More Blog Comments
The other day I posted about blog comments. I suggested that many blog comments are generated by an artificial intelligence program. These comments are posted only to get a hyperlink into the internet....
View ArticleOracle DBMS Firewall Now MySQL Certified
Well, that’s good news… Our MySQL instances are now safe from SQL Injections… ₨
View ArticleMoving House
Yes, we are :)An inevitable move, this. After all, Sunbelt Software has been part of GFI Software for more than a year now.This didn't happen overnight, though. We tip our hats to our colleagues in...
View Article[Honeypot Alert] Is-human WordPress Plugin Remote Command Execution Attack...
Our web honeypot logs picked up an attack aimed at exploiting the Is-human Wordpress Plugin Remote Command Execution Vulnerability as described here on exploit-db: # Exploit Title: is-human (1.4.2 and...
View ArticleUnfixed Skype Vulnerability Reveals User Location and Habits
Microsoft admitted this week that months after the discovery it is still working to fix a Skype vulnerability that potentially can reveal a user's location and download habits. As of Jan. 12, the...
View ArticleNetwork-based Malware Detection: The Impact of the Cloud
Is it that time already? It’s true, it’s time to wrap up our series on Network-based Malware Detection. Just to refresh your memory, we started by talking about the need to start blocking malware more...
View ArticleHack Naked TV Episode 24
In this episode we talk about Symantec, Source Code and good places to eat in Park City. Links for this Episode: Symantec Source Leaked This Social Engineering thing is catching on Small Restaurant...
View Articlersyslog will remain GPLv3 licensed
Licensing is though topic. I tried to explain some of the upcoming rsyslog license changes with yesterday's blog post. While I tried to cover all aspects, I have probably manged to create some...
View Article"Sanitize Input"
When application security was still in it’s infancy, there were discussions on how to protect applications from newly discovered injection vulnerabilities. "Sanitize Input" was a popular solution that...
View ArticleDisappointing press reactions…
Friday, 13th... Systemd v38 went out recently and it includes a journald test release. That's great and congrats to the systemd team to that release. What me saddens is the that the press still conveys...
View ArticlePolice rescue man and daughter kidnapped by email scammers
A man and his daughter are rescued by police after they were lured to South Africa by a scam email telling them they had won a fortune in a lottery.
View ArticleTop 3 NoVA Infosec Blog Posts of the Week
It’s that time of the week again: the time where we take a look at what local security bloggers have been up to. You can take a look at what local security bloggers have been up to but if you can’t...
View ArticleIf any of you missed the post on slashdot …thought this was interesting
">Visualizing malware
View ArticleOracle Critical Patch Update January 2012
Oracle has published its preview for the January 2012 CPU scheduled for next Tuesday January, 17. Most of their products, including the acquisitioned PeopleSoft, JD Edwards, Weblogic and the recent...
View ArticleSBN Sponsor Post
Attend the RSA Conference webcast .Using Online Advertising to Find Out if Your Data is Valuable to a Criminal. on January 25th.http://bit.ly/sGUunJ
View ArticleSANS Mobile Device Security Summit 2012: The Growing and Constantly Changing...
Mobile Devices continue to evolve, and with each development there are becoming more efficient tools employees increasingly rely on to conduct both their corporate and personal business. Portable...
View ArticleThe intersection of work and home
In my previous post I questioned whether we bring our work home with us. In the comments Mrs. Y Iswhy brought up another aspect of security and taking our work home with us that I thought deserved a...
View ArticleStraight talk about compliance from a security viewpoint
Greetings folks! This post kicks off my Enterprise Security series ... and this post will kick off with a bang on compliance. Let's get some discussion going, I know you all have a lot to say on...
View Article