Blog Elements | SecurityOrb.com

Software vulnerabilities receive most of the limelight in network security, but weak, shared, and mismanaged passwords are often the biggest threat to most organizations.

FYI for those running Oracle products such as OracleDB, Glassfish, MySQL, Solaris, etc. The following links will provide additional information to assist you.

Oracle Critical Patch Update (CPU) Pre-Release Announcement – January 2012

Software vulnerabilities receive most of the limelight in network security, but weak, shared, and mismanaged passwords are often the biggest threat to most organizations.

FYI for those running Oracle products such as OracleDB, Glassfish, MySQL, Solaris, etc. The following links will provide additional information to assist you.

Oracle Critical Patch Update (CPU) Pre-Release Announcement – January 2012

This is from a Rapid7 email:

Effective password testing using Metasploit

Software vulnerabilities receive most of the limelight in network security, but weak, shared, and mismanaged passwords are often the biggest threat to most organizations.

Assessing password issues can be difficult; many problems are not visible to standard security tools and few if any organizations include extensive password testing, outside of offline cracking, into their assessment process.

In this technical webinar for IT and security engineers, HD Moore shows participants how to test their network for common password mistakes, using a combination of open source and commercial tools. This webinar will include a special section highlighting recent research into SSH public key issues.

When: Thursday, January 19th, 2 pm -3 pm EST

Presenter: HD Moore, CSO at Rapid7 and Chief Architect, Metasploit

HD is Chief Security Officer at Rapid7 and Chief Architect of Metasploit, the leading open-source penetration testing platform. HD founded the Metasploit Project in the summer of 2003 with the goal of becoming a public resource for exploit code research and development. Prior to joining Rapid7 and continuing his work on the Metasploit Framework, HD was the Director of Security Research at BreakingPoint Systems, where he focused on the content and security testing features of the BreakingPoint product line. Prior to BreakingPoint, HD spent seven years providing vulnerability assessments, leading penetration tests, and developing exploit code.

FYI for those running Oracle products such as OracleDB, Glassfish, MySQL, Solaris, etc. The following links will provide additional information to assist you.

Oracle Critical Patch Update (CPU) Pre-Release Announcement – January 2012

http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html

Oracle Plans 78 Security Fixes for Upcoming Critical Update

https://threatpost.com/en_us/blogs/oracle-plans-78-security-fixes-upcoming-critical-update-011412

Critical Patch Updates are the primary means of releasing security fixes for Oracle products to customers with valid support contracts. They are released on the Tuesday closest to the 17th day of January, April, July and October. The next four dates are:

17 January 2012
17 April 2012
17 July 2012
16 October 2012

For Oracle Java SE Critical Patch Updates, the next three dates are:

14 February 2012
12 June 2012
16 October 2012

A pre-release announcement will be published on the Thursday preceding each CPU release.

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

Effective password testing using Metasploit

Oracle Critical Patch Update (CPU) for Tues Jan 17th 2012

Effective password testing using Metasploit

Oracle Critical Patch Update (CPU) for Tues Jan 17th 2012

Full Sized Blog Element (Big Preview Pic)

Effective password testing using Metasploit

This is from a Rapid7 email:

Software vulnerabilities receive most of the limelight in network security, but weak, shared, and mismanaged passwords are often the biggest threat to most organizations.

Oracle Critical Patch Update (CPU) for Tues Jan 17th 2012

INTERESTING LINKS

Latest News

Business Hours