SEARCH RESULTS
 
Showing 1-10 of 54 records
 
Expand article

Updated Microsoft Security Assessment Tool

The Article has images
2008-12-02 04:13:03 by Steve Riley in Steve Riley on Security
 
Greetings. In case you havent already read about it, we recently updated the Microsoft Security Assessment Tool (MSAT). Version 4.0 hit the web on 31 October. Its been four years since the initial release, and two years since the prior version. Between then and now your security world has evolved a lot, and the tool now reflects that Read more:...
 
 
 
 
 
Expand article

Obfuscating Fast-fluxed SQL Injected Domains

The Article has images
2008-07-17 15:31:06 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
It's all a matter of how you put it, and putting it like represents a good example of tactical warfare, namely, combining different tactics for the sake of making it harder to keep track of the impact of a particular SQL injection campaign. Consider the following examples of obfuscated domains, naturally being in a fast-flux in the time of the...
 
 
 
 
 
Expand article

Who could use some extra cash?

The Article has images
2008-03-04 11:27:25 by HASH0x8b1bf78 in StillSecure, After All These Years
Could you use an extra 2k? How about an extra 5k? Here is the best part, you don't have to do anything illegal and you will actually feel good about doing it! Here at StillSecure we are growing again. We have a number of openings up on our web site under the careers section. Every so often we designate certain jobs as "hot jobs". If you refer...
 
 
 
 
 
Expand article

Who could use some extra cash?

The Article has images
2008-03-04 12:27:25 by ashimmy in StillSecure, After All These Years
Could you use an extra 2k? How about an extra 5k? Here is the best part, you don't have to do anything illegal and you will actually feel good about doing it! Here at StillSecure we are growing again. We have a number of openings up on our web site under the careers section. Every so often we designate certain jobs as "hot jobs". If you refer...
 
 
 
 
 
Expand article

Quantitative Analysis = "Highly" Technical Analysis (?)

2007-02-07 09:34:00 by Jomni in Risk Management Quant
 
Branding Quantitative Analysis as "Technical Analysis" will probably bring in some violent reactions from quants . But I just want to point out the similarities that they share. In fact, it can be seen that Quantitative Analysis is a higher form of Technical Analysis Technical Analysis is commonly described as Charting . It is the study of...
 
 
 
 
 
Expand article

Google Spamming Us

2007-12-20 22:11:11 by RSnake in ha.ckers.org web application security lab
 
You know, we get some really odd traffic. Some of it good, some of it not so much. Lets take a look at some of Googles traffic since its a slow day. If nothing else its good for a laugh. First lets look at Google trying to hack us - XSS style 66.249.73.40 - - [26/Nov/2007:01:53:58 +0000] GET /blog/?%22%3E%3Cscript%3Ealert(1)%3C/script%3E...
 
 
 
 
 
Expand article

Apple's Tiger and Leopard get patched up

2007-12-28 13:15:45 by Editor in ElectricNews.net - SECURITY
 
It's download time again for Mac OS X users, as 31 new security-related fixes for both Tiger and Leopard have been made available by Apple
 
 
 
 
 
Expand article

Inside the Chinese Underground Economy

The Article has images
2007-12-09 22:34:23 by HASH0x89e9090 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
Here's a very detailed , and recently released event-study on Malicious Websites and Underground Economy on the Chinese Web , and this is how they assessed the high activity at the underground related forums Unlike the US or EU blackhats communities, Chinese blackhats are typically not familiar with IRC (In-ternet Relay Chat). They typically...
 
 
 
 
 
Expand article

Blue Box #69: Linksys SPA-941 vulnerability, SIP DDoS, New release of SIPVicious, Asterisk security roadmap, other VoIP security news, listener commen

2007-10-27 14:33:08 by HASH0x89c84bc in Blue Box: The VoIP Security Podcast
 
Synopsis: Blue Box #69: Linksys SPA-941 vulnerability, SIP DDoS, New release of SIPVicious, Asterisk security roadmap, other VoIP security news, listener comments and more Welcome to Blue Box: The VoIP Security Podcast #69, a 46-minute podcast from Dan York and Jonathan Zar covering VoIP security news, comments and opinions Download the show...