Browse by Tags
All Tags » Security » Developer ( RSS)
-
|
Microsoft released the announced out of band security update MS08-067. Please read the bulletin carefully and then apply the update as soon as possible. http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx In addition there is also an excellent...
|
-
|
Last week Microsoft released IE8 Beta2, the faster, easier and safer successor of the existing Internet Explorer. As there are a lot of changes (new default settings, new support for standards, new features), it's definitely woth to try and test IE8...
|
-
|
The Open Computer Forensics Architecture (OCFA) is a modular computer forensics framework built by the Dutch National Police Agency. The main goal is to automate the digital forensic process to speed up the investigation and give tactical investigators...
|
-
|
( RTM = Released to Manufacturing) Yes indeed.. today the newest version of the best database software platform anywhere reached a major milestone. It’s ready! You can read the PressPass announcement here. And here is the official press location...
|
-
|
Seit Ende Juni gibt es eine Hilfe für Entwickler und IT-Administratoren gegen SQL Injection in Websites vom Typ classic asp und zwar den Microsoft Source Code Analyzer for SQL Injection - June 2008 CTP (siehe auch Beitrag Totgesagte leben länger - so...
|
-
|
In cast you didn't see it, the Microsoft Security Response Center (MSRC) team just announced the release of three tools to help customers fend off SQL injection attacks: UrlScan 3.0 Beta ( see Wade Hilmo's blog for more ), a security tool that...
|
-
|
I wanted to mention to folks that a new Security Development Lifecycle (SDL) web site went up earlier this month on microsoft.com. Amazingly, you can navigate to it via http://www.microsoft.com/sdl , instead of some long name you'd never remember...
|
-
|
Excerpt: The spread of wide-scale Internet surveillance has spurred interest in anonymity systems that protect users’ privacy by restricting unauthorized access to their identity. This requirement can be considered as a flow control policy in the well...
|
-
|
Die guten alten Zeiten - da war alles noch einfacher. Oder doch nicht? Ich habe mal an einem größeren Shop-System programmiert - das war im Jahr 2000 - und dabei gelernt, dass man einige Dinge beachten muss: Funktionalität, Usability und ... Security...
|
-
|
There s a lot of noise arround currently ongoig SQL injection attacks and even if that is quite an "old" topic, there are still a lot of unprotected servers out in the cloud. This has nothing to do with vulnerabilities in the products (Webserver...
|
-
|
If you're an IT pro who is looking a bit more seriously at Windows Vista for your enterprise environment, you should take a close look at the firewall. Once you realize what the Windows Vista firewall can do, you may want to renegotiate the agreement...
|
-
|
Run as Administrator for third-party scripting tools Run as Another User Prompt Here as System for CMD and Windows PowerShell Drag-and-drop Elevation Gadget http://technet.microsoft.com/en-us/magazine/cc510320.aspx Urs...( read more ) Share this post...
|
-
|
APGC 安全技術支援團隊在過去的幾周中接到了多個利用 SQL Injection( 資料隱碼 ) 攻擊並導致使用者被植入惡意程式的案例。有鑒於這些攻擊的影響以及愈發擴大的爆發規模，安全技術支援團隊以安全警報的形式發布資訊。請將這些資訊分享給客戶以及合作夥伴，提高對目前在網站攻擊事件上的警惕。 跡象 根據 5 月 19 號的估測，中國大陸，香港，臺灣的 12 萬網站受到了 SQL 注入攻擊。 在大中華地區，包括許多公共網站，包括政府，教育部門，非政府組織的慈善機構，以及私人企業都遭受到 SQL Injection...
|
-
|
The glitzy, interactive abilities of Web 2.0 have led to a profusion of new applications, but the technology also is bringing a new era of security vulnerabilities, a security researcher warned Wednesday. "Security was a challenge to begin with,...
|
-
|
Researchers have devised an encryption scheme that could simplify the protection of sensitive information by allowing banks, hospitals, and other organizations to lock files using keys that are based on specific attributes, such as an employee's position...
|
-
|
Quantum cryptography, a new technology until now considered 100 per cent secure against attacks on sensitive data traffic, has a flaw after all, Swedish researchers say. "In computer terms, we've found a bug," said Jan-Aake Larsson, an associate...
|
-
|
Microsoft has called on companies to work together to improve overall security, and not just rely on the police to do it for them. Ed Gibson, Microsoft's chief security advisor in the UK, said during his keynote at Infosecurity Europe 2008 that security...
|
-
|
Paper Abstract: In this paper, we propose techniques for automatic patch-based exploit generation, and show that our techniques can automatically generate exploits for vulnerable programs based upon patches provided via Windows Update. In many cases we...
|
-
|
Microsoft today called for broad discussions about the safety of the Internet in an initiative it dubbed "End to End Trust" in a white paper released during the RSA Conference that opened today in San Francisco. In a keynote address at the security conference...
|
-
|
In a new report released by European information technology analysis group, Quocirca, organisations that admitted to being frequently hacked, all outsource at least some of their coding practice, with 90 percent outsourcing more than 40 percent! With...
|
-
|
The USA's Internet Crime Complaint Center (IC3) is a partnership between the FBI and the National White Collar Crime Center (NW3C). Last week, the IC3 released its annual report for 2007. You can download a copy from here . From F-Secure: Malicious software...
|
-
|
Security researchers are cooking up tactics for beating phishing fraudsters at their own game. Phishers perennially set up fraudulent sites on servers they have compromised. But due to the sheer volume of sites that need to be set up to perform a successful...
|
-
|
Mobiles Arbeiten wird für Wettbewerbsfaktoren wie Flexibilität, Geschwindigkeit und Kundennähe immer wichtiger. Elementare Voraussetzung dafür ist eine mobile IT, die neben einer hohen Verfügbarkeit vor allem maximale Sicherheit...
|
-
|
In this post from the ACE Team, they show how to generate Security Code Review Checklist using patterns & practices Guidance Explorer and Outlook 2007. Checklist documents can be generated without Outlook 2007 by only using the Guidance Explorer client...
|
-
|
Microsoft Corp. hopes to beef up online privacy with the acquisition of the U-Prove technology, the company announced on Thursday. U-Prove was developed by Stefan Brands at Credentica Inc. to allow Internet users to disclose only the minimum amount of...
|
More Posts Next page »
|
|