We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
Microsoft's next-generation security initiative, dubbed "Securing The Perimeter," includes a major update of the Windows Server Software Update Service (SUS) during the first half of 2004 and partnerships with firewall vendors to deflect future attacks, the company's software management chief said.. . .
Researchers at the University of Pennsylvania have developed smart credit cards with embedded microchips. What's new about is a technique which lets ordinary card users program in their own spending parameters.. . .
The proprietary security system used by Cisco Systems Inc. to protect wireless LANs widely deployed by enterprises can be defeated by a "dictionary attack" designed to crack passwords. To counter the security threat, the company is warning customers to institute strong . . .
"Motorola is putting Windows on cell phones, and 60 percent of banks say they are going to run their ATMs on Windows in the next few years," says Richard Stiennon, vice president of research for Gartner. "The insanity has got to stop." Symantec's latest report on Internet security paints a gloomy picture of the dark side of information technology. . .
Mr. Hornik discovered remote vulnerability in OpenSSL package provided by RedHat. Because of nature of this bug some other vendors can be vulnerable too. This vulnerability is inside SSLv2 server code and allows . . .
Micael S. Mimoso submits Recently disclosed vulnerabilities in OpenSSL could leave systems open to denial-of-service attacks at the minimum and, at worst, remote compromises. Experts recommend that users of affected systems upgrade to OpenSSL 0.9.7c or 0.9.6k. Other . . .
This three-part article will focus on identifying and exploiting vulnerabilities and poor configurations in Cisco routers. We will then discuss the analysis of the router configuration file and will attempt to leverage this access into other systems. Additionally, we will cover . . .
A tiny network security device running embedded Linux has earned Innominate the Wolfsburg AG Competence Prize, this year awarded for the IT category in the field of "Network Embedded Systems." Judges in the 25,000 Euro annual prize for industry co-sponsored by Volkswagon and the city of Wolfsburg praised Innominate for building a security device on an open architecture. . .
Escalating threats of hacking and viruses prompt explosive growth, says IDC. Spending on security and business continuity will grow at twice the rate of other IT categories to reach $116bn by 2007.. . .
Microsoft's Security Response Center in Redmond, Wash., is the computing equivalent of a hospital emergency ward. When a problem comes in the door the center's director, Kevin Kean, and his staff must swiftly make an assessment: Is the security weakness detected in a Microsoft software product only minor?. . .
A report claiming that Microsoft's operating system "monopoly" poses a critical security risk to users has drawn harsh criticism from technology professionals. While the group of researchers claimed intellectual and financial independence from outside parties, as well as from their own parent companies. . .
Intel has announced it was taking steps to ensure that its design for the next generation of computer security components, code-named LaGrande, will be accepted and not vilified by the industry. . .
A security flaw in Linux editions of IBM's DB2 database could allow unauthorized users to seize control of a database's contents, Big Blue has revealed. IBM said that the problem affects version 7 of its DB2 database for Linux.. . .
OpenSSH 3.7 has just been released. It will be available from the mirrors listed at OpenSSH shortly. OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. . .
Jan Kanclirz submits Make Secure BGP, paper describing different security meassures one can take to better secure BGP environment. Using authentication, encryption and filtering technigues on Cisco platform. . .
Reading through responses to an article I wrote about Mad Hatter and the broader subject of auto-immune code, and since I am working on a project for a client that involves Sun products in a security context, it begs me to ask the question - are twenty security vulnerabilities in one month an acceptable number for Sun customers?. . .
Despite a renewed focus on IT security, 28 percent of senior executives and IT managers in Ireland are unable to name a security software brand. That finding is in the results of a research report from IDC, which polled 327 executives . . .
POSIX® certification is about to take another step forward. The Open Group and The Institute of Electrical and Electronics Engineers Standards Association (IEEE-SA) will offer a program to certify products to the 2003 edition of IEEE 1003.1TM-2001, "Standard for Information Technology-Portable . . .
The SH7710 32bit RISC microprocessor features an IPsec accelerator for fast encryption and communication processing. The device also offers two on-chip Ethernet controllers that enable connection to two Ethernet LANs. Both peripherals make it suitable for security-enabled devices designed . . .
Seizing the opportunity to criticize a competitor and promote its own operating system, Sun Microsystems on Wednesday opened up early registration for its Project Mad Hatter. Designed to compete with Microsoft, Project Mad Hatter is being positioned by Sun as . . .
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
