[Honeypot Alert] PhpMyAdmin setup.php RFI Attacks Detected
SpiderLabs is the corporate sponsor of the WASC Distributed Web Honeypots Project which is an awesome research project to identify automated web attacks. I was looking in our central ModSecurity...
View ArticleTrustKeeper Scan Engine Update
Summary A remote code execution vulnerability in Samba was disclosed last week, which affects Samba versions 3.0.x – 3.6.3 and could allow root access to an affected system from an anonymous user....
View ArticleOK, time to review a few submissions for #BlackHat … there’s a ton of them …
OK, time to review a few submissions for #BlackHat ... there's a ton of them already!
View ArticleEmail with notification that parcel can not be delivered by US Postal Service...
MX Lab, http://www.mxlab.eu, started to intercept a new trojan distribution campaign by email with the subjects like: Get your parcel Please get your parcel Print your postal label Your delivery status...
View ArticleWeb Malware Trends and the Mac Flashfake / Flashback Outbreak
This has been an interesting couple of weeks in the Anti-Virus world, specifically in the malware business for notebooks and desktops running the MAC OS. Securelist put out a very interesting post...
View ArticleChallenges in placing information security teams in the right organizational...
I often write blogs based on what crosses my inbox during a week; and recently I saw just enough articles on who security should report to that I thought I’d select it as the topic du jour. (Much like...
View ArticleNadim Kobeissi’s CryptoCat
Fascinating story by New York Time's reporter Jim Dwyer, focusing on a new cryptography tool ostensibly for non-cryptographers, namely CryptoCat.
View ArticleWait, what? Someone has to look at those logs?
Anton Chuvakin has a good post over on the Gartner blog about security monitoring and cloud systems. Depending on your point of view and/or experience, you may think his comments are thought...
View ArticleWood Helmets
A company in Oregon is out to prove that wood helmets make more sense than the foam and plastic ones everyone loves to hate. Wood…can, with sufficient energy, be crushed and absorb significant energy,...
View ArticleSBN Sponsor Post
April Webcast: register now for our upcoming webcast, “Large Scale Cloud Forensics” at 2pm EST April 25th.http://bit.ly/xOGmy0
View ArticleFBI Rolls Eyes to Prevent Internet Outage
We’ve discussed this topic before in our “Operation Deadline Extension” article but in the month since that post, it seems a significant number of bots are still reporting into the two temporary DNS...
View ArticleHave you seen this picture of yours in attachment?? Three Facebook friends...
A series of emails with malware attachments have been widely distributed in the last few days. The emails alert the recipient about a picture of themselves (or an ex-girlfriend) that has been...
View ArticleWeek 16 in Review – 2012
Event Related Hackito Ergo Sum 2012 TALKS // Hackito Ergo Sum 2012 – 2012.hackitoergosum.org In this presentation we will cover critical aspects of web applications, and how these techniques can be...
View ArticleNational Collegiate Cyber Defense Competition Champion Crowned
Top three finalists from University of Washington, U. S. Air Force Academy, and Texas A&M University
View ArticleSophos Publishes ‘Dirty Dozen’ Report — India Takes The Spam Crown
Malicious spam and phishing increases, while overall volumes dip
View ArticleLookout Announces Partnership With Deutsche Telekom
Partnership focuses on distribution and joint innovation
View ArticleWhat Apple Malware Grace Period?
On Friday Forbe’s columnist Andy Greenberg wrote a very interesting piece entitled “Cybercrime Game Theory: Why Apple’s Malware Grace Period Ended Early.” In it he discusses how SourceFire researcher...
View Article