Monthly Archives: December 2006

Security Flaws: To Disclose Or Not To Disclose?

If you are a security researcher or enthusiast and you’ve found vulnerabilities and / or security flaws in hardware or software products, are you going to disclose it to public audience? Probably you think it should be done as soon … Continue reading

Share
Posted in General, Security Research | Leave a comment

How Microsoft Fights Off 100,000 Attacks Per Month

Big companies’ networks attract many hackers and become interesting target. Security in these networks is really big challenge for professionals. Microsoft is one of companies that faced with the biggest challenge. Last year, Microsoft IT said it was the target … Continue reading

Share
Posted in Security | Leave a comment

Vulnerabilities of P2P Systems

In technical report titled “Vulnerabilities of P2P Systems and a Critical Look at their Solutions”, authors Marling Engle and Javed I. Khan described security problems of peer-to-peer networks and some solutions. Abstract says: Peer-to-peer systems have emerged from a drive … Continue reading

Share
Posted in Privacy, Security | Leave a comment

X-Force Predicts Security Trends for 2007

In recent post on this blog, I mentioned MsAfee security predictions for 2007. IBM X-Force also announced its prediction of top security trends for 2007. Among the host of threats on the security horizon for 2007, X-Force foresees broader and … Continue reading

Share
Posted in Security, Security Research | Leave a comment

Microsoft Word Unspecified Memory Corruption Vulnerability

A vulnerability has been reported in Microsoft Word, which potentially can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to an unspecified error in the handling of Word documents and can be exploited … Continue reading

Share
Posted in Operating Systems and Application Security | Leave a comment

The Truth and Myths About Patching

Nice article at Net-Security titled “The Truth About Patching” by Mark Shavlik, President and CEO of Shavlik Technologies – you can read it here. This is list of myths according Shavlik: Myth No. 1: Agent-based systems are more accurate. Myth … Continue reading

Share
Posted in Operating Systems and Application Security, Security | Leave a comment

Check Point Security Data Analysis and Reporting

If you are system or network administrator and / or in charge of network security, you are probably overwhelmed with tasks such are analyzing of logs which means scrolling through thousands of log lines and analysis of events, alerts and … Continue reading

Share
Posted in Security | Leave a comment

Remotely Eavesdropping on Mobile Phone

Can mobile / cellular phone be used for remotely eavesdropping? Maybe yes, maybe no – who knows. Read interesting Schneier’s post and find out more about this.

Share
Posted in Mobile / Cellular / Bluetooth, Privacy | Leave a comment

MySpace and YouTube: Possible Worms and Adware Threats

Be very careful with usage of social sites as its insecurity increases. In November, security firm Websense alerted Internet users over a handful of MySpace pages hosting videos that, when played, attempted to install adware on a viewer’s system. The … Continue reading

Share
Posted in Internet Security, Malicious Software | Leave a comment

Software Vulnerabilities or “Treating the Symptoms Rather Than the Disease”

There’s an interesting article at C|Net, written by Jon Oltsik, who is senior analyst at the Enterprise Strategy Group, about security in general and problems related to insecure software. It says: Any chief information security officer will tell you that … Continue reading

Share
Posted in Secure Programming | 1 Comment