Oracle released its quarterly Critical Patch Update today. This quarterly update contains 45 new sec …(more)…
Security Revealed
Oracle released its quarterly Critical Patch Update today. This quarterly update contains 45 new sec …(more)…
The page which allows you for new diary notifications was broken and is now fixed again (see http:// …(more)…
We got a couple of users forwarding firewall logs to the handlers\at/sans.org e-mail address …(more)…
It appears that Symantec’s anti-virus definitions (July 15th, rev 2) had a false positive on Filezil …(more)…
It’s true, I’m completely guilty.
Last week I published a story that Scrap shared with me about a student in his class causing problems.
The story was immediately plastered at digg.com and reddit.com and shot up through the rankings like crazy.
Vincent, a f
We got reactions to some of our previous stories that some of the patch support relating to the rece …(more)…
An advisory has been issued by Symantec for their Backup Exec product. According to the adviso …(more)…
Sunbelt Software has announced the availability of a patch to fix the problems that have occurred wi …(more)…
We have received a number of reports from our readers indicating that they are receiving a large amo …(more)…
According to an article on line at ZDNet there is yet another potential problem with Java.
ne …(more)…
Recently we were contacted by Rosario Valotta who shared his latest research paper and a proof of concept of what he defines to be a cross webmail worm (XWW). Rosario implemented the worm in order to demonstrate its significant negative impact that could have on unaware users of famous webmail providers which are vulnerable to XSS. He named the worm "Nduja connection".
A PoC of the first cross webmail worm (XWW) called "Nduja connection". This paper is a very interesting read, supported by a very nice video demonstration of the worm.
This patch was initially only for office on windows, however some MAC users of office may have …(more)…
So I’m having a conversation on the phone with Scrap this morning and he relayed this little story from his adventures as a professor of information security studies at a local school. I’m going to share this story with you and include my usual warning and disclaimer: Put your beverage down. Do not attempt to drink beverage while reading this. SecurityMonkey is not responsible for liquids spilled in your keyboard or all over your screen!
Scrap tells the story…
So I’
The linked paper explains how Anti Forensics are currently being conducted by hackers, what methods they have of hiding information and what the future holds in this field.
It seems there are a number of readers struggling with the MS07-040 patch for the .NET framework on …(more)…
Black Tuesday, Reboot Wednesday, , lets all distribute patches and vulnerability information T …(more)…
Pand0ra sent me this story that had me shaking my head and laughing my monkey arse off at the same time!
Take it away Pand0ra…
So I heard about an incident at work here the other day when my co-worker forward me this message.
Problem: The main server power grid went down at the X data center, causing various devices to go down. Once the power was restored, many of the systems were not able to recover on their own, including the Storage Area Network (SAN).
Cause Category: Hum
This last couple of months have been nothing but challenges for this monkey.
Update:
- Paws are darn near 100% but I’m not pushing them.
- During my many doctor visits for the paws a few other items came up that I’m tackling right now. Nothing life threatening, however I’m in bed very early every night and sleeping for at least 8 hours a night (doctor’s orders – complete with meds!). Apparently the human-chimp hybrid body needs sleep or something. Whatever.
- I’m preparing for BlackHat
Several security vulnerabilities have been found in ISS’s Proventia appliance, these vulnerabilities allow remote attackers to cause cross site scripting vulnerabilities in their user interface, cause the PHP scripts running on the server to include remote files as well as due to the usage of old OpenSSH (and in compatibility mode) to allow brute forcing of usernames and passwords with a timing attack.
No, I’m not restarting the browser wars. They have been fought and lost …(more)…
An exploit has been made public for a privilege escalation in WinPcap, a DLL used by many security t …(more)…
Readers has been reporting emails with subjects such as:
Spyware Detected!
Malware Alert …(more)…
Robert sent us some nice analysis earlier today about some hostile ads he discovered at Google.nbsp …(more)…
On Friday we reported that there were connectivity issues with Yahoo. Initially we thought tha …(more)…
What is wrong with PayPal lately? I am a bit surprised that PayPal was until yesterday vulnerable to that XSS vuln which was submitted by 142TeeTH on the 22th of June… Until early today, no prompt action was taken whatsoever by PayPal. Discovering security vulnerabilities in the largest online payment processor was never too easy – even underestimated ones like XSS.
| M | T | W | T | F | S | S |
|---|---|---|---|---|---|---|
| « Jun | Aug » | |||||
| 1 | ||||||
| 2 | 3 | 4 | 5 | 6 | 7 | 8 |
| 9 | 10 | 11 | 12 | 13 | 14 | 15 |
| 16 | 17 | 18 | 19 | 20 | 21 | 22 |
| 23 | 24 | 25 | 26 | 27 | 28 | 29 |
| 30 | 31 | |||||
