Conference
Black Hat USA Welcomes Neal Stephenson to Keynote Stage

Black Hat, produced by UBM TechWeb, has announced that renowned speculative fiction writer Neal Stephenson will be interviewed in a keynote Q&A at this year's 15 year anniversary event. Black Hat USA 2012 is expected to host more than 6500 high-level security professionals for the most timely, actionable security presentations of the year.

Read more
General Security
Report: Hacked Syrian officials used '12345' as email password

After hundreds of emails from the office of Syrian President Bashar al-Assad were leaked on Monday, a report revealed that several of Assad's aides and advisers used the password "12345."

Read more
General Security
Hacker releases Symantec source code

A hacker released the source code for antivirus firm Symantec's pcAnywhere utility on Tuesday, raising fears that others could find security holes in the product and attempt takeovers of customer computers.

Read more
Vulnerability & Threat Report
Microsoft Windows DLL Load Hijacking (2269637)

Microsoft Windows DLL Load Hijacking (2269637)

Read more
Vulnerability Assessment
(MS09-062) GDI+ .Net PropertyItem Heap Overflow Vulnerability (957488)

(MS09-062) GDI+ .Net PropertyItem Heap Overflow Vulnerability (957488)

Read more
Vulnerability & Threat Report
Microsoft Windows Desktop Wallpaper Code Execution Vulnerability

Microsoft Windows Desktop Wallpaper Code Execution Vulnerability

Read more
Vulnerability & Threat Report
Microsoft Internet Explorer 'Forced Tweet' Cross Domain

Microsoft Internet Explorer 'Forced Tweet' Cross Domain

Read more
Vulnerability & Threat Report
Microsoft Internet Explorer AddFavorite Method Denial-of-Service Vulnerability

Microsoft Internet Explorer AddFavorite Method Denial-of-Service Vulnerability

Read more
Conference
Kevin Mitnick & Dave Kennedy – Adaptive Penetration Testing Derbycon 2011

Penetration Testing is something that has many different meaning depending on the context used by the person. The Penetration Testing Execution Standard (PTES) is aimed to change that. In this talk we’ll be covering adaptive penetration testing which essentially is the ability to conform and change based on the environment that your attacking. We’ll be covering several live examples used in real-world penetration tests, how we discovered some clever tricks to circumvent security controls, and eventually be creative and gain unauthorized access.

Read more
Malware
JS.Alescurf Trojan

Systems Affected:

Windows 98, Windows 95, Windows XP, Solaris, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Linux, Windows 2000

JS.Alescurf is a detection for malicious code that can be injected in to vulnerable Internet Web pages.

Read more