Last month's root-server attack revisited
22243
Net safe thanks to technology called Anycast Last month's attack on at least six of the net's root servers was formidable, but thanks to the implementation of a technology designed to protect the infrastructure, only two were affected, according to a factsheet issued today by ICANN.â¦
383627
A toolkit designed to exploit a recently-disclosed Microsoft JPEG vulnerability has been released onto the net. The toolkit (screen shot from AV firm F-Secure here) makes it trivially easy for maliciously-minded
345464
php|architect has a new note about a few PHP vulnerabilities:
576139
eTrust Antivirus mistook a critical security process for malware.
63702
TechWeb - Officials think the site's server was hacked sometime between Jan. 26 and Jan. 28.
664907
A month of browser bugs &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
150840
Backdoor drafts, security moms and up-armoring
386604
This article discusses the discovery of compromised machines in large enterprise environments, and offers some suggestions on correlating NIDS and HIPS logs to avoid false positives.
223591
Security researcher demonstrates a way to use cross-site scripting to remotely spam an internal network printer.
95492
Did you notice when Slashdot's  search was down for the past few days? (It's back up now.)  Turns out that in a stunning case of irony, it had been hammered into  submission by thousands of people attempting to use it.        However, unlike CmdrTaco's regimented DDoS attacks, this one is carried out  with malicious intent as opposed to mere sociopathic inconsiderateness.  It also highlights a potential threat from one of the biggest weblogging  services out there.
246704
The security threats against business-technology systems continue to multiply. Not only do malicious worms and viruses such as Blaster and Bagle continue to wreak havoc, but security pros
42081
Blog: Popular add-ons could have their update process hijacked by man-in-the-middle attacks.
520541
Exploit code targets a flaw that generated a government warning last week.
93571
A zero-day flaw in Firefox and third-party Windows patches turn up the heat for Net users. Plus: Buyout boom in security.
415712
To set things right about a misquote on Slashdot, Zeev Suraksi has posted this long statement mentioning what he really said and a few more personal opinions.   I've just been misquoted on Slashdot, as if I said there are no security problems in PHP itself, and that I instead point my finger only at inexperienced developers. If you read the original article on Heise Security, you'll see that I have not said anything of the sort. [...] I believe this is the belief of most others on the security team, but I'm only speaking on behalf of myself and do not represent them.   He also covers five more points pertaining to the article and the situation:  Where the bugs/problems lie with problems in PHP Why there are security problems in web PHP applications Why the current security level can be partially blamed on the language itself An admission that yes, there are security problems in PHP And the track record the PHP developers have had in fixing these issues  There's much more than just these brief highlights here, so I encourage you to head on over and check out the full post for yourself.   There are some other opinions on the matter from a few others out there too:  cyberlot's blog Zend Developer Zone's post Tony Bibbs' blog
521800
Arbor Networks' Jose Nazario takes stock of the denial-of-service attack against the Baltic nation--and the wider implications.
735819
Single Packet Authorization fills the gaps in port knocking.