Twitter meets manunkind

Thursday, April 24th, 2008

Well, I finally jumped on that social networking bandwagon called Twitter.  I signed up for Twitter about an hour or so ago just to check it out and see what all the hype was about.  I know, I'm slow.  But they always say that a person hears or sees something ...

Securing the Internet’s DNS

Thursday, April 24th, 2008

The Internet is slowly inching closer to ratcheting up the security of its Domain Name System (DNS) server architecture: The Internet Corporation for Assigned Names and Numbers (ICANN) plans to go operational with the secure DNS technology, DNSSEC, later this year in one of its domains. ICANN officials said the organization ...

Tactical Forensics Platform

Thursday, April 24th, 2008

Earlier I wrote about my proposed Tactical Network Security Monitoring Platform. Today I finally sat down and installed the operating systems I need on this system to create a portable tactical forensics and investigation platform. I did not want to use my main work laptop for this sort of work ...

Targeted attacks using malicious PDF files

Thursday, April 24th, 2008

Dating back to the end of February, we have been tracking test runs of malicious PDF messages to very specific targets. These PDF files exploit the recent vulnerability CVE-2008-0655. Ever since the end of March, beginning of April, the amount of samples seen in the wild has significantly increased. Interestingly enough, ...

Mass SQL injection

Thursday, April 24th, 2008

There's another round of mass SQL injections going on which has infected hundreds of thousands of websites. Performing a Google search results in over 510,000 modified pages.