The rise of pro-kosovo web site defacement groups was marked in April, 2008, with a massive web site defacement spreading pro-kosovo propaganda. The ongoing monitoring of pro-kosovo hacking groups indicates an ongoing cyberwar between pro-serbian supporting hacktivists successfully defacing Albanian
Genetec has announced that the City of Manchester, United Kingdom, has selected Omnicast 4.1 for a major system upgrade project. With approximately 700 analog cameras spread throughout the city, the City of Manchester is gradually migrating to IP, and all
G4S Security Services (UK) is to provide specialist security and stewarding services simultaneously at a number of prestigious events on Saturday 24 May. G4S will be responsible for security and stewarding at the Scottish Cup Final at Hampden Park, Glasgow,
Belgian ministers have complained that Chinese hackers are targeting their country's computer systems.According to media reports, Justice Minister Jo Vandeurzen has claimed that hacking attacks against the Belgian Federal Government have originated in China, and are likely to have been
Glenbrook's Carol Coye Benson posts a rant on her latest experience as a customer being forced through a knowledge-based authentication drill with a vendor (AT&T) who already knows her well.
Add the popular Foxit Reader to the list of desktop software applications to be patched as a matter of priority. According to vulnerability research outfit Secunia, there's a "highly critical" vulnerability in the alternative PDF reader software that can be
PayPal fixed an XSS vulnerability today that drew some attention. Harry Sintonen reported an XSS vulnerability in the "safe" area of the PayPal application. It was particularly interesting due to the use of EV certs employed by PayPal, which are
The Google-backed StopBadware.org coalition has called on Apple to rethink its stance on whether the Safari "carpet bomb" issue reported by Nitesh Dhanjani constitutes a serious security risk. Dhanjani originally discovered than it is possible for a booby-trapped Web site
The wireless intrusion detection and prevention systems (WIDPS) market was a niche market in the past, but is gaining prevalence as WLAN becomes more widespread and security threats get increasingly complex. The need for a WIDPS system is crucial in
LinuxSecurity.com: USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak
LinuxSecurity.com: Updated gnutls packages that fix several security issues are now available for Red Hat Enterprise Linux 5. Flaws were found in the way GnuTLS handles malicious client connections. A malicious remote client could send a specially crafted request to
LinuxSecurity.com: It was discovered that phpGedView, an application to provide online access to genealogical data, allowed remote attackers to gain administrator privileges due to a programming error.
LinuxSecurity.com: Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team.
LinuxSecurity.com: field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop. The updated packages have been patched to
LinuxSecurity.com: Updated gnutls packages that fix several security issues are now available for Red Hat Enterprise Linux 4. Flaws were found in the way GnuTLS handles malicious client connections. A malicious remote client could send a specially crafted request to
LinuxSecurity.com: Devil-Linux is a distribution which boots and runs completely from CD. The configuration can be saved to a floppy diskette or a USB pen drive. It was originally intended to be a dedicated firewall/router but now Devil-Linux can also
