Help get peace of mind knowing that everything is managed for you with Windows Live OneCare — virus and spyware scanning, firewalls, tune-ups, file backups, the whole nine yards. And it's all delivered to you in a smooth, hassle-free package. Download the 90 day free trial Then, get better protection against phishing scams and viruses when you Download Windows Live Toolbar now.

Security RSS

Security news, and notes, from security at Tipsdr and from all corners of the Internet. Get continuous protection for your PC with Windows Live OneCare Download the free trial.
Registry Mechanic

FREE Performance Scan!
Free Performance scan
Windows Support
Remote Desktop Access
May
15th
Thu
permalink
Phishing botnet expands by hacking legit sites

“The tool does not spread on its own but relies on the Asprox botnet to propagate to new hosts”

A botnet is now using a SQL-injection attack tool designed to hack legitimate Web sites, a move…
permalink
Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability Hello, Please try to understand what we did here. You might be right in here: “As all ISO, UTF-8 and related charsets were 7-bit clean, it’s clear that Microsoft err’ed on the side of accepting UTF-7…
permalink
Colonel suggests using hackers' tool against them

“To me it’s a silly solution to a problem that has much simpler solutions”

By JORDAN ROBERTSON Thursday, May 15, 2008 Hackers often harness the combined power of thousands of virus-infected…
permalink
Hacker writes rootkit for Cisco's routers

“We’re still in the process of putting the whole presentation together, and we also need to work with Cisco before we talk to anybody”

A security researcher has developed malicious rootkit…
May
14th
Wed
permalink
VeriSign wins patent for Internet typo redirection The company that runs many of the Internet’s core directory systems has won a patent for its controversial service that helps Internet users find sites even when they mistype addresses. via…
permalink
SEC charges former Broadcom execs with backdating The U.S. Securities and Exchange Commission has charged two current and two former officers of semiconductor vendor Broadcom for their alleged participation in a supposed five-year scheme to backdate…
permalink
[USN-612-6] OpenVPN regression Ubuntu Security Notice USN-612-6 May 14, 2008 openvpn regression A security issue affects the following Ubuntu releases: Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04 LTS This advisory also applies to the…
permalink
[ GLSA 200805-16 ] OpenOffice.org: Multiple vulnerabilities - - Gentoo Linux Security Advisory GLSA 200805-16 - - - - Severity: Normal Title: OpenOffice.org: Multiple vulnerabilities Date: May 14, 2008 Bugs: #218080 ID: 200805-16 - - Synopsis Multiple…
permalink
SEC moves toward requiring interactive data filings The U.S. Securities and Exchange Commission (SEC) has taken a major step toward requiring publicly traded companies to submit their reports to the agency in an interactive data format, with backers…
permalink
Craigslist countersues eBay, escalating legal fight Classified-advertising site Craigslist is countersuing eBay, accusing the online auction company of using its stake in Craigslist to misappropriate proprietary information and engage in false…
permalink
Correction to BID 29112 "Apache Server HTML Injection and UTF-7 XSS Vulnerability" HTTP User and Desktop Security Communities; With respect to Per 3.7.1 Canonicalization and Text Defaults […] The “charset” parameter is used with some media types to define the character set…
permalink
Re: Cisco BBSM Captive Portal Cross-site Scripting Hello, This is the Cisco PSIRT response to an issue that was discovered and reported to Cisco by Brad Antoniewicz from Mcafee/Foundstone Professional Services regarding a cross-site scripting (XSS)…
permalink
Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities Advisory ID: cisco-sa-20080514-cup Revision 1.0 Summary Cisco Unified Presence contains three denial of service (DoS)…
permalink
NATO nations back cyber defence centre

“We have seen in Estonia that a cyber attack can swiftly become an issue of national security. Cyber attacks can cripple societies”

Seven NATO nations gave their backing on Wednesday to a new…
permalink
Cisco Security Advisory: Cisco Content Switching Module Memory Leak Vulnerability Cisco Security Advisory: Cisco Content Switching Module Memory Leak Vulnerability Advisory ID: cisco-sa-20080514-csm Revision 1.0 For Public Release 2008 May 14 1600 UTC (GMT) Summary The Cisco…