Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Crypto-Gram is a free monthly newsletter providing summaries, analyses, insights, and commentaries on security: computer and otherwise. This month, Airplane Ha…
Crypto-Gram is a free monthly newsletter providing summaries, analyses, insights, and commentaries on computer security and cryptography. Discussed this month …
CRYPTO-GRAM is a free monthly newsletter providing summaries, analyses, insights, and commentaries on computer security and cryptography. In this issue, Random…
Laptops are vulnerable to theft, greatly increasing the likelihood of exposing sensitive files. Unfortunately, storing data in a cryptographic file system does…
tcpdump and libpcap were trojaned on tcpdump.org and all but 1 official mirror. This trojan, similar to the OpenSSH trojan from a few months ago, was caught Ge…
Daniel Roberts discovered a binary named "ABfrag" on one of his servers after detecting suspicious network activity. He sent in a note requesting anyone with i…
This month's Crypto-Gram contains information about Palladium and the TCPA, The Doghouse: Cedium, Featured Counterpane Research, License to Hack, Counterpane N…
Vendors have not issued updates yet for a vulnerability just reported by the Squid Project. "Under some conditions Squid may forward the proxy authentication c…
Update: For millions of websites that were vulnerable care of ISS , Apache is not too happy. ISS (Internet Security Systems) released an insufficient patch alo…
PHPNuke seems to have a horrible security track record, but continues to be quite popular. No statement from the PHPNuke folks yet, but if you're using a rapid…
An announcement was made early this morning via the major wire services that the Internet's premiere information security resource, PacketStorm (http://www.pac…
There is no doubt that the Internet has brought unparalleled connectivity to computers, especially in the last few years. But ironically, this very advantage h…
The latest Microsoft bug is a doozy. Why do these things keep cropping up? The federal government and technology industry want you to believe the threats to ou…
As reported by a subscriber to the incidents mailing list at . "It appears that perhaps tens of thousands of username/passwords for valid shell logins ALL ACRO…
E-mail encryption seems to be hard enough, or annoying enough, that even many technically sophisticated people don't do it regularly. Non-technical people rare…
The basic outline of the system consists of using Bash scripts, metamail, grep, the Obtuse Systems' smtpd product, Samba and a command-line virus scanner. A fl…
Welcome to the first issue of the EnGarde Secure NewsBrief. This monthly newsletter contains details on EnGarde development, usage tips, news & reviews pertain…
On Tuesday June 26, 2001, a hacker named 'ThePike' managed to deface the European defacement mirror Alldas.de. Visitors to the site saw a modified news banner …
Steve Gibson recounts the steps he took to stop his attack from being subjected to a distributed denial of service attack. "I believe you will be as fascinated…
My graduate professor at Johns Hopkins once told me that software engineering - when compared with civil engineering as a discipline- had progressed no further…
The CORE SDI team has found a vulnerability in the SSH 1.5 protocol that allows an attacker to retrieve the session key, which could then allow them to decrypt…
If you do business on the Internet, you cannot afford to be uninformed about the dangers and pitfalls that cybercrime poses. The following is a daily survey of…
New version of chkrootkit (0.19) available... chkrootkit is a shell script mainly developed by Nelson Murilo (Brazilian) that checks for the existence of rootk…
This is a great 40-page document by Orrin Hatch that describes what the government is doing about privacy, tools that can be used to protect your privacy, and …
