securityindex

Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs - Carmaker points finger at an 'unknown' flaw as customer fallout continues

GPT-5.6 gets better at cybersecurity - OpenAI has started rolling out the GPT-5.6 series models in limited preview to a small group of trusted partners through the API and Codex. The series in...

High-speed boats and new drones for elite Commando Force under Defence Investment Plan - Defence Secretary has shifted Defence Investment Plan towards more immediate priorities, including getting the latest kit into the hands of military person...

Consistency - I've worked a lot of places over the years, all for varying lengths of time. While this worked against me in the early days, with potential employers won...

The Chinese Control the Majority of Argentina’s Squid Fleet - Chinese companies control nearly two-thirds of Argentina’s own squid fleet.

From the Trenches - A Video and Screenshots Compilation - An image is worth a thousand words. *Sample videos:* *Sample screenshots:*

When the Frontier Blinks: What the Mythos and Fable Controversy Reveals About AI Security - When Anthropic abruptly pulled Mythos 5 and Fable 5 from circulation, the move sent a jolt through the AI and cybersecurity communities. These were not m...

New Software: Perceptor - It has been a while. When I said I was stopping the Forensic 4:cast Awards, I bet you didn’t expect me to fall off the face of the Earth, did you? The real...

Liferay vulnerability scanner: How to detect and remediate CVEs in Liferay Portal and DXP - Liferay environments face a growing volume of CVEs and limited patch paths for older versions. This guide explains which vulnerabilities matter, how they...

Bill to Create Independent US Cyber Force Wants to Place It Under the US Army - It looks like we're finally making progress towards an independent US Cyber Force: https://www.csis.org/programs/strategic-technologies-program/projects/co...

Overview of Content Published in May - Here is an overview of content I published in May: Blog posts: Update: search-for-compression.py Version 0.0.7 SANS ISC Diary entries: Wireshark 4.6.5 Rele...

CSA/RFPS/Mobile (2G/3G/4G/5G/6G) Articles (2025/2026) - Greg Smith TrewMTE - CSA/RFPS/Mobile (2G/3G/4G/5G/6G) Articles (2025/2026)EVIDENCE & LEGAL ISSUES PART THREE https://www.linkedin.com/pulse/evidence-legal...

AI threats in the wild: The current state of prompt injections on the web - Posted by Thomas Brunner, Yu-Han Liu, Moni Pande At Google, our Threat Intelligence teams are dedicated to staying ahead of real-world adversarial activity...

MSSQLand – Lightweight MS-SQL Interaction Tool for Lateral Movement and Post-Exploitation - MSSQLand enables red teams to interact with MS-SQL servers and linked instances in restricted environments without complex T-SQL queries. Assembly-ready to...

Chinese Money Laundering Jargon via Google's Gemini - After having a short discussion with Gemini about Chinese Money Laundering, I could tell we weren't quite connecting on my Mandarin-assistance requests,...

test -

Recommended: MCP Is Broken and Anthropic Just Admitted It - I recommended MCP Is Broken and Anthropic Just Admitted It on TysonRhame. About me: http://www.chuvakin.org

Self-Hosting a BitWarden-Compatible Password Manager Service - When you trust third parties with your password vault, there’s always some risk. Most password manager services use zero-knowledge encryption to keep you...

Coming Out of Retirement for This One: On AI, Authorship, and the Erosion of Ground Truth - It’s been a while since I posted here. I’ve moved on from daily forensic casework and stepped back from the blog to focus on broader systems work—on justic...

Announcing SecTemplates.com release #6: Security Partner Program Pack v1 - I have built several security partner programs at companies such as Box Inc. and Coinbase, with over 8 years of experience leading them. I have consistentl...

Daily Blog #815: I missed a day - Hello Reader, It happens to everyone and yesterday it happened to me. I was traveling and lost track of the day and realized I didn't post a blog yest...

Ai Games – Using Artificial Intelligence to Create More Realistic Non-Player Characters - ทางเข้าเว็บแทงบอล is changing the way we play video games. Not only does it create enticing new virtual worlds, but game developers, scientists, and res...

On Apple Intelligence - Cross point this article here for my older blog readers: I have some thoughts on Apple Intelligence’s delay, and why I think people are missing the point e...

Andrew Hay’s 2025 Cybersecurity Predictions - As we approach 2025, the ever-evolving landscape of cybersecurity continues to challenge professionals and organizations alike. Based on observed trends an...

Liquidmatrix Security Digest Podcast – Episode 7E - Episode 0x7E The one after the outage… We keep talking about how it’s amazing that this is still happening and it really is. But I think we’re done with ...

C can be memory safe, part 2 - This post from last year was posted to a forum, so I thought I'd write up some rebuttals to their comments. The first comment is by David Chisnall, creat...

Sheriff Mack Takes Peace Officers Back In Time for A Compassion Check - Sheriff Mack Takes Peace Officers Back In Time for A Compassion Check Login and Watch This Week's Webinar Join the Posse and Help Save America

Q3 2022 Advanced Threat Defense (ATD) and ATD-Email Test Results Posted - How can organizations stop unknown threats, you ask? ICSA Labs performs quarterly security product/solution testing to see if/how well they protect endpoi...

Juice Jacking How cyber thieves hack cell phones through public charging stations -

Hello world! - Welcome to WordPress. This is your first post. Edit or delete it, then start writing! The post Hello world! first appeared on Bump In The Wire.

My First Encounter - The Hospital My first encounter happened with an unusual twist. I was in the waiting room of the hospital that my mom was in. She was there because she had...

Efren Reyes Net Worth 2022 | All about Income, Earning, Wealth and more - Net Worth: $1,386,000 Approx. Income: $384,653 Approx. Estimated current Net Worth of Efren Reyes is $1,386,000, which mostly depends on the estimated inco...

Why Are Humans The Weakest Link In Cybersecurity? - Technology exists to enable people. Whether they use it for personal or professional reasons, people are the common link driving technology adoption. On ...

China Is Building A Second Nuclear Missile Silo Field - The Chinese missile silo program constitutes the most extensive silo construction since the US and Soviet missile silo construction during the Cold War.

Pentagon Sees “Increased Potential” for Nuclear Conflict - The possibility that nuclear weapons could be used in regional or global conflicts is growing, said a newly disclosed Pentagon doctrinal publication on nuc...

The Massive Shift to Cyber Crime - There is a cartoon in The New Yorker of March 30, 2020 showing four mobsters, one with a gun, sitting around a table. The caption reads: “For health and sa...

7 VPNs that leaked their logs – the logs that “didn’t exist” - Just how private is your Virtual Private Network?

7 VPNs that leaked their logs – the logs that “didn’t exist” - Just how private is your Virtual Private Network?

Top 5 Steps to Immerse yourself into the cybersecurity field - This blog provides details about how to start your career in Cybersecurity

Hello world! - Welcome to WordPress. This is your first post. Edit or delete it, then start writing!

New Perspectives on Cloud Security: An Interview with Gururaj Pandurangi - CONGRATS CLOUDNEETI! https://www.geekwire.com/2020/zscaler-acquire-seattle-cloud-security-startup-cloudneeti/ The Capital One breach last year was signif...

Russian Dolls - a design pattern for end to end secure transactions - Tweet thread: This is a great research attack on a SWIFT-using payment institution (likely a British bank allowing the research to be conducted) from Olive...

ECB's Christine Lagarde on Cyber Risk in Financial Systems - But cyber risk is becoming important for financial stability, too. As forthcoming analysis from the European Systemic Risk Board shows, there are plausib...

Thirty-four years in IT - The Application That Almost Broke Me (Part 9) - The last half of 2011 was for me an my team a really, really tough time. As I hinted to in this post, by August 2011 we were buried in Oracle 11 & applicat...

Devoops: Nomad with raw_exec enabled - "Nomad is a flexible container orchestration tool that enables an organization to easily deploy and manage any containerized or legacy application using a ...

The Oldest Casinos in Las Vegas - Las Vegas is one name that strikes our minds each time we think about having a bachelor party. The place has its own unique features that make it an idea...

Unauthenticated Remote Code Execution in Kentico CMS - Aon’s Cyber Solutions Security Testing team recently discovered a vulnerability, CVE-2019-10068, in the Kentico CMS platform versions 12.0.14 and earlier...

Aging Navy Destroyers Will Get Radar Upgrades to Counter Threats from China, Russia - The Navy is taking a big step toward keeping some of its aging destroyers in the fight.

Better Business Bureau Tool to Track, Report and Educate the Common Person on Scams - The BBB Scam Tracker is a robust interactive tool to track fraudulent activity in throughout North America. The data I viewed from Mexico seems to be minim...

The Long Night is Coming - Written by an anonymous friend who also ...

The SecurityOrb Show - An Interview with Haiti CyberCon Co-Founder Michel Arbrouet - HaitiCyberCon is an InfoSec/Hacker conference for professionals and enthusiasts alike located in Haiti, offering training as well interesting and inventive...

Improve Security by Thinking Beyond the Security Realm - It used to be that dairy farmers relied on whatever was growing in the area to feed their cattle. They filled the trough with vegetation grown right on t...

Lucky Break - One of the things I do from time to time is throw out an open ended question on Twitter. Sometimes I’m making a point, sometimes I just want to amuse myse...

Kjøp bitcoin - Kjøp Bitcoin med kredittkort Bitcoin er som sagt en av de ressursene som folk gjerne vil ha en liten del av i tilfelle det blir en enda sterke ressurs elle...

Leaky Amazon S3 Buckets: Challenges, Solutions and Best Practices - Amazon Web Service (AWS) S3 buckets have become a common source of data loss for public and private organizations alike. Here are five solutions you can ...

Take it from Pope Francis and Illinois: the death penalty should go - The following editorial by the Chicago Sun-Times was published on August 2, 2018. Take it from Illinois, the death penalty is a moral embarrassment. For d...

How to Speed Up Macbook - Is Mac running too slow? Here are some performance hints and software suggestions to speed up Mac or MacBook and make it run faster. If…

Content Security Policy in Practice - The implementation of Content Security Policy to leverage web browser capability in protecting a web application from cross-site scripting attack has been ...

Google's AI Policy: We're Ditching Project Maven, But Not the Feds - Google unveiled a new artificial intelligence ethics policy after abandoning its involvement in a Pentagon project to use AI for analyzing drone footage. B...

toolsmith #132 - The HELK vs APTSimulator - Part 2 - Continuing where we left off in The HELK vs APTSimulator - Part 1, I will focus our attention on additional, useful HELK features to aid you in your thr...

Overview of Petya, a rapid cyberattack - In the first blog post of this 3-part series, we introduced what rapid cyberattacks are and illustrated how they are different in terms of execution and ou...

Information Security Events For January - Here are information security events in North America this month: FloCon 2018 : January 8 to 11 in Tucson, AZ, USA ICS Security Conference (S4x18...

Phishing: customers Tele2 target by phishers - MX Lab, http://www.mxlab.eu, started to intercept a phishing campaign that targets Dutch speaking clients of Tele2, a telecom company offering internet c...

The Ethical Hacker Network Rises from the Ashes - [image: A phoenix depicted in a book of legendary creatures by FJ Bertuch (1747–1822)]This past summer while attending Black Hat and DEF CON, I was appro...

If You Only Have Half a Day in Ubud - When you are in Bali, don’t forget to pick up Ubud as one of your destination. This town has its old world charm, with its many to offer to stay around the...

Child Sex Trafficking and Bypassing Security on a Tablet Computer - This post examines a recent opinion from the U.S. Court of Appeals for the 11th Circuit: *U.S. v. Blake*, 868 F.3d 960 (2017). The court begins the opin...

EnCase v8 EnScript - Check executables to VirusTotal - I have updated the EnScript to send hash values for all executable/DLLs to VirusTotal for analysis. This version works in EnCase v8 and the source code i...

Fuzzing PJSIP and chan_skinny, vulnerability information and advisories - In the recent past, Alfred Farrugia and myself started looking at *fuzzing* OpenSource VoIP projects such as Asterisk, FreeSWITCH and Kamailio and their de...

V2V Communications security considerations - The future of vehicles, road infrastructure and driving are changing. We are progressing with vehicle-to-vehicle (V2V) and vehicle-to-infrastructure (V2I) ...

Unpatched mobiles and trojanized systems - Organizations provide their end-users means of connecting to internal network resources, typically laptops with specific operating systems under the contro...

Why LiveJournal - Somebody recently asked me why I stick with LiveJournal after all of these years. It's because of Frank, http://www.livejournal.com/site/goat.bml

Patient Safely, Validated State, and Cyber Security! OH MY! - There are some interesting influences on medical devices related to cyber security (yeah, I know, cyber. Common parlance is common parlance.) that you may ...

Big Data Needs Big Security. Here’s Why. - In case you thought that big data was no longer a big deal, think again. IDC predicts continued double-digit growth for big data and business analytics thr...

Respect the Hackers! Or: Why we all should care more about IT Security -

Links to recent TDoS articles - 11/03/2016 - The day the 911 network stood still http://www.networkworld.com/article/3137526/security/the-day-the-911-network-stood-still.html 10/24/2016 -...

Be more productive with Skype Preview 11.9 for Windows 10 - Today we’re rolling out Skype Preview 11.9 for Windows 10 PCs and phones as we continue to bring new features following the Anniversary Update. This upda...

Pokemon Go: The Perfect Storm of Novelty and Nostalgia -

Core Security Combines Identity, Vulnerability, and Now Network Detection and Response - SYS-CON The post Core Security Combines Identity, Vulnerability, and Now Network Detection and Response appeared first on Damballa.

Curso de introducción al hacking ético - Se trata de un documento que escribí yo mismo hará ahora algo menos de 2 años y que pretendía dar unas pinceladas básicas acerca del mundo del pentesting y...

July 2016 security update release - Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply secur...

Miley Cyrus adopts dog - Miley Cyrus has adopted another dog. The ‘Wrecking Ball’ hitmaker – who has taken in a number of furry friends over the past four years including a pet p...

Safety First – Was Sie bei Sex-Treffen beachten sollten - In der Welt der modernen Kommunikation ist der nächste Flirt oft nur einen Klick weit entfernt – Betrüger aber leider ebenso. Selbst wer im Umgang mit dem ...

Recent Attacks Illuminate the Islamic State’s Europe Attack Network - Originally posted on Modern Tokyo News: Recent Attacks Illuminate the Islamic State’s Europe Attack Network By: Daveed Gartenstein-Ross, Nathaniel Barr The...

Free tools to design your website - Do you need to build a site without needing to know any HTML or other geeky stuff? I picked the finest web site builders to bring your vision of your dream...

This is still a Thing - It’s been over 2 years since I’ve last vented about FISMA / FedRAMP. I am now committing to doing more posts. I’m thinking biweekly (one every other wee...

Secure Development Blog - We’re proud to announce Secure Development at Microsoft, our developer focused security blog at Microsoft. The blog was created to inform developers of new...

Enhanced Mitigation Experience Toolkit (EMET) version 5.5 is now available - The Enhanced Mitigation Experience Toolkit (EMET) benefits enterprises and all computer users by helping to protect against security threats and breaches t...

An idea to help secure U.S. cybersecurity… - … and looking for the right person to show us how to do so. A few years back I was watching a presentation given by General Keith B. Alexander, who was...

Soon� - Posted by Sean @ 12:52 GMT ------------------------------ Our "construction project" is progressing nicely. [image: A work in progress] And it should res...

PDF + DOC + VBAs Videos [Didier Stevens] - I produced videos showing how I created my “Test File: PDF With Embedded DOC Dropping EICAR” and how to change the settings in Adobe Reader to mitigate this.

CyberSpeak Aug 31 2015 - SRUM - CyberSpeak is BACK and we hope to publish a monthly podcast (more if I'm lucky). This episode on CyberSpeak we briefly discuss possible implications to U...

10 Bits of Logging and Monitoring for Architectural Success - I've been involved in a logging and monitoring project recently, and realised how close to their chests most vendors and other companies doing this type of...

OWASP DC: July 1 - The DC chapter of OWASP is meeting on 7/1. Topic: SQLViking: Pillaging Your Data Read more →

Jailbreaking iOS is a Dead Man Walking - Rumor has it that Apple will include a new security feature (possibly known to the developers in Apple as "Rootless") in the upcoming releases iOS 9 and ...

Hackable Houses and Compromised Cars - *The following is a guest post written by Lucy C., a co-op student from Lisgar Collegiate Institute in Ottawa.* The idea of having a smart home or a smart...

Developing an IR Process and Team - In our world today, we have an abundance of many things, among which are –unexpected events. Falling meteorites, terrorist attacks, hacktivist demonstratio...

Episode #180: Open for the Holidays! - Not-so-Tiny Tim checks in with the ghost of Christmas present: I know many of you have been sitting on Santa's lap wishing for more Command Line Kung Fu. ...

SS7 Security On Techmeme? A Reminder About Interconnected Systems… - SS7 security issues reported on Techmeme? I did a double-take yesterday and, as Jay Cuthrell noted on Twitter, wondered if this was a “ThrowbackThursday” ...

Imaging drives protected with Apple FileVault2 encryption - Recognising FileVault2 encryption Apple FileVault 2 facilitates full disk encryption and requires OS X Lion or later and OS X Recovery installed on the ...

Scan for shellshock with wfuzz - In the last few weeks everyone has been talking about Shellshock, the vulnerability affecting bash and having security ramifications everywhere, from Web,...

One Step Ahead Part 3 - One Step Ahead Part 3 is out on the Nuix blog, Unstructured!

I am not suffering from blogger’s block. - I post rarely on this blog, but not because I am suffering from blogger’s block; on the contrary, I have too many ideas and exciting things to share. Unlik...

Cyberspace 2025 Student Essay Contest - Posted by: Kevin Sullivan, Principal Security Strategist, Trustworthy Computing When Sam Coxwell submitted his entry to last year’s Microsoft cybersecurity...

IGF Boycott Statement - IGF Boycott Statement 18 August, 2014 You can download a formatted and footnoted PDF version from here The objective of each annual IGF programme is to max...

July Security Alert - Hi Oracle Security Folks, The July Oracle Security Alert is out. My part is smaller than last quarter as just an In-Depth Credit, but Mr David Litchfield m...

pStorage, A PersistJS Wrapper for AJAX - I Recently came across PersistJS when I wanted to build a caching layer […]

RSA Announces End of RSA Security Conference - Aims to bring clarity to cloudy marketing messages through exhibit hall chotskies Bedford, MA., – April 1, 2014 – RSA, the security division of EMC, today ...

Citi Faces SEC and Mexican Probes Over $235m Banamex Fraud - http://www.ibtimes.co.uk/citi-faces-sec-mexican-probes-over-235m-banamex-fraud-1438605

The Network Security Prayer - Based on the Serenity Prayer God, Grant me the serenity to accept the things I cannot secure The courage to secure the things I can And the wisdom to know t...

Slide Attacks - One of my recent interests is cryptanalysis of DES/3-DES. A friend recently introduced me to slide attacks which are really interesting. There's a great in...

Wisconsin Association of Computer Crime Investigators 2013 Conference - "Sup" (...been a long while) PTFinderFE is obsolete do to the new innovations in Volatility. (Updated 10/20/13)My New Volatility Batch File Maker does all ...

NASIC 2013 Missile Threat - NASIC has released the 2013 edition of their highly amusing Ballistic and Cruise Missile Threat document! This is something I've been waiting for since th...

Building Rich Internet Applications Models: Example of a Better Strategy - Crawling “classical” web applications is a problem that has been addressed more than a decode ago. Efficient crawling of web applications that use advanced...

AoIS Resurrection… to blogs.Gartner.com - As you may have noticed there has been no activity on Art of Information Security for a long time. Things got really busy in my work and personal lives, an...

Some Mindmaps Online - Over the years I have developed many mind maps when writing articles, and I have also used them as a way of collecting information and organising it. I wa...

New Blue Box episodes coming... - Last week I recorded the first "Blue Box: Special Edition" interview that I have recorded in several years... and so I just wanted to give anyone reading t...

Ubuntu 13.04 Released Today and So Is Ubuntu Kylin 13.04 - Official download site: http://www.ubuntu.com/download Ubuntu Chinese Desktop distros, including the new Kylin: http://www.ubuntu.com/download/desktop/zh-CN

It was bound to happen sooner or later... - Well - it happened. Brian Katz (@bmkatz) gave me a soapbox to stand on last week - and this is the result. http://www.thecloudcast.net/2013/04/the-mobilec...

HITB Malaysia - Day 1 - I am currently attending Hack In The Box (HITB), a major security conference in Kuala Lumpur, Malaysia. This is the first security conference I have att...

Seven Habits of Highly Effective Security Plans [Part 6] -

New PGP key - Just a short notice that I updated my PGP key. Barely anyone ever used my key and sent me encrypted email. But as I'm lately getting more involved in CER...

Moving House - Yes, we are :) *Click the image to visit the new GFI Labs Blog* An inevitable move, this. After all, Sunbelt Software has been part of GFI Software for m...

mimikatz: Tool To Recover Cleartext Passwords From Lsass - I meant to blog about this a while ago, but never got round to it. Here’s a brief post about very cool feature of a tool called mimikatz. I’m very grateful...

Evtx Parser Version 1.1.1 - I'm releasing version 1.1.1 of the Windows Eventlog Parser library and tools collection for Perl. This version fixes a memory leak. I thank Heinz Mueller f...

Congressman lambastes Chinese cyber-espionage - From the Washington Post, The chairman of the House intelligence committee on Tuesday launched a broadside against the Chinese government and its efforts t...

Unnatural Selection by Mara Hvistendahl - Mara Hvistendahl has been a very good friend here at TDV and in addition to Mara’s extensive knowledge of Chinese hackers, she is pretty much an expert on ...

On the sophistication of attacks - If they appear unsophisticated, you will believe that they are not capable of more. If you believe that is all they are capable of, you will assume they ar...

Help Fix Google Privacy Campaign: Submit Your Comments - The FTC is seeking public comment on its proposed Agreement with Google regarding Google Buzz, and EPIC wants your voice to be heard! Use the form below ...

Spoiled Rotten Spa Owner Arrested, Charged With Fraud - Woman Made Fraudulent Credit Card Charges, Police Say APTOS, Calif. -- The former owner of Spoiled Rotten Day Spa in Aptos was arrested Friday after sever...

Pen Test Perfect Storm 6: We Love Cisco! - Today, Kevin Johnson, Ed Skoudis and I delivered the 6th part of the Pen Test Perfect Storm Trilogy: We Love Cisco!. In the webcast, hosted by CORE Securit...

Health Net slow to tell members of security breach - Health Net slow to tell members of security breach: “” (Via .)

New NIE on Iran nuke program appears to differ little from 2007 findings - The U.S. intelligence community has completed a new National Intelligence Estimate for President Barack Obama and Congress on Iran's nuclear program. The k...

John D. Solomon, 1963-2010 - John Solomon, the life-affirming voice of this blog, died Monday, November 1, from complications following a bone marrow transplant for leukemia. He was 47...

On the way back home - The trip is over and was definitely a success, sitting in BWI airport about to catch the first thing smoking back to Seattle via Air Tran. Time to fly home...

Declarative Security and Reflection - If you’re using the CustomAttributeData APIs to examine declarative security permission, you might notice that the returned information looks a little stra...

Not Another Penetration testing course - Have you ever attended a Penetration testing course?Have you found it vague/boring? Far from what your clients are asking you?If your answer is no, you can...

Not Another Penetration testing course - Have you ever attended a Penetration testing course?Have you found it vague/boring? Far from what your clients are asking you?If your answer is no, you can...

End of Innocence - Staff Sergeant George Nickel is in court again today. Hopefully, this will be the last time. Hopefully, we’ll see him go somewhere where he can get the hel...

Black Hat USA 2010 Training: Pentesting with Backtrack by Offensive Security - This intense four day hands on course is taught by the creators of Backtrack. The course has sold out by June with double digit waitlist every year that we...

News: Change in Focus - Change in Focus

Review of "Inside Cyber Warfare" posted - Yes, I've been on a reading kick lately, and my most recent selection was Jeffrey Carr's *Inside Cyber Warfare: Mapping the Cyber Underworld*. I'm not rea...

Dual Sims Coming In 2010! - Want to have both your Business AND Personal calls coming in on the same phone? *http://tinyurl.com/ybexv2n*

CN Less Clearly - On December 11, the China Internet Network Information Center (CNNIC) announced that individuals hoping to register .CN domain names are now required to pr...

Top Ten Web Security Risks - Some commentary on my new blog at www.spiresecurity.com.

Certifications are Evil.....By John McCash - Note: The following does not represent the opinion of Mark McKinnon. He merely had the good grace to allow me a forum in which to post it after it was re...

Released : Windows SDK for Windows 7 - Hi The RTM release of SDK samples for Windows 7 is now available for download. The samples can be downloaded in ISO format or Web Setup format. This rele...

IMPORTANT REMINDER: My Blog and RSS Feed Have Moved To http://www.rationalsurvivability.com/blog - This will be my last post here, so please adjust your landing accordingly to now point to: www.rationalsurvivability.com/blog If you're using an RSS reader...

Weekend Frame - Moon Over The Valley - Camera: Nikon D70s Exposure: 0.001 sec (1/1600) Aperture: f/5.6 Focal Length: 48 mm Exposure: 0.00 ISO Speed: 400

Actions against registry services abuse – Report April 2009 - The above in figures review the recent actions of Directi, in conjunction with HostExploit independent advice, taken to track down and stop abusive dom...

We are moving - as of now, please refer to http://blog.remes-it.be aka 'The Security Kitchen'. This blog is officially closed.

PayPal UK Launch Security Key - Guest Posting from PayPal - I am happy to say they are using VeriSign Identity Protection to deliver this, which means that PayPal Customers will be able to use their token at other s...

Email RFC 2142 - I am always amazed at the wealth of talent on the SANS alumni email list. Yesterday, someone asked "what email address do you use for security? If someone ...

We Have Moved - Good day, Paul Cooke here. The Windows Vista Security blog has been a great avenue for us to talk with you about what has made Windows Vista the most sec...

ICS and "Where Do I Start" - It is a surprisingly simple question, but one that I am not accustomed to answering, and I think that I did a poor job in addressing. I basically pointed t...

RegRipper, regview, and Bluetooth Registry Settings - During DFRWS '08, I thought it might be worthwhile to have an easy way to make RegRipper plugins. In fact, I asked Harlan if he had a plugin generator; bac...

Identity theft 'main purpose of phishing' - Identity theft and fraud are among the main driving forces behind phishing attacks, it has been suggested. The Daily Vidette, news publication of Illinois ...

post removed -

Facebook Worm? - Details are sketchy at this point, but is Facebook undergoing an XSS worm attack? I checked with my Aunt, and she thinks someone may have stolen her passwo...

Considering Taking the CISSP? – Consider This! - I am a big fan of computer based training – I think the potential for this is enormous especially for organizations that are looking to train large numbe...

RBN – Fake Codecs - With the ongoing tracking of “fake” software websites related to the Russian Business Network (RBN) and their associates it is important to note the growt...

Migrating from NTLM to Negotiate in a nutshell - Migrating to Negotiate from NTLM is quite simple in most cases. It breaks down into these four simple steps: First, build an SPN for your Service When I t...

Experts divided on Microsoft worm threat - Security experts are divided over the effects of the latest rash of worms that exploit a vulnerability in Microsoft's Plug-and-Play software. There have be...

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-