Category Archives: security

China’s Blue Team

It seems that China finally had their come to Jesus moment.  They realize the value in having a cyber warfare command.  They have formed a blue team composed of 30 technology-savvy officers and soldiers. Does that strike anyone else as … Continue reading

Posted in news, security | Tagged | Leave a comment

Virtualization Security Podcast

I recently came across an interesting podcast centered on virtualization security.  Personally, I don’t get off on virtualization besides using Vmware for BackTrack and Windows but this may be of some interest to folks out there.  Currently, there’s over 60′s … Continue reading

Posted in news, security | Tagged , | Leave a comment

Recent WordPress vulns and the Open Source Vuln DB

There’s been too many WordPress vulnerabilities for my liking.  Fortunately they seem to be quick to patch but software updates are always a pain. How long before everyone starts to adopt Chrome’s auto update feature? Luckily, I’m a fan of … Continue reading

Posted in news, security | Tagged , | Leave a comment

LastPass & DropBox breach thoughts

LastPass, the online cloud based password manager, and Dropbox, the cloud based storage service, both reported possible security concerns.  A dropbox vulnerability(?) was discovered where an attacker with physical access to a PC can steal a certain config file and … Continue reading

Posted in news, security | Leave a comment

OWASP Appsec Tutorial Series

I don’t remember where I found these links —- researching White Hat security I believe after reading an entry in Grossman’s blog, don’t quote me though… Anyways I thought the videos below are valuable if you’re into appsec for a … Continue reading

Posted in news, security | Leave a comment

Hacking to pwn a cop car

My boy Kevin Finisterre recently made headlines while doing a penetration test on a city’s infrastructure. (Kevin and I knew each other from past lives) It turns out Kevin discovered a way to access video dumps from a police dash … Continue reading

Posted in news, pentest, security | Leave a comment

Simplifying Information Security Risk Assessments

There’s a free webcast available from Accuvant’s Doug Landoll on Simplifying your Risk Assessments available here. Some of the highlights are: First, data and system owners need to be included on discussions to set protection requirements based on their criticality … Continue reading

Posted in news, pentest, security | Leave a comment

Free IPv6 /48 prefix via tunneling over the existing IPv4 Internet

(I thought this posting was relevant now as ?APNIC just assigned their last block of i Hurricane Electric offers a free IPv6 tunneling service if you would like to begin using and or experimenting with the next generation internet protocol.  … Continue reading

Posted in networking, news | Tagged | Leave a comment

Night Dragon

Puff the Magic, err I mean McAfee’s “Night Dragon” is what they’ve named tools, techniques, and network activities used in continuing attacks since November 2009 targeted against global oil, energy, and petrochemical companies. Again, it seems like the same old … Continue reading

Posted in news, security | Tagged | Leave a comment

List of 2010 Annual Security Reports

As the 2010 Annual Security reports are released from the various security firms I’ll keep our security report page updated as well as a summary of what everyone is highlighting.  So far, the main issue is “borderless security” and the … Continue reading

Posted in news, privacy, security | Leave a comment