While teaching the defensive web app security classes with SANS, I often hear I have been filt …(more)…
.::anti-abuse.com::.
Security Revealed
Author Archive
Input filtering and escaping in SQL injection mitigation, (Mon, Dec 1st)
Posted in December 1st, 2008
Comments Off
Call for volunteers - Web Honeypot Project, (Mon, Dec 1st)
Posted in December 1st, 2008
At SANS Internet Storm Center, we are always researching and monitoring the latest trends of attacks …(more)…
Comments Off
Tips on Responding to DDoS Incidents, (Wed, Nov 19th)
Posted in December 1st, 2008
The incident handling cheat sheets in an earlier diary applied to many types of security incidents. …(more)…
Comments Off
Possible Mumbai Scams?, (Sat, Nov 29th)
Posted in November 30th, 2008
As we all have been observing the last few days, there was an terrorist attack on Mumbai, Indi …(more)…
Comments Off
Ubuntu users: Time to update!, (Sat, Nov 29th)
Posted in November 29th, 2008
Well, I just have one Ubuntu running (my other linux are pure Debian and fedora), but I think …(more)…
Comments Off
MS - new malware using an ms08-067 exploit gained momentum, (Wed, Nov 26th)
Posted in November 26th, 2008
In Tuesday’s blog More MS08-067 Exploits Microsoft said that new malware using an ms08-0 …(more)…
Comments Off
The beginnings of a collaborative approach to IDS, (Tue, Nov 25th)
Posted in November 26th, 2008
Well I think since today has been a rather busy first day on the job I would add one mor …(more)…
Comments Off
Tmobile G1 handsets having DNS problems?, (Tue, Nov 25th)
Posted in November 26th, 2008
John Kuhn Sent in the following links, which are of some interest.
http://forums …(more)…
Comments Off
OS X DNS Changers part three , (Tue, Nov 25th)
Posted in November 25th, 2008
Well it looks like my first day on duty I have the pleasure of sharing the latest and greatest in OS …(more)…
Comments Off
2 Cheat Sheets for Incident Handling, (Wed, Nov 19th)
Posted in November 25th, 2008
People only see what they are prepared to see. — Ralph Waldo Emerson
Maybe your syste …(more)…
Comments Off
Picture Printing Kiosks & Flash Memory Devices, (Sat, Nov 22nd)
Posted in November 22nd, 2008
As a follow-uptoyesterday’s diary entry by Mark Hofman. …(more)…
Comments Off
To USB or not to USB, well not in the DoD - what do you do?, (Fri, Nov 21st)
Posted in November 21st, 2008
To most of you this is no longer news. The DOD issued orders that USB drives and other removable dev …(more)…
Comments Off
Large quantity SQL Injection mitigation , (Thu, Nov 20th)
Posted in November 20th, 2008
Comments Off
An Ad for DDoS Services - Network, Phone, Competition, (Wed, Nov 19th)
Posted in November 20th, 2008
The oldfashioned way to launch a network DDoS attack involved building one’s own bot network that wo …(more)…
Comments Off
Security Awareness Training is Boring, (Wed, Nov 19th)
Posted in November 19th, 2008
I love the directness of Marcum Ranum’s perspective on security awareness training. If it was …(more)…
Comments Off
Reminders to check back, (Tue, Nov 18th)
Posted in November 18th, 2008
Alot of people, especially those that follow the RSS feed will get an alert when we post a new artic …(more)…
Comments Off
Plaintext Recovery Attack Against OpenSSH, (Tue, Nov 18th)
Posted in November 18th, 2008
This morning we’ve received a couple emails and a post in our IRC channel (#dshield on irc.freenode …(more)…
Comments Off
Critical update to Adobe AIR, (Mon, Nov 17th)
Posted in November 18th, 2008
The folks at Adobe have released a bulletin and update to Adobe AIR that they classify as critical. …(more)…
Comments Off
Finding stealth injected DLLs, (Mon, Nov 17th)
Posted in November 18th, 2008
I’ve mentioned Volatility here before and I use it in my day job doing malware analysis. The p …(more)…
Comments Off
How are you coming with that IPv6 migration?, (Mon, Nov 17th)
Posted in November 18th, 2008
We’ve known for a number of years that IPv6 was coming. In fact, in some parts of the world, i …(more)…
Comments Off
New Tool: NetWitness Investigator, (Mon, Nov 17th)
Posted in November 17th, 2008
A new freeware version of Netwitness’ core product, NetWitness Investigator, was made available toda …(more)…
Comments Off
A new cheat sheet and a contest, (Mon, Nov 17th)
Posted in November 17th, 2008
Our friend, Jeremy Stretch, over at packetlife.net has posted another of his excellent cheat sheets, …(more)…
Comments Off
Detection of Trojan control channels, (Sun, Nov 16th)
Posted in November 16th, 2008
Recently I was working with an organization whose network had been deeply compromised by a persisten …(more)…
Comments Off
More updated tools, (Fri, Nov 14th)
Posted in November 14th, 2008
Just like a London bus, you wait for ages and three come at once. Roseman brings us news that Sysint …(more)…
Comments Off
Some recently updated tools, (Thu, Nov 13th)
Posted in November 14th, 2008
A few of the tools I’m rather fond of have been updated recently, if any of our readers use them, yo …(more)…
Comments Off
New Firefoxen and Seamonkey out, (Thu, Nov 13th)
Posted in November 13th, 2008
New versions of FIrefox 2 3 were released this evening. Firefox 2 …(more)…
Comments Off
Thoughts on Security Intelligence (McColo Corp alleged spam/malware host knocked offline), (Wed, Nov 12th)
Posted in November 12th, 2008
Based on the investigative research of the Washington Post’s Brian Krebs, US-based McColo has been t …(more)…
Comments Off
Advertisments
Popular Tags
Recent Entries
- Recent Firefox extensions for tab addicts
- SB08-336: Vulnerability Summary for the Week of November 24, 2008
- [3/5] RakhiSoftware Shopping Cart Multiple Vulnerabilities
- Bugtraq: [SECURITY] [DSA 1673-1] New wireshark packages fix several vulnerabilities
- Bugtraq: [SECURITY] [DSA 1674-1] New jailer packages fix denial of service
- Bugtraq: [SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting
- Nintendo 64 crammed into a NES
- A real gift this holiday season…delete it.
- Installing Cherokee Web Server With PHP 5 & MySQL 5 Support On Ubuntu 8.10
- Managing your MP3s with Zina
Recent Comments
- Keine Kommentare vorhanden.
Social Network
| M | T | W | T | F | S | S |
|---|---|---|---|---|---|---|
| « Nov | ||||||
| 1 | 2 | 3 | 4 | 5 | 6 | 7 |
| 8 | 9 | 10 | 11 | 12 | 13 | 14 |
| 15 | 16 | 17 | 18 | 19 | 20 | 21 |
| 22 | 23 | 24 | 25 | 26 | 27 | 28 |
| 29 | 30 | 31 | ||||
Subscribes
Meta
Archives
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
- July 2006
- June 2006
- May 2006
- April 2006
- March 2006
- February 2006
- January 2006
- December 2005
- November 2005
- October 2005
- August 2005
- July 2005
- June 2005
- May 2005
- January 2005
- November 2004
- October 2004
- September 2004
- January 1970
- December 1969