SEGURIDAD Y TECNOLOGÍAS DE LA INFORMACIÓN

una-al-dia Hispasec

• (28/08/2008) Denegación de servicio a través de llamadas de procedimiento remoto NFS en Solaris 10
  
• (27/08/2008) Ejecución de código arbitrario a través de streams mms en VLC
  
• (26/08/2008) El problema criptográfico de Debian parece estar siendo aprovechado activamente por atacantes
  
• (25/08/2008) Denegación de servicio por problema de regresión en sshd de Solaris 9 y 10
  
• (24/08/2008) Vulnerabilidades a través de rdesktop en OpenSolaris
  
• (23/08/2008) Denegación de servicio a través de scripts Python en Zope 2.x
  
• (22/08/2008) Denegación de servicio en Adobe Flash Player
  
• (21/08/2008) La versión 9.52 de Opera corrige hasta siete vulnerabilidades
  
• (20/08/2008) Ejecución remota de código a través de archivos TTA en VLC Media Player
  
• (19/08/2008) ¿La seguridad de Windows Vista en entredicho?
  

Blog Laboratorio Hispasec

• Ruckingenur II: Ingeniería inversa de circuitos
  
• Alertvir, paradojas antivirus
  
• Troyano-Downloader infecta ficheros multimedia
  
• ¡Podemos!
  
• VirusTotal += K7
  
• VirusTotal += (PCTools,ViRobot)
  

Hispasec Corporate. Seguridad Corporativa y Estrategia TI

• Los IDS como instrumento de lucha contra los exploits y el malware
  
• Canonical y Panda anuncian conjuntamente un producto antivirus para Ubuntu Linux
  
• AOL decide regalar un antivirus a los usuarios
  
• Google libera cantidades masivas de datos
  
• Yahoo! abre las puertas de su nuevo blog corporativo
  

SecurityFocus News

• News: Online intruders hit Red Hat, Fedora Project
  
• News: Researchers race to zero in record time
  
• News: Gov't charges alleged TJX credit-card thieves
  
• News: Poisoned DNS servers pop up as ISPs patch
  
• Brief: "One-Character Patch" for DNS? Not so fast
  
• Brief: U.S. to deploy DNS Security in two years
  
• Brief: Denial, hype cloud report of Best Western breach
  
• Brief: Search hacker exposes Olympic age scandal
  
• News: TJX employee fired for exposing shoddy security
  
• News: Thoughts of a Teenage Bot Master
  

SecurityFocus Vulnerabilities

• Vuln: Retired: Microsoft Windows GDI 'CreateDIBPatternBrushPt' Function Heap Overflow Vulnerability
  
• Vuln: Wireshark 1.0.1 Denial of Service Vulnerability
  
• Vuln: Wireshark 1.0.0 Multiple Vulnerabilities
  
• Vuln: Invision Power Board Multiple Remote Security Vulnerabilities
  
• Bugtraq: [Exploit] Invision Power Board <= 2.3.5 Multiple Vulnerabilities
  
• Bugtraq: [Advisory] Invision Power Board <= 2.3.5 Multiple Vulnerabilities and Security Bypass
  
• Bugtraq: Re: [Exploit] Invision Power Board <= 2.3.5 Multiple Vulnerabilities
  
• Bugtraq: [scip_Advisory 3807] Dreambox DM500 webserver long URL request denial of service
  
• More rss feeds from SecurityFocus
  

Shell Security Group

• Problema de seguridad en servidores de Google expone información sensible
  
• Devastadores efectos del gusano Nuwar
  
• SafeNet lanza una aplicación para encriptar las comunicaciones móviles
  
• ISO 27001: "los controles" (parte II)
  
• La seguridad en Windows Vista
  
• Alerta de un phishing que simula una devolución fiscal de la Agencia Tributaria
  
• Alerta: Correos falsos que anuncian la muerte de Fidel Castro y/o Hugo Chávez
  
• Circula en internet un peligroso Kit para realizar ataques de phishing
  
• Videos y fotos de la ejecución de Saddam que contienen virus informáticos y spyware.
  
• Feliz 2.007
  

Latest Secunia Security Advisories

• [2/5] dotProject SQL Injection and Cross-Site Scripting
  
• [2/5] Caudium "configvar" Insecure Temporary Files
  
• [3/5] HP TCP/IP Services for OpenVMS Finger Format String Vulnerability
  
• [3/5] Adium MSN SLP Message Integer Overflow Vulnerabilities
  
• [2/5] Blogn Cross-Site Scripting and Cross-Site Request Forgery
  
• [3/5] Novell eDirectory Multiple Vulnerabilities
  
• [1/5] GpsDrive "geo-code" Insecure Temporary Files
  
• [1/5] geo-* Insecure Temporary Files
  
• [4/5] Acoustica Mixcraft ".mx4" File Processing Buffer Overflow
  
• [1/5] Sun Solaris Kernel Covert Channel Security Bypass
  

Schneier on Security

• Friday Squid Blogging: Translucent Squid
  
• Another Voting Machine Cartoon
  
• A British Bank Bans a Man's Password
  
• Border Gateway Protocol (BGP) Attacks
  
• The TSA Told You That Liquids Are Dangerous
  
• Diebold Finally Admits its Voting Machines Drop Votes
  
• Virus Infects the Space Station
  
• Doctoring Photographs without Photoshop
  
• Full Disclosure and the Boston Farecard Hack
  
• Red Light Cameras Don't Work
  

InfoWorld RSS Feed

• Top 10: Bracing for Gustav, Oracle and Google woes
  
• Oracle technical forum upgrade plagued with problems
  
• Continuent launches open-source database scale-out stack
  
• How to buy a mini-laptop
  
• Atom supply still stymied by testing bottleneck
  
• Judge finds Qualcomm in contempt of injunction
  
• IBM flash memory breaks 1 million IOPS barrier
  
• Comcast sets monthly bandwidth limit for customers
  
• You don't know tech: The InfoWorld news quiz
  
• Apple promises September fix for iPhone security flaw
  

InfoWorld RSS Feed

• Comcast sets monthly bandwidth limit for customers
  
• Apple promises September fix for iPhone security flaw
  
• European court won't stop U.K. hacker's extradition to U.S.
  
• Nortel uses USB drive to secure remote work
  
• Hackers resort to 'sick' kidnap spam
  
• Locked iPhones can be unlocked without a password
  
• Four quick tips for choosing an IM security product
  
• Call out a phisher, get attacked by malware
  
• Update: U.S. border-crossing database raises concerns
  
• IE8 to get privacy features
  

InfoWorld RSS Feed

• Continuent launches open-source database scale-out stack
  
• Performance-improvement integral to Windows 7, IE8
  
• Google introduces Android apps store
  
• Nortel uses USB drive to secure remote work
  
• Linux end-user summit planned
  
• Microsoft tweaks anti-piracy check for Windows XP
  
• Database vendors add Google's MapReduce
  
• Google drops Bluetooth, GTalkService APIs from Android 1.0
  
• Citrix puts virtualization spin on flagship software
  
• Update: Vista may still have its day
  

InfoWorld RSS Feed

• Is Desktop Linux for real?
  
• File sharing beyond the firewall
  
• Computer security's dubious future
  
• Getting entrepreneurial in 2008
  
• Eight great Microsoft reviews and analyses
  

InfoWorld RSS Feed

• Top 10: Bracing for Gustav, Oracle and Google woes
  
• Judge finds Qualcomm in contempt of injunction
  
• Comcast sets monthly bandwidth limit for customers
  
• You don't know tech: The InfoWorld news quiz
  
• Why your project management practices are failing
  
• European court won't stop U.K. hacker's extradition to U.S.
  
• Cisco buys into e-mail with PostPath acquisition
  
• Grim outlook for U.S. IT spending
  
• Mac clone maker sues Apple, plays antitrust card
  
• Update: U.S. border-crossing database raises concerns
  

Computer Crime Research News

• Hacker gets into FEMA phone system
  
• Hackers attack Iraq's vulnerable computers
  
• British hacker Gary McKinnon in final appeal to Home Secretary over extradition
  
• Cenzic Q2 Trend Report Reveals Attacks on Web Sites Continue as Cyberwarfare Moves Mainstream
  
• Feds indict 2 men in separate child porno cases
  
• HC allows porn convict access to computer in jail
  
• Azerbaijan to hold a seminar regarding Convention on Cybercrime
  
• The challenge of cyber crime
  
• Cafes yet to follow guidelines to combat cyber crime in Siliguri
  
• Indian hacker alleged brain behind biggest cyber-heist
  

Computer Crime Research Articles

• Cybercriminals Reinvent Methods of Malicious Attacks
  
• Crimes in cyber space
  
• Dozens Charged With Running Computer Crime Ring
  
• The Kind of Cybercrime Interpol Expects at the Summer Olympics
  
• Cybercrime is in a state of flux
  
• Cybercrime: Uncovered
  
• Technological private eye finds what computer lost
  
• The David Gorcyca Interview
  
• Virtual nightmares ride high
  
• Cyber-crimes - Analytical data compiled
  

CSO - Security Feed

• PC World: Sites’ Personal Questions May Pose Security Risk
  
• Hacker Super Bowl Pits Mac OS vs. Linux, Vista
  
• BLACK HAT : Ethical Hacker Group to Counter &lsquo;Black PR&rsquo;
  
• Google to Push Privacy Initiatives in U.S.
  
• Techworld: Supermarket for Stolen Credit Cards Found
  
• Hackers Seize on Excel Vulnerability
  
• CW: Agilent Warns Workers of Potential Compromise in Wake of Laptop Theft
  
• Computerworld: Washington Agency Moves to Plug Flash Drive Security Gap
  
• FBI Looks at Chinese Role in Darfur Site Hack
  
• Microsoft Warns of New Word Attack
  

Infosec Writers Latest Security Papers

• Berkeley Packet Filters - The Basics
  
• IDABench – The Network Security Analyst’s Toolbox 
  
• ITIL V3 Improves Information Security Management
  
• How to Block NDR Spam
  
• Web Application Security: Don't Bolt It On; Build It In
  
• Cybercrime & Cyberterrorism Against Corporate America
  
• Digital Piracy
  
• The Lack of Attention in the Prevention of Cyber Crime and How to Improve It
  
• A Brief Guide to Securing Wireless Networks: Closing the Back Door
  
• An Approach to Web Application Threat Modeling
  

IT Security

• Ubuntu Security Resource
  
• Famous Google Hack Jobs
  
• Brave New World of Identity Management
  
• What’s Next for NAC?
  
• So You Failed a Security Audit, Now What?
  
• Measuring the Value of IT Security
  
• Top 10 Most Famous Hackers of All Time
  
• Security Is Not an Add-On
  
• 103 Free Security Apps for Mac, Windows and Linux
  
• The Top 5 Internal Security Threats
  

Becoming paranoid

• Problogger Birthday Bash competitions
  
• Pure as the driven snow? Not!
  
• Insider Threats
  
• Networks Revisited
  
• Computer-speak
  
• What
hitchhikers along the information superhighway?
  
• TCP/IP Revisited
  
• IP, TCP/IP, oh my!
  
• Oh buggers!
  
• Good Security Starts at the Perimeter
  

The Spam Weblog

• Splogs, links, attention, and tech monoculture
  
• Should Google kill Blogspot?
  
• Massachusetts levies $37 million fine against "Internet Spam Gang"
  
• VeriSign acquires Weblogs.com to help combat splogs
  
• Collected from around the Network, this is the Best of Weblogs, Inc.
  
• It's time for the best of the Weblogs, Inc. Network
  
• Appeals Court Rules Against Some Unsolicitied Text Ads
  
• Time to bring the best of Weblogs, Inc, live and direct to you
  
• From across the network, it's the Best of Weblogs, Inc.
  
• Live from the internet, its your best of Weblogs, Inc.
  

F-Secure Antivirus Research Weblog

• Western Union MTCN #2989115571
  
• Space Based Malware
  
• Somebody Doesn't Like Us in Denmark
  
• An Unexpected Demonstration of Mobile Security
  
• Drops, Dumps, CVVS, WMZ, WU, et cetera...
  
• MSNBC / CNN malware run
  
• Teh skool
  
• About the Java vulnerability on S40 phones
  
• SQL Injection Attacks Targeting Chinese-oriented Sites
  
• Black Hat and DEF CON
  

FrSIRT Security Advisories and Vulnerabilities

• FrSIRT Security Advisories and Vulnerabilities
  
• Security Advisories
  
• FrSIRT Vulnerabilities
  
• FrSIRT Security Advisories and Vulnerabilities
  
• FrSIRT Security Advisories and Vulnerabilities
  
• Security Advisories
  
• Security Advisories
  
• Security Advisories
  
• Vulnerabilities
  
• FrSIRT Vulnerabilities
  

Kriptópolis - Criptografía, Privacidad y Seguridad en Internet

• El Tribunal Europeo de Derechos Humanos desestima la apelación de McKinnon
  
• ISS: Virus a bordo
  
• Wired: "Revelado el mayor agujero de seguridad de Internet"
  
• Servidores Linux, bajo ataque
  
• Según el Fiscal General de California, Citibank robó millones de dólares a sus clientes
  
• Fabricante de máquinas de voto electrónico reconoce ahora un "error" crítico presente desde hace diez años
  
• Obama + Biden = más de lo mismo
  
• Contra esteganografía... doble esteganografía
  
• Comprometidos servidores de Fedora y Red Hat
  
• Microsoft actualiza URLScan para contrarrestar los ataques masivos sobre sus servidores
  

CNET News.com | Tech news blog - Category: Security

• Dutch chipmaker sues to silence security researchers
  
• Video surveillance firm gets $10 million in VC funding
  
• Gmail now blocking fake eBay, PayPal e-mails
  
• Carnival atmosphere in security
  
• Microsoft probing ActiveX attacks targeting Access feature
  
• VeriSign names interim CEO
  
• Daily Debrief: Celebrating America's independence, questioning our own online
  
• Former HP printing exec indicted
  
• PINs stolen from Citibank ATMs
  
• Google Calendar now the target of phishers
  

OpenRCE: Blogs

• The IDA Pro book
  
• The IDA Pro book
  
• Mr. Bachaalany joins Hex-Rays
  
• OllySocketTrace
  
• forum and logs
  

SANS Internet Storm Center, InfoCON: green

• Infocon: green
  
• Scammers may use recorded snippets during voice phishing, (Fri, Aug 29th)
  
• VMware releases updates - don't forget to patch, (Fri, Aug 29th)
  
• Scams from today's mailbag, (Fri, Aug 29th)
  
• SWOT matrix for describing security posture, (Fri, Aug 29th)
  
• When using fear to sell security can backfire, (Thu, Aug 28th)
  
• IE8 Beta 2 Released: InPrivate Browsing, (Thu, Aug 28th)
  
• Active attacks using stolen SSH keys (UPDATED), (Tue, Aug 26th)
  
• Podcast Episode X Record Notice, (Tue, Aug 26th)
  

SecuriTeam Blogs

• SCO? Anybody home?
  
• Fedora confirms: Our servers were breached
  
• Nokia & Sun: Yes, Nokia S40 J2ME vulnerabilities exist
  
• Getting Paid For Others’ Work
  
• Vanity Search Attacks
  
• Linus and the “Security Circus”
  
• The Security Question Vulnerability
  
• That device on my work computer - was it there yesterday?
  
• MIDP’s and MIDlets put tens of millions Nokia S40 phones in danger
  
• CloudAV
  

SecuriTeam.com

• Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability
  
• Intel BIOS Plain Text Password Disclosure
  
• Alcatel-Lucent OmniSwitch Stack Buffer Overflow
  
• 8e6 Technologies R3000 Internet Filter Bypass with Host Decoy
  
• Wireshark RMI Packet Dissector Information Disclosure
  
• BSQL Hacker - Advanced SQL Injection Framework / Tool
  
• PorkBind - Nameserver Security Scanner
  
• SurfJack - Hijack HTTP Connections to Steal Cookies
  
• Powerfuzzer - Automated Web Fuzzer
  
• PuttyHijack - Putty Hijacking Tool
  

FrSIRT Security Advisories

• FrSIRT - Sun Solaris Covert Channel Local Security Bypass Vulnerability
  
• FrSIRT - OpenOffice.org "rtl_allocateMemory()" Truncation Vulnerability
  
• FrSIRT - TIBCO Hawk Components Remote Buffer Overflow Vulnerabilities
  
• FrSIRT - JustSystems Ichitaro Products Remote Code Execution Vulnerability
  
• FrSIRT - HP Enterprise Discovery Remote Privilege Escalation Vulnerability
  
• FrSIRT - IBM DB2 CLR Stored Procedures Unspecified Vulnerability
  
• FrSIRT - IBM Lotus Quickr Multiple Cross Site Scripting Vulnerabilities
  
• FrSIRT - Mono "Sys.Web" Module HTTP Header Injection Vulnerability
  
• FrSIRT - AWStats Totals Code Execution and Cross Ste Scripting Vulnerabilities
  
• FrSIRT - Sun Solaris NFS RPC Zone Denial of Service Vulnerability
  

(error displaying RSS feed)

(error displaying RSS feed)

SECCIONES

• Bitácoras de Barrapunto
  
• Sitios basados en Slashcode
  
• Weblogs personales
  
• Prensa escrita y digital
  
• Ciencia y tecnología
  
• Seguridad y tecnologías de la información
  
• Varios