Security Projects - Page 48 - Results from #940

Discover Security Projects News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Analyzing Internet Security Threats: Vulnerabilities And Risks

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Updated: The vast majority of worms and other successful cyber attacks are made possible by vulnerabilities in a small number of common operating system services. Attackers are opportunistic. They take the easiest and most convenient route and exploit the best-known flaws with the most effective and widely available attack tools. . . .

LinuxSecurity.com Team
Oct 08, 2004

MIT's Innovative Spinach-Powered Devices for Clean Energy Solutions

Eat your spinach," Mom used to say. "It will make your muscles grow, power your laptop and recharge your cell phone... " OK. So nobody's Mom said those last two things. . . .

LinuxSecurity.com Team
Sep 27, 2004

Mandrakesoft's EAL5 Initiative To Enhance Linux Security

A consortium of European companies, including Linux-distributor Mandrakesoft, has been awarded a three-year, $8.6 million contract to boost security of the open-source Linux operating system, the companies said Thursday. . . .

LinuxSecurity.com Team
Sep 24, 2004

Prepare for IPv6 Transition: Testbed Solutions for Network Admins

Yes, friends, I am afraid you do have to start paying attention to IPv6 (Internet Protocol version 6) (define). It's on its way, it's inevitable, and us ace network admins must learn to use it. . . .

LinuxSecurity.com Team
Sep 22, 2004

Discover the New Ubuntu Distribution Inspired By Mark Shuttleworth

[Johannesburg, 20 September 2004] - A preview of a new Linux distribution inspired by South African international open source software evangelist, Mark Shuttleworth, is available on the Internet. . . .

LinuxSecurity.com Team
Sep 20, 2004

Analyzing Password Issues and Alternatives in Enterprise Security

Passwords, the dominant form of securing enterprise assets, are a failure, a research firm said Thursday.According to the Meta Group, passwords aren't cutting the mustard because of both organizational and user failings, . . .

LinuxSecurity.com Team
Sep 17, 2004

Certicom Mobile Security Toolkit Enhances Cross-Platform Encryption

Cryptography firm Certicom has announced a cross-platform security toolkit for future mobile phone handsets. The Certicom Security Architecture for Mobility will provide a common programming interface for developers to access . . .

LinuxSecurity.com Team
Sep 17, 2004

Indiana University Increases Security with Automated Management of Patches

Indiana University has automated its software security patch management in a bid to help protect potentially sensitive student records and reduce network vulnerabilities. . . .

LinuxSecurity.com Team
Sep 16, 2004

IETF Officially Rejects Sender ID Protocol Over Proprietary Technology

Internet standards group rejects the protocol because of embedded Microsoft proprietary technology.Several Internet sources today reported that the Internet's Internet Engineering Task Force (IETF) has officially turned thumbs down . . .

LinuxSecurity.com Team
Sep 15, 2004

Exploring Email Sender ID Solutions to Tackle Spam Effectively

There are a number of promising technical papers under consideration by the Internet Engineering Task Force which deal with the ever-growing problem of spam. Most of them seek to attack the spam problem obliquely rather than head on. . . .

LinuxSecurity.com Team
Aug 27, 2004

Explore Fwknop for Enhanced Port Knocking and OS Filters in Linux

fwknop is a flexible port knocking implementation that is based around iptables. Both shared knock sequences and encrypted knock sequences are supported. In addition, fwknop makes use of passive OS fingerprinting signatures derived from p0f to ensure the OS that initiates a knock sequence conforms to a specific type. This makes it possible to allow, say, only Linux systems to connect to your SSH daemon. Both the knock sequences and OS fingerprinting are completely implemented around iptables log messages, and so a separate packet capture library is not required. . . .

LinuxSecurity.com Team
Aug 09, 2004

Mozilla Bug Bounty: Earn $500 For Reporting Firefox And Thunderbird Bugs

The Mozilla Foundation, maker of the Firefox web browser and Thunderbird e-mail application, is offering a $500 (£275) bounty to users who identify and report bugs found in its open-source software. . . .

LinuxSecurity.com Team
Aug 04, 2004

PHP 4.3.7 Security Advisory: Remote Code Execution Risk

The open-source PHP Group has released a fix for a pair of security holes that could be exploited to execute arbitrary code on remote PHP servers. The flaws affect PHP versions 4.3.7 and prior and version 5.0.0RC3 and prior. The final version of PHP 5.0, which was released earlier this week, is not affected. . . .

LinuxSecurity.com Team
Jul 19, 2004

Mozilla Foundation: External Protocol Handler Security Advisory

According to the Mozilla Foundation, the vulnerability was posted on Thursday to Full Disclosure, a public security mailing list. The same day, the foundation's security team confirmed the report and developed a fix. On Friday, the Mozilla team released a configuration change that resolves the problem by explicitly disabling the use of the shell external protocol handler. . . .

LinuxSecurity.com Team
Jul 09, 2004

Mozilla Windows Advisory: Shell Exploit Threat with Fix Available

The flaw, known as the "shell" exploit, was publicized Wednesday on a security mailing list, along with a link to a fix for the problem. Updated versions of the affected software programs, which include the Mozilla, Firefox and Thunderbird browsers, have been released. Developers said the flaw affects only Windows users, not computers running the Macintosh and Linux operating systems. . . .

LinuxSecurity.com Team
Jul 09, 2004

Rising Corporate Security Expenses Driven By Cyber Threats

"It's an amazing thing how insecure the big corporations are," said Echemendia during a break in the weeklong seminar. "It's just amazing how easy it is." Hackers are believed to cost global businesses billions of dollars every year, and the costs to defend against them are soaring. . . .

LinuxSecurity.com Team
Jul 07, 2004

OASIS AVDL 1.0 Standard Ratified to Fortify Web Application Security

OASIS addressed another layer of security concerns around Web services Wednesday when it ratified the Application Vulnerability Description Language (AVDL) 1.0 as a standard, the organization's highest level of ratification. AVDL is an XML schema that enables security products to communicate information about new and existing Web application vulnerabilities between themselves, according to AVDL Technical Committee co-chairman Kevin Heineman. . . .

LinuxSecurity.com Team
Jun 24, 2004

Creating A Secure Framework For Internal And Outsourced Development

This whitepaper deals with developing a secure framework, both for internal and outsourced development. Within this context, secure development is considered to be the process of producing reliable, stable, bug and vulnerability free software. . . .

LinuxSecurity.com Team
Jun 21, 2004

Novell Sponsors Openswan Project for Secure IPsec VPN Standards

Novell announced that it is sponsoring and contributing to the popular open source Linux implementation of the IP security (IPsec) standard development project, Openswan. The open source project brings all of the features needed for building and deploying secure commercial grade virtual private networks (VPNs) to Linux. . . .

LinuxSecurity.com Team
Jun 18, 2004

Metasploit Framework v2.1 New Features and Bug Fixes Overview

The Metasploit Framework is an advanced open-source exploit development and testing environment. Version 2.1 fixes many issues that users have reported since the release of 2.0 and adds several new features. The bug fixes alone are more than worth the time to upgrade. . . .

LinuxSecurity.com Team
Jun 17, 2004

Community Poll

More Polls

Security Projects - Page 48

Boost Linux Security Using These 10 Vital Testing Tools Now

New Rust Tool Traur Analyzes Arch Linux AUR Packages for Hidden Risks

Fedora 44 vs. Linux Kernel Exploits: Inside the Move to Strengthen Linux Security Settings