenger Buffer Overflow in ActiveX Control Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: BitDefender Heap Overflow in Parsing Packed PE Files Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Microsoft Project Discloses Database Password to Remote Authenticated Users. Read more securitytracker.com: NetBSD libc glob(3) Buffer Overflow May Let Local Users Gain Elevated Privileges or Remote Users Execute Arbitrary Code in Certain Cases. Read more securitytracker.com: McAfee VirusScan for Linux Lets Local Users Gain Elevated Privileges. Read more   News www.securityfocus.com: Three Word flaws remain unpatched. Read more news.zdnet.com: New 'botworm' exploits Symantec flaw. Read more stuff.techwhack.com: EEye Digital Security claims Big Yellow attacking Symantec antivirus protected machines. Read more news.com.com: Yahoo's IM update: A trojan horse of surprises. Read more www.cbc.ca: Yahoo Messenger flaw opens computers to hijacking. Read more www.net-security.org: Machine learning technology to fight image-based spam. Read more out-law.com: Microsoft wins ruling to ban spam list sales. Read more www.redorbit.com: Hacker Gives Web Users Unexpected Peep Show. Read more www.securityfocus.com: Admin jailed 8 years for "logic bomb". Read more www.theregister.co.uk: NY Times bans Microsoft analysts from Microsoft stories. Read more www.cbc.ca: Gates admits flaws with digital music copy protection. Read more news.zdnet.com: Microsoft speeds up phishing shield for IE 7. Read more www.colorado.edu: CU-Boulder Reports Security Breach In College Of Arts And Sciences Advising Computer. Read more

. 15 December 2006 Guides, Papers, etc www.itnews.com.au: 'Rustock' trojan a model for future threats. Read more blogs.securiteam.com: These two weeks of Word flaws - can we survive? Read more support.microsoft.com: Description of the Wireless Client Update for Windows XP with Service Pack 2. Read more www.f-secure.com: Wireless Client Update. Read more support.microsoft.com: The computer may respond very slowly as the Phishing Filter evaluates Web page contents in Internet Explorer. Read more isc.sans.org: sav worm and its cc (NEW). Read more www.mcafee.com: McAfee, Inc. Reports Fewer Qualified Security Experts Puts Businesses at Risk. Read more www.darkreading.com: Johnny Cache: Man in Black (Hat). Read more www.darkreading.com: Startup Finds Phish in Browsers. Read more www.eweek.com: Signature Scanning: 'I'm Not Dead Yet'. Read more blogs.ittoolbox.com: Digital Cameras And Divorce. Read more honeyblog.org: Botnets, Stock Spam and Other Abuses. Read more today.reuters.co.uk: Video: Cyberstalking risks soar. Watch aolradio.podcast.aol.com: Audio: Security Now 70: Freenet and TOR. Listen   Vulnerabilities & Exploits securitytracker.com: ScriptMate User Manager Input Validation Holes Permit Cross-Site Scripting Attacks and SQL Command Injection. Read more securitytracker.com: GNOME Display Manager Lets Local Users Gain Elevated Privileges. Read more securitytracker.com: CA Internet Security NULL Buffer Errors in vetfddnt.sys and vetmonnt.sys Drivers Let Local Users Deny Service. Read more securitytracker.com: CA Anti-Virus NULL Buffer Errors in vetfddnt.sys and vetmonnt.sys Drivers Let Local Users Deny Service. Read more securitytracker.com: IBM Tivoli Identity Manager Discloses JKS Password to Local Users. Read more securitytracker.com: Symantec NetBackup Buffer Overflows and Logic Error in bpcd Daemon Let Remote Users Execute Arbitrary Code. Read more   News www.theregister.co.uk: Symantec plugs vulnerabilities in NetBackup. Read more www.regdeveloper.co.uk: Phishing scams thrive in the UK. Read more www.wired.com: Attack of the 'Wiimote' Hacks. Read more news.zdnet.co.uk: Microsoft moves to block hybrid Vista. Read more www.vnunet.com: Microsoft critical vulnerability boom persists. Read more www.technewsworld.com: Reports of Antivirus Death May Be Exaggerated. Read more www.technewsworld.com: Philips Unveils Anti-Piracy Tech for Video. Read more www.regdeveloper.co.uk: Japan convicts P2P author. Read more www.itnews.com.au: Patch craze to continue in 2007. Read more edition.cnn.com: Laptop helps man in Germany bust burglar in Brazil. Read more www.redorbit.com: Think Before Clicking: Buying Holiday Gifts Online Means Checking Site's Security, Return Policy - and Calendar to Be Sure Santa Shows Up on Time. Read more

. 14 December 2006 Guides, Papers, etc blogs.securiteam.com: The AV coverage of 12122006-djtest.doc PoC extremely poor. Read more arstechnica.com: Study shows one in twenty-five search results are risky. Read more blogs.msdn.com: Windows Vista, ASLR, DEP and OEMs. Read more isc.sans.org: Offline Microsoft Patching (NEW). Read more www.wired.com: MySpace Passwords Aren't So Dumb. Read more www.najingad.com: How to Cheat at Securing a Wireless Network. (pdf). Download www.insecuremagazine.com: (IN)SECURE Magazine ISSUE 1.9 (December 2006). Read more www.darkreading.com: Startup Finds Phish in Browsers. Read more ddanchev.blogspot.com: Top Ten Scams of 2006. Read more www.avertlabs.com: So, how does one write mobile spyware? Read more   Vulnerabilities & Exploits securitytracker.com: HP Integrated Lights Out SSH Key Authentication Flaw Lets Remote Users Access the System. Read more securitytracker.com: Novell Modular Authentication Service Format String Flaw Has Unspecified Impact. Read more securitytracker.com: Sun Solaris ld.so.1 Bugs Lets Local Users Gain Root Privileges. Read more securitytracker.com: BLOG:CMS Include File Bug in 'NP_UserSharing.php' Lets Remote Users Execute Arbitrary Code. Read more   Tools: www.microsoft.com: Internet Explorer Administration Kit 7. Read more   News www.theregister.co.uk: Three critical patches star in MS update. Read more www.eweek.com: 'Logic Bomb' Backfires on Hacker. Read more www.securityfocus.com: Nessus flaw scanner groks SCADA. Read more blog.washingtonpost.com: Microsoft Tweaks Windows XP Wireless Security. Read more www.theregister.co.uk: Webmail hijack ruse leads to blackmail. Read more www.wired.com: Spammer Slammer Targets Politics. Read more www.telegraph.co.uk: Computers 'could store entire life by 2026'. Read more

. 13 December 2006 Guides, Papers, etc www.microsoft.com: Microsoft Security Bulletin Summary for December, 2006. Read more honeyblog.org: Monkey-Spider. Monitoring of Malicious Websites. Read more honeyblog.org: Efficient Observation of Botnets. Read more www.darkreading.com: The Beauty of Bots. Read more www.eweek.com: Search Engines Less Risky, but Problems Remain, Study Shows. Read more www.darkreading.com: Worms Get Smarter. Read more www.forbes.com: Why Spam Won't Go Away. Read more isc.sans.org: Microsoft Office 2004 (Mac OS X) update was a accident. (NEW). Read more www.darkreading.com: Symantec Adds Crypto to Backup. Read more www.cisco.com: Technical Overview: Preventing Worm and Virus Outbreaks with Cisco Self-Defending Networks. Read more www.avertlabs.com: Microsoft patches 133 Critical and Important Vulnerabilities in 2006. Read more www.physorg.com: How Much Will Windows Security Matter? Read more www.eweek.com: Audio: Microsoft Pulled It All Together in Vista RTM. Read more www.microsoft-watch.com: Vista Crack Means Big Trouble. Read more resources.zdnet.co.uk: 10 things you should know about privacy protection and IT. Read more www.phenoelit.de: Default Password List. Read more   Vulnerabilities & Exploits www.xdisclose.com: Orkut Multiple Cross Site Scripting Vulnerabilities. Read more www.xdisclose.com: Orkut Group Cross Site Scripting Vulnerability. Read more www.xdisclose.com: Orkut Email Address Disclosure Vulnerability. Read more securitytracker.com: Microsoft Internet Explorer May Disclose Contents of the Temporary Internet Files Folder to Remote Users. Read more securitytracker.com: Microsoft Internet Explorer DHTML and Script Error Handling Bugs Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Windows Media Player and Windows Media Format Runtime ASF File Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Windows Media Player ASX Playlist File Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Windows SNMP Service Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Windows Client-Server Run-time Subsystem Lets Local Users Gain System Privileges. Read more securitytracker.com: Microsoft Outlook Express Buffer Overflow in Processing Windows Address Book Files Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Windows Remote Installation Service TFTP Server Lets Remote Users Overwrite Files to Execute Arbitrary Code. Read more securitytracker.com: ShopSite Input Validation Hole Permits Cross-Site Scripting Attacks. Read more   Tools: www.niksoft.at: StartDreck (build 2.1.7) enLIGHTs you what windows loads during startup. Download www.heise-security.co.uk: DIY Service Pack. Installing Windows updates without an internet connection. Read more   News www.securityfocus.com: Microsoft patches IE, Windows Media flaws. Read more news.zdnet.co.uk: Microsoft plugs Windows Media hole. Read more blogs.msdn.com: Don't be fooled by Web fraud this holiday season. Read more www.securityfocus.com: UCLA alerts 800,000 to data breach. Read more www.theregister.co.uk: Inside a cyber-crook's Xmas wish list. Read more www.stuff.co.nz: Teenager ran internet banking scam. Read more www.smh.com.au: Teen hacker 'a very clever boy'. Read more www.zdnet.com.au: Kaspersky predicts Vista security holes. Read more www.theregister.co.uk: Pentagon hacker appeals US extradition. Read more www.itnews.com.au: Four million UK users hit by ID theft. Read more www.cio.in: Expert Warns on Wireless Security in Asia. Read more www.wired.com: Startup Makes Spammers Pay. Read more www.smh.com.au: Researchers developing tool to combat auction fraud. Read more news.com.com: Microsoft unveils public robotics software. Read more www.theregister.co.uk: McCain wants child porn rules for US message boards. Read more

. 12 December 2006 Guides, Papers, etc blogs.technet.com: The Case of the Mysterious Code Signing Failures. Read more isc.sans.org: PHP security: the scene might change (NEW). Read more www.eweek.com: The New Attack Pattern. Read more ddanchev.blogspot.com: Analysis of the Technical Mujahid - Issue One. Read more www.avertlabs.com: Fake charity sites: It�s that time of year again. Read more www.darkreading.com: Two Sides of Single Sign-On. Read more www.darkreading.com: Open-Source NAC. Read more www.darkreading.com: Blurring the Line Between SOC & NOC. Read more www.viruslist.com: Are all antivirus created equal? Read more www.f-secure.com: QuickTime Flaw is Cross Platform. Read more honeyblog.org: Capture - High Interaction Client Honeypot. Read more news.com.com: Playing it safe with Windows Vista. Read more technology.guardian.co.u: My PC's year of living dangerously online. Read more avanoo.wordpress.com: Why Google Sucks! Read more www.playfuls.com: IBM Promises New Memory Chip Technology. Read more www.wired.com: Wi-Fi as a Health Hazard. Read more   Vulnerabilities & Exploits labs.idefense.com: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability. Read more labs.idefense.com: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability. Read more www.xdisclose.com: Orkut Email Address Disclosure Vulnerability. Read more securitytracker.com: Ruby MIME Parsing Bug in cgi.rb Lets Remote Users Deny Service. Read more securitytracker.com: WAWI Bugs Let Remote Users View Directories and Remote Authenticated Users Execute Arbitrary Code. Read more securitytracker.com: Adobe ColdFusion Bugs Enable Cross-Site Scripting Evasion, Path Disclosure, and Internal Address Disclosure. Read more securitytracker.com: OFBiz Input Validation Hole Permits Cross-Site Scripting Attacks. Read more securitytracker.com: ThinkEdit Include File Bug in 'render.php' Lets Remote Users Execute Arbitrary Code. Read more   Tools: www.niksoft.at: StartDreck (build 2.1.7) enLIGHTs you what windows loads during startup. Download   News www.securityfocus.com: comScore receives spyware allegations. Read more www.securityfocus.com: Free bug scan offered for Java apps. Read more www.theregister.co.uk: Trojan targets unpatched Word flaw (again). Read more www.itnews.com.au: Experts warn of Media Player vulnerability. Read more www.vnunet.com: Four million UK users hit by ID theft. Read more news.com.com: Alleged NASA hacker's appeal set for New Year. Read more passivemode.net: Market Research Company Secretly Installs Spyware. Read more www.time.com: Hackers For Hire. Read more today.reuters.co.uk: Internet criminals to step up "cyberwar" in 2007. Read more www.nytimes.com: In Web Traffic Tallies, Intruders Can Say You Visited Them. Read more www.theregister.co.uk: BEA adopts virtual strategy with VMware. Read more www.theregister.co.uk: Online gambling poised to pull $528bn. Read more

. 11 December 2006 Guides, Papers, etc isc.sans.org: Another new Word 0-day, information & dat released by McAfee (NEW). Read more blogs.securiteam.com: Another, different Microsoft Word 0-day vulnerability reported. Read more www.f-secure.com: Yet another Word vulnerability. Read more www.avertlabs.com: �I Go Chop Your Dollar�. Read more www.rsasecurity.com: RSA Online Fraud Intelligence Report - Nov 2006. Read more www.eweek.com: The New Attack Pattern. Read more ddanchev.blogspot.com: Analysis of the Technical Mujahid - Issue One. Read more ddanchev.blogspot.com: Full List of Hezbollah's Internet Sites. Read more neosmart.net: Windows Vista's Hideous Wakeup Support. Read more www.betanews.com: Vista Minimum Requirements Unrealistic. Read more www.itwire.com.au: Vista: who's afraid to upgrade? Read more msmvps.com: Tweaking the RDP client. Read more podcast.dslextreme.com: Audio: KFI Tech Guy 308. Listen www.securityopus.com: ecurity OPUS - Call for Papers - March 22-23, 2007. Read more   Vulnerabilities & Exploits www.gentoo.org: Mozilla Firefox: Multiple vulnerabilities. Read more secunia.com: Microsoft Word Unspecified Code Execution Vulnerability. Read more securitytracker.com: Microsoft Word Lets Remote Users Cause Arbitrary Code to Be Executed. Read more www.frsirt.com: Sophos AntiVirus Scan Engine CPIO and SIT Files Handling Code Execution Vulnerabilities. Read more aluigi.altervista.or: Multiple vulnerabilities in Winamp Web Interface 7.5.13. Read more securitytracker.com: AOL Buffer Overflow in CDDBControl ActiveX Control Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: BrightStor ARCserve Backup Buffer Overflow in Discovery Service Lets Remote Users Execute Arbitrary Code. Read more   News www.computerworld.com: Security Researcher Defends Efforts to Find Flaws. Read more www.vnunet.com: Word flaw left out of patch Tuesday. Read more www.wired.com: E-Gold Gets Tough on Crime. Read more www.itrportal.com: A new Worm creeps all over Myspace. Read more www.vnunet.com: Experts warn of Media Player vulnerability. Read more www.techtree.com: Hackers Fool Vista into Activating! Read more www.informationweek.com: Inside Microsoft's Labs. Read more business.timesonline.co.uk: As Microsoft looks ahead, will Vista be the end of an era? Read more www.forbes.com: How Much Privacy? Read more www.kassa-kassa.be: ACE bank, the story. Read more

. 09 December 2006 Guides, Papers, etc blogs.securiteam.com: IE5 *was* pre-patched to VML vulnerability. Read more www.sophos.com: The threat of image spam explored in latest Sophos podcast. Read more www.smh.com.au: Spam is back with a vengeance as filters lose effectiveness. Read more www.f-secure.com: Weekend Reading - December 8th. Read more incredibill.blogspot.co: Botnet Attempts Photo Cart Vulnerability Attack. Read more incredibill.blogspot.co: Day Two of the Photo Cart Attack. Read more www.technewsworld.com: Can Your Firm Be Sued for a Data Breach? Read more ddanchev.blogspot.com: Censoring Seductive Child Behaviour. Read more www.darkreading.com: Credit Union Authenticates 'Bio-Rhythms'. Read more www.darkreading.com: Crossing the Crime Chasm. Read more www2.csoonline.com: A Review of Security in 2006. Read more www.informationweek.com: Spam 2.0 Tactics Will Boomerang, Symantec Predicts. Read more www.securityfocus.com: Password Management Concerns with IE and Firefox, part one. Read more www.podtrac.com: Audio: Windows Weekly 8: DEP, FUD, and Zune. Listen   Vulnerabilities & Exploits securitytracker.com: Net-SNMP Grants Write Access to Read-Only Objects on Systems Configured With 'rocommunity' and 'rouser' Tokens. Read more   Tools: secunia.com: Secunia Software Inspector. Read more capture-hpc.sourceforge.net: Capture High Interaction Client Honeypot Released. Read more   News www.computerworld.com: Florida man pleads guilty in DDoS attack. Read more www.theregister.co.uk: Malware gangs using 'KGB-tactics' to recruit tech grads. Read more www.cbc.ca: Criminals recruiting students as hackers: report. Read more www.timesdispatch.com: E-mail includes data on students. Read more www.boston.com: Health providers' Social Security numbers posted on state site. Read more www.forbes.com: How Much Privacy? Read more www.informationweek.com: Pirates Spoof Vista's Enterprise Activation. Read more www.computerworld.com: How Microsoft fights off 100,000 attacks per month. Read more www.securityfocus.com: HP pretexting scandal comes to partial close. Read more news.com.com: Senator: Illegal images must be reported. Read more arstechnica.com: YouTube allows users to record directly to site. Read more kierenmccarthy.co.uk: The lowdown on the Sex.com case. Read more

. 08 December 2006 Guides, Papers, etc www.f-secure.com: An open letter to domain registrars. Read more isc.sans.org: Windows Media Player - ASX Playlist Buffer Overflow (NEW). Read more isc.sans.org: Microsoft December advance patch notification (NEW). Read more www.quantenblog.net: Bypassing Virus Scanners Using MIME Encoding Tricks. Read more www.bleedingthreats.net: Malware Prevention through black-hole DNS. Read more blogs.authentium.com: Responsible Disclosure of Exploits. Read more www.viruslist.com: Latest Word vulnerability and the usual reminder. Read more blogs.technet.com: What �very limited, targeted attacks� Means. Read more www.f-secure.com: Word hole will remain open. Read more blogs.securiteam.com: MIME Encoding Content Normalizer (SMTP gateway attacks counter-measures). Read more blogs.guardian.co.uk: Missing Trojan file in Windows. Read more www.nytimes.com: Vista Is Ready. Are You? Read more www.networkperformancedaily.com: Vista's "Next Generation" TCP/IP Stack and the Enterprise. Read more blogs.msdn.com: File URIs in Windows. Read more www.varbusiness.com: Are Background Checks Necessary For IT Workers? Read more www.drivl.com: Matt craps on a bunch of ridiculous ideas about programming and code that Hollywood can't seem to stay away from. Read more www.smh.com.au: The internet bouncers. Software that protects children from online nasties. Read more   Vulnerabilities & Exploits www.intelliadmin.com: Zero Day Exploit Found in Windows Media Player. Read more blogs.securiteam.com: Microsoft Word 0-day Vulnerability FAQ - December 2006, CVE-2006-5994. Read more support.intel.com: Intel� LAN Driver Buffer Overflow Local Privilege Escalation. Read more securitytracker.com: osCommerce 'admin/templates_boxes_layout.php' Directory Traversal Bug Discloses Files to Remote Users. Read more securitytracker.com: 2X ThinClientServer Lets Remote Users Gain Administrative Access. Read more securitytracker.com: GnuPG OpenPGP Packet Stack Overflow Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: mod_auth_kerb Off-by-one Overflow Lets Remote Users Deny Service. Read more   Tools: insecure.org: Nmap 4.20 released. Read more   News www.nytimes.com: Spam Doubles, Finding New Ways to Deliver Itself. Read more www.thedenverchannel.com: Computer Hacking Results In Armed Police Raid. Read more www.securityfocus.com: E-mail, IM registry for sex offenders proposed. Read more www.esecurityplanet.com: Don't Open That Word File, Microsoft Warns. Read more www.theregister.co.uk: VXers dabble in mobile spyware. Read more www.computerworld.com: How Microsoft fights off 100,000 attacks per month. Read more apcmag.com: Pirates crack Vista Activation Server. Read more arstechnica.com: RIAA defendant targets Kazaa in new lawsuit. Read more www.forbes.com: Bitten By The Google Spider. Read more

. 07 December 2006 Guides, Papers, etc isc.sans.org: Climb a small mountain... (NEW). Read more www.f-secure.com: Guardian comments on ".bank" gTLD. Read more www.avertlabs.com: �Every Doctor is not Spyware Doctor�. Read more www.avertlabs.com: Want spies with that? Read more www.fortinet.com: Vocal phish revealed. Read more blogs.securiteam.com: High load reveals passwords. Read more www.securityfocus.com: Christmas Shopping: Vista Over XP? Read more www.insecuremagazine.com: (IN)SECURE Magazine ISSUE 1.9 (December 2006). Read more www.mcafee.com: Killing Botnets A view from the trenches. Read more sunbeltblog.blogspot.com: Electronic lottery notifications are always fake. Period. Read more www.ams.org: How Google Finds Your Needle in the Web's Haystack. Read more www.cs.vu.nl: A Platform for RFID Security and Privacy Administration. Read more en.hakin9.org: Snort_inline as a solution. Read more www.podtrac.com: Audio: KFI Tech Guy 306. Vista security, a better way to run Windows on a Mac, and cleaning a laptop keyboard... Listen   Vulnerabilities & Exploits securitytracker.com: Intel LAN Driver Buffer Overflow Lets Local Users Obtain Elevated Privileges. Read more securitytracker.com: BSD FireWire Driver fw_ioctl() Integer Signedness Error Lets Local Users Read Kernel Memory. Read more securitytracker.com: Citrix Presentation Server Client ActiveX Control Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: SAP Internet Graphics Server Lets Remote Users Remove Files. Read more securitytracker.com: SAP Internet Graphics Server Undocumented Features Let Remote Users Access Files, Perform Actions, and Deny Service. Read more securitytracker.com: Adobe Download Manager Stack Overflow Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Microsoft Word Unspecified Vulnerability Lets Remote Users Execute Arbitrary Code. Read more   Tools: passivemode.net: Sxip Releases ID Manager for Firefox. Read more   News www.theregister.co.u: eEye launches 0-day tracker site. Read more www.biosmagazine.co.uk: Call For More Secure Credit Card Transactions. Read more www.zdnet.com.au: Tokens no silver bullet for security: banks. Read more www.darkreading.com: DNS Attacks on the Rise. Read more news.com.com: Spyware fighters go after MP3 search site. Read more www.vnunet.com: Malware enters new phase. Read more www.darkreading.com: Bull Market for Cybercriminals. Read more www.networkworld.com: Microsoft Research fights critics, targets innovation. Read more www.terra.net.lb: Microsoft starts online library in challenge to Google Books. Read more www.nytimes.com: Once Again, Machine Beats Human Champion at Chess. Read more

. 06 December 2006 Guides, Papers, etc blogs.securiteam.com: The newest Word 0-day - Microsoft was aware since 21st November. Read more www.f-secure.com: Hole in Word. Read more www.viruslist.com: An inventive approach. Read more www.informationweek.com: How Vista Lets Microsoft Lock Users In. Read more   Vulnerabilities & Exploits research.eeye.com: Zero-Day Tracker. Read more www.frsirt.com: Microsoft Word Document Handling Memory Corruption and Code Execution Vulnerability. Read more securitytracker.com: Xerox Document Centre Input Validation Flaw in 'hostname' Parameter Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Hanako File Buffer Overflow Lets Remtoe Users Execute Arbitrary Code. Read more securitytracker.com: IBM Tivoli Storage Manager Request Processing Buffer Overflows Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Symantec LiveState Lets Local Users Gain System Privileges. Read more   Tools: enterprise.linux.com: PHREL beats back DNS server attacks. Read more specialreports.linux.com: Bastille: rated security with education. Read more   News www.securityfocus.com: MySpace teams to create sex-offender database. Read more www.securityfocus.com: Hack allows anyone to play TiVo files. Read more www.rsf.org: Youtube and New York Times sites blocked as Iran steps up censorship of foreign content. Read more economictimes.indiatimes.com: Web censorship can be sticky. Read more www.darkreading.com: CyberGangs and Thieves: An Unholy Alliance. Read more www.itweek.co.uk: IE7 targeted by adware firms. Read more www.theregister.co.uk: Malware wars: Are hackers on top? Read more www.theregister.co.uk: Bogus anti-spyware firm fined $1m. Read more www.theregister.co.uk: Phishing worm hooks MySpace users. Read more www.iht.com: 'Bad guys are winning' despite fight against spam. Read more

. 05 December 2006 Guides, Papers, etc isc.sans.org: Fun With Windows Netstat (NEW). Read more www.avertlabs.com: QuickTime �feature� + MySpace vulnerability = �Fun� & Profit! Read more www.eweek.com: Is Online Banking Too Dangerous? Read more www.mattcutts.com: How Google handles hacked sites. Read more www.computerworld.com: Stopping Data From Flying Off to Google. Read more myappsecurity.blogspot.com: ID Thieves Turn Sights on Smaller E-Businesses. Read more news.com.com: Ten things to consider before taking the Vista plunge. Read more www.newsfactor.com: Internet Explorer Back in the Game. Read more www.informit.com: Ten Tips for Smarter Google Searches. Read more www.windowsitpro.com: Opinion: Microsoft's Revised WGA Version Still Annoying (Just like the popup on this site). Read more   Vulnerabilities & Exploits myappsecurity.blogspot.com: Ajax Worm - Proof of Concept. Read more securitytracker.com: F-Prot Antivirus CHM File Buffer Overflow and ACE Archive Infinite Loop Lets Remote Users Execute Arbitrary Code and Deny Service. Read more securitytracker.com: Windows Print Spooler Subsystem GetPrinterData() Function Lets Remote Users Deny Service. Read more securitytracker.com: PHP Upload Center Include File Bug in 'activate.php' Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: Apple AirPort Extreme Beacon Frame Processing Bug Lets Remote Users Deny Service. Read more securitytracker.com: SquirrelMail Input Validation Flaws in Compose, Draft, and HTML Viewing Functions Permit Cross-Site Scripting Attacks. Read more   News www.techworld.com: Vista vulnerable to a third of malware. Read more money.guardian.co.uk: Banks hiding online fraud, say police. Read more www.atg.wa.gov: Attorney General McKenna Announces $1 Million Settlement in Washington�s First Spyware Suit. Read more www.scmagazine.com: Some websites reporting common error code contain adware. Read more

. 04 December 2006 Guides, Papers, etc www.f-secure.com: New MySpace worm using a Quicktime exploit. Read more isc.sans.org: Phishing and Spamming via IM (SPIM). Read more www.2-spyware.com: The mysterious jupk.com infection. Read more blogs.authentium.com: I am surprised. Read more sunbeltblog.blogspot.com: The revolting Revolt-Search.com. Read more www.dfw.com: You're never too young for identity theft. Read more www.smh.com.au: Warning over use of repeat passwords. Read more reviews.zdnet.co.uk: Should businesses upgrade to Vista? Read more www.apcstart.com: Inside Vista's new image-based install. Read more tech.blorge.com: Definitive guide: Windows Vista and XP head to head. Read more   Vulnerabilities & Exploits securitytracker.com: Novell ZENworks Asset Management Integer Overflows Let Remote Users Execute Arbitrary Code. Read more   News www.theregister.co.uk: Jittery yanks warn of Jihadist internet threat. Read more www.nytimes.com: Who Did What in China�s Past? Look It Up, or Maybe Not. Read more www.guardian.co.u: Censorship fears rise as Iran blocks access to top websites. Read more www.computerworld.com: Tension between security vendors, bug hunters continues to simmer. Read more www.nytimes.com: Health Hazard: Computers Spilling Your History. Read more www.theregister.co.uk: PDFs open critical hole in Internet Explorer. Read more business.scotsman.com: Curse of the keystroke loggers who cost businesses �1bn a year. Read more www.itbvirus.com: MCAfee Avert Labs Unveils Predictions For Top Ten Security Threats In 2007 As Hacking Comes Of Age. Read more news.zdnet.com: Another suspected NASA hacker indicted. Read more securitywatch.eweek.com: EveryDNS Under Botnet DDoS Attack. Read more www.vnunet.com: Attackers target Russian hosting firm. Read more news.zdnet.co.uk: UN agency warns of serious online risks. Read more www.apcstart.com: Windows Vista crack is actually a trojan. Read more www.usatoday.com: Judges fear dangers of online 'rat' database. Read more www.itwire.com.au: The race is on to build Vista security products. Read more www.itwire.com.au: Vista more secure than XP? Read more www.computerworld.com: IT: Virtual PCs Show Promise but Remain Unproven. Read more computerworld.co.nz: Researchers seek to save VoIP from security threats. Read more www.itnews.com.au: Cyber threat to Wall Street not high, according to experts. Read more www.theregister.co.uk: Your data is protected: but is it protected enough? Read more austringer.net: Me Against Google. Read more www.kansascity.com: Software used to predict who might kill. Read more

. 02 December 2006 Trojans of November Guides, Papers, etc isc.sans.org: 404dnserror Adware. Read more blogs.securiteam.com: perl segfault? Read more www.viruslist.com: Infected Valuehost servers. Read more securitywatch.eweek.com: Anti-Virus Is Dead, D-E-A-D, Dead! Read more biztechmagazine.com: Protect Your Assets from Search Engines. Read more www.biztechmagazine.com: Never Heard of XSS? Read more www.biztechmagazine.com: You've Got Phish. Read more www.whitehatsec.com: Myth-Busting AJAX (In)security. Read more www.pldsecurity.de: System Backdoors Explained. Read more www.infogreg.com: Advanced Survival Techniques in Malware. Read more www.technewsworld.com: Should the Government Have Access to Personal E-Mails? Read more www.itmanagersjournal.com: Nine ways to combat spam. Read more www.infoworld.com: Virtual concerns. Read more blogs.msdn.com: Chinese and Hebrew IE7 Released. Read more money.cnn.com: How Vista will take over your living room. Read more www.newsfactor.com: Is Windows Vista Immune to Malware? Read more   Vulnerabilities & Exploits securitytracker.com: KDE kdegraphics JPEG kfile-info Plug-in EXIF Parsing Flaw Lets Remote Users Deny Service. Read more securitytracker.com: Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks. Read more securitytracker.com: Sun Java System Web Server Lets Remote Users Conduct HTTP Request Smuggling Attacks. Read more securitytracker.com: Sun Java Application Server Lets Remote Users Conduct HTTP Request Smuggling Attacks. Read more securitytracker.com: Solaris SIGKILL/PCAGENT Race Condition Lets Local Users Deny Service. Read more securitytracker.com: GNOME Structured File Library ole_init_info() Heap Overflow Lets Remote Users Execute Arbitrary Code. Read more securitytracker.com: MailEnable IMAP Bugs Let Remote Authenticated Users Deny Service and Potentially Execute Arbitrary Code. Read more   Tools: www.thesimpledollar.com: 30 Essential Pieces Of Free (and Open) Software for Windows. Read more   News www.securityfocus.com: Jihadists threatens attacks for Christmas. Read more www.computerworld.com: Security analysts downplay cyberterror threat. Read more www.infoworld.com: Jihadists publish cyber security magazine. Read more news.com.com: Wikipedia lays bare two versions of China's past. Read more www.darkreading.com: Hacker Cuts Swath Through US Government Computers. Read more www.itnews.com.au: ActiveX flaw leaves Adobe apps vulnerable. Read more www.itnews.com.au: McAfee: Top 2007 threats will be money-makers. Read more www.darkreading.com: Spying on Spyware. Read more www.securityfocus.com: Apple DMG flaw not so serious? Read more www.cbronline.com: Stolen laptops illustrate need to secure remote data. Read more

. 01 December 2006 Guides, Papers, etc www.cs.washington.edu: Devices That Tell On You: The Nike+iPod Sport Kit. Read more www.eweek.com: Sweatshops: The Ultimate Botnet? Read more www.f-secure.com: It's been a while. Bagle. Read more isc.sans.org: US DHS banking alert (NEW). Read more www.avertlabs.com: On defensive technologies turning offensive and vice-versa..Read more www.mcafee.com: Audio: McAfee Avert Labs Unveils Predictions For Top 10 security threats. Download podcast now. i.cmpnet.com: Audio: Interview With Oracle's Ted Farrell. Listen www.podtrac.com: Audio: Security Now 68: Q&A 12. Listen www2.csoonline.com: Security In Microsoft Vista? It Could Happen. Read more www.microsoft.com: Windows Vista Step-by-Step Guides for IT Professionals. Read more www.esecurityplanet.com: 'Tis the Season (To Get Scammed). Read more securitywatch.eweek.com: Cracking the BlackBerry with a $100 Key. Read more   Vulnerabilities & Exploits securitytracker.com: KOffice Integer Overflow in KPresenter May Let Remote Users Execute Arbitrary Code. Read more securitytracker.com: Google Search Appliance UTF-7 Processing Bug Permits Cross-Site Scripting Attacks. Read more   Tools: www.honeynet.org: The Honeynet Project and Honeynet Research Alliance are happy to announce the release of Honeysnap 1.0. Read more sourceforge.net: Gamja : Web vulnerability scanner. Read more reedarvin.thearvins.com: PWDumpX allows a user with administrative privileges to retrieve the encrypted password hashes and LSA secrets from a Windows system. Download   News news.zdnet.co.uk: US issues al-Qaeda cyberattack warning. Read more today.reuters.com: Financial firms warned of Qaeda cyber attack. Read more www.zdnet.com.au: Vista vulnerable to malware from 2004. Read more www.latimes.com: Computer expert accused of hacking government sites. Read more www.theregister.co.uk: UK2 victim of IP hijacking. Read more news.com.com: Most security tools not quite ready for Vista. Read more www.darkreading.com: Month of Kernel Bugs Ends in Controversy. Read more www.darkreading.com: New Threats Loom for 2007. Read more www.vnunet.com: Phishers don't like Mondays. Read more www.cbronline.com: Amegy increases online banking security measures. Read more www.biosmagazine.co.uk: Hackers Can Eavesdrop 70% Of Web Calls. Read more www.breitbart.com: Data on U.S. military's Iraqi operations leaked onto Internet+. Read more www.terra.net.lb: Gates charity funds free Internet access in Eastern Europe, Botswana. Read more redtape.msnbc.com: ATM system called unsafe. Read more

Copyright� MegaSecurity.org