New Santy Variants Spread Beyond Google
15601
The Santy worm, which appeared just before the Christmas holiday and uses search engines to spread, appears to be morphing into dangerous variants, virus experts warned Tuesday.
261062
Latest PHPClasses.org Releases:SPL and IteratorsBWT & MTF encodercPanel Sub-domains CreatorObserverableHTTP SpySimple and Attachment Send MailWindows RegistryClean OutputCryptPHP RARRTF Generation ClassBar ChartPclTemplateICQ Protocol
202255
OK, we had an extended breather from our last look at BIND's zone file pri.example.org. It's time to finish up and get a sense of what these records mean. To go off-topic a little, recently, I had the task of setting up two OpenLDAP servers and putting together a test environment for a project with several developers and several applications including some LAMP applications. Without a working knowledge of DNS, the project would have gone amuck.
506732
Latest PEAR Releases:Image_GraphViz 1.3.0RC3Services_SharedBook 0.2.4HTTP_Session2 0.7.0Net_UserAgent_Mobile 0.31.0Log 1.10.0FSM 1.3.0
615818
A new worm has been detected that uses Google to find vulnerable phpBB forums. The worm - named Net-Worm.Perl.Santy.a - queries Google to find sites using outdated versions of the phpBB forum software which can be exploited.
233929
Ziff Davis - Anti-Santy-Worm V4 attempts to patch vulnerable Web forum software but might cause denial-of-service attacks.
690580
On the Dotvoid.com blog today, there's a new post that shares some handy code to parse out information from the incoming user agent string for the visitors for your site.   Recently I experimented a bit with an Apache log file analyzer written in PHP. It's not all that difficult were it not for trying to parse the browser, or user agent, string. [...] For my purposes I don't care much for the operating system details. This is the result so far. I'm still not very satisfied but I thought maybe other people might be interested and maybe help out.   He provides the code in the format of an encapsulated PHP function that returns the product they're using, the version number of the browser and other various comments.
330043
Just like we anticipated earlier this month, the Santy worm is already finding new ways to spread. This time The Santy worm variant continues to spread by now taking advantage of search engines such as: Google, AOL and Yahoo!
324327
Latest PEAR Releases:PHP_CompatInfo 1.4.1HTML_Progress2 2.3.0RC1pearweb_phars 1.1.0pearweb 1.4.0Auth 1.5.0HTML_QuickForm_altselect 1.0.0RC1PEAR_PackageUpdate 0.6.1PHP_Beautifier 0.1.13pearweb 1.4.2Structures_LinkedList 0.1.2pearweb 1.5.0RC1Console_Getopt 1.2.2Structures_DataGrid_Renderer_Flexy 0.1.0HTML_CSS 1.1.3Text_CAPTCHA 0.2.1PHP_CodeSniffer 0.4.0
663988
According to this new post on the PHP Security Blog, there's a new META tag the Suhosin extension includes in the output of a phpinfo page to help resolve some of the issues with Google (and buddies) storing the contents of the page, giving a potential attacker information they could exploit.   [The] extra META TAG to the HTML output of phpinfo() that forbids indexing and archiving by robots. For fairness reasons following the embedded links is still allowed to robots, because a lot of projects [...] to get at least a few backlinks for their work, that might result in a better search engine positioning.   The patch can be downloaded from their site.
24644
The Santy worm with variants continues spreading on the Internet taking advantage of search engines, including Google, AOL, Yahoo to identify exploitable Web pages.
663039
UPDATE: Campaign grows from distributed denial-of-service attack to Digg bumps.
572892
Four new unpatched vulnerabilities have been published for Internet Explorer and Firefox, with two coming for each browser.
395125
New Web applications--such as wikis, blogs, and podcasts--that foster increased collaboration and communication bring with them a number of new security challenges.
194115
On the PHP Security Blog, there's three new posts that Stefan Esser has written up that demonstrate some of the more destructive uses of Javascript that he's found:  JavaScript/HTML Portscanning and HTTP Auth Bruteforcing HTTP Auth in Firefox with JavaScript JavaScript Scanning and expose_php=On    While the first two are interesting, it's the last of these that most directly applies to PHP. He gives a simple "proof of concept" that checks to see if the embedded image is the correct "size" to be related to a webserver running PHP with the expose_php setting set to "on".
89086
With the third posting in his "Crouching Javascript, Hidden PHP" series, Harry Fuecks has a new script server that allows you to comingle PHP and Javascript in a very interesting way.
214608
If you run a site that has tons of files for your users to download (or even just a few) that you want to keep safe from a direct link, this new article from the O'Reilly PHP DevCenter might be just what you're looking for.