Entries by SecurityOrb_Staff

14th Annual New York State Cyber Security Conference

The 2011 Conference is co-sponsored by the NYS Division of Homeland Security and Emergency Services Office of Cyber Security (OCS), the New York State Forum, Inc. and the University at Albany’s School of Business and College of Computing and Information. OCS’s experience with leading and coordinating New York State’s cyber security efforts and the University’s academic excellence in information assurance combine to make this a must-attend event.

The 7th annual Techno Forensics Conference

The 7th annual Techno Forensics Conference will debut a track specifically devoted to Forensics industry professionals with highlighted focus on photo/video forensics and crime scene investigation and evidence collection. Joining together the Digital Forensic and Forensic communities reflects the crossover apparent today within a wide range of forensic and digital disciplines. This annual event brings together key stakeholders from industry, academia and government in an effort to strengthen this important technology, research, and communication bridge.

ShmooCon 2011 – Security Conference

ShmooCon is an annual east coast hacker convention hell-bent on offering three days of an interesting atmosphere for demonstrating technology exploitation, inventive software and hardware solutions, and open discussions of critical infosec issues. The first day is a single track of speed talks called One Track Mind. The next two days bring three tracks: Build It, Break It and Bring It On.

Understanding What Threat Lies Beneath!

The average citizen is very lax with the security of their credit card information therefore may be giving a non-verbal invitations to credit card scammers. Understanding how your card can be compromised is the first step to protecting your credit. There are many ways to extract your sensitive data to enable someone to go on a “free” shopping spree.

SecurityOrb’s Top 5 Cyber Security Threat Predictions for 2011

2010 was an attention-grabbing year in the information security industry. We saw some interesting things such as Google alleged hack by China, Wiki leaks and the issues with insider threat and hacktivism, Stuxnet advanced malware implementation and social networking site vulnerabilities as well as our share of zero-day attacks to name a few. So, what is in store for 2011 you ask?

Apache Tomcat HTTP Server Directory Traversal

Apache Tomcat is the servlet container for JavaServlet and JavaServer Page Web applications.

A vulnerability in Apache Tomcat HTTP server may allow for directory traversal attacks. The vulnerability is cause by a misconfiguration of certain modules. An attacker could craft a special URL to view directories and files on the HTTP server without authorization.