September, 2009
Wordpress 2.8.4 Fixes A Big Security Hole
Time to upgrade your Wordpress sites. A vulnerability in versions prior to 2.8.4 could let the bad guys reset passwords. And there's a nasty worm infiltrating sites based on an older vulnerability in the code.
Windows IT Pro
|
September, 2009
Microsoft Releases 5 Critical Patches
Microsoft unleashed a series of critical security patches during its September software update cycle.
Windows IT Pro
|
August, 2009
How To Help Secure HTTP Data Without SSL
If you don't have SSL available to transmit data via HTTP you can still help protect that data during transit using a little jQuery magic.
Windows IT Pro
|
August, 2009
Sometimes The Cookie Doesn't Crumble
Ever heard of Flash cookies? They're often used to track your activity. And sometimes even if you delete them they reappear.
Windows IT Pro
|
August, 2009
SecureTweets for Twitter
Since Twitter is so hugely popular it makes sense that someone would create a tool to help protect users from malicious URLs within the posts at the site.
Windows IT Pro
|
July, 2009
Chrome OS - Who Would've Guessed?
By now you've heard the news that Google will eventually release an operating system called Chrome OS. There's no big surprise there. But the future of desktops might become surprising.
Windows IT Pro
|
July, 2009
Making Data "Vanish" Automatically
University of Washington researchers have a created a way to automate encryption key expiration, which means data can become inaccessible over a given period of time.
Windows IT Pro
|
July, 2009
Firefox's Future Content Security Policy
It appears that Firefox will gain some much-needed Content Security Policy (CSP) that will help defend against XSS attacks, Clickjacking, and packet sniffing.
Windows IT Pro
|
July, 2009
Adios Milw0rm
It looks like the popular milw0rm site has gone offline - possibly never to return.
Windows IT Pro
|
July, 2009
Kon-Boot Lets You Bypass Logon for Windows and Linux
Kon-Boot looks like a very interesting tool since it can get you into a system without having to logon first.
Windows IT Pro
|
July, 2009
SANS Reports Internet Explorer 0-Day Exploit
SANS reports (via CSIS in Denmark) that a new 0-day exploit against Microsoft DirectShow is loose on the net.
Windows IT Pro
|
July, 2009
Will ICANN Ban Top Level DNS Wildcarding?
Some registrars use wildcard DNS systems to redirect users to their own sites when a DNS lookup fails, which can occur in a variety of circumstances. ICANN's Security and Stability Advisory Committee wants to ban the practice.
Windows IT Pro
|
July, 2009
SecureBrowsing Extension for IE and Firefox
Finjan released SecureBrowsing, which is a browser extension than scan Web pages in realtime to detect potentially malicious content.
Windows IT Pro
|
July, 2009
Wireshark 1.2.0 Sports Lots of New Features
Wireshark 1.2.0 is out. The new version of this popular packet sniffer includes many new features, including GeoIP integration, a 64-bit Windows installer, and more.
Windows IT Pro
|
June, 2009
Gmail to go with HTTPS by default
Webmail is inherently insecure for several different reasons - one of which being that without SSL your correspondence is easily sniffed and possibly even stored in your browser's cache.
Windows IT Pro
|
June, 2009
iPhone Recovery over USB
Jonathan Zdziarski's hour-long presentation regarding iPhone Forensics is now online at YouTube.
Windows IT Pro
|
June, 2009
Sniffing Browser History Without Javascript
Someone discovered a way to sniff sites from your browser history without using Javascript. Instead it uses an iframe that loads a server-side PHP script to do all the heavy lifting.
Windows IT Pro
|
June, 2009
Google Posts Top 10 Malware Sites
Google released some statistics that reveal the top 10 malware sites in the world according to their site scanning research. You might want to blacklist all of them.
Windows IT Pro
|
June, 2009
StrongWebMail Weak On The Inside
Last week I mentioned StrongWebMail - a company that claimed they offer the strongest Web mail on the planet. That claim was proven false when a team of researchers bypassed security using an obvious inroad.
Windows IT Pro
|
June, 2009
More Firefox Add-on Controversy And An Impending Fix?
Firefox users were up in arms over a Microsoft .NET extension that was silently installed without direct user approval. The extension was a bit tedious to remove for some people. Mozilla could move to at least alert users of such an installation.
Windows IT Pro
|