I've just posted the first episode of Security Now! with Steve Gibson. This shorty podcast (18 minutes) will be a weekly look at hot topics in security from the creator of ShieldsUP and Spinrite (and TWiT regular). We'll release it by midnight Thursday every week, just in time for your weekend podcasting.
Category: security
-
Hacking tools and tutorials
This is a pretty good collection. Lots of the usual suspects plus a few I hadn't seen before. Worth checking out the link, whether you digg it or not.
-
'Ethical hackers' recruited
A NEW generation of “ethical hackers” are to be trained in Wales to test and protect the world's computer security systems.
-
Blog Wars Episode I: Sister Furong vs. Xiaxue
Xiaxue (http://xiaxue.blogspot.com) gets OWNED without even having blog getting touched.
-
w32 Zotob
Here is more info on the Zotob.
How to remove Zotob?Automated “FixZotob.exe” type tools from Symantec & MicrosoftWhat is the Zotob and what kind of damage can it do?Not much.. unless it connects with the outside IRC.Who created the Zotob?Diabl0 (Turkey)Why was Zotob created? bot wars?http://elamb.blogharbor.com/hacked/zotob.htm
Internet Inventor, Al Gore running in 08?
I've traveled to every part of this country during the last six years. During my service in the United States Congress, I took the initiative in creating the Internet.–Al Gore (http://www.sethf.com/gore/).
Zotob.A Worm pandemic
The Zotob Worm has spread across three continents and has brought down systems at CNN, ABC and other networks. It is a decendant of Mytob. Zotob exploits the “plug and play” features of unpatched Win 2000 systems and earlier versions of Windows XP.
The Zotob Worm, like most worms, slows down network connectivity, can shut down/reboot a system, attempts to spread to other systems on the network and ultimately will connect with a remote server to allow downloads of more destructive malware such as virus’ and Trojans.
Zotob Worm Variants:
http://securityresponse.symantec.com/avcenter/vinfodb.html
Summary:
http://singe.rucus.net/blog/archives/510-MS05-039-and-the-Zotob-summary.html
http://singe.rucus.net/blog/archives/510-MS05-039-and-the-Zotob-summary.html
ASIS and ISSA join forces
Today I went to the ISSA luncheon. The local ISSA chapter joined forces with an organization called A.S.I.S International (formerly American Society for Industrial Security).
ASIS seems to be composed of a lot of physical security professionals (ie protecting critical infrastructure). Where ISSA assists its members in attaining CISSP, forensics certs and the Security+, ASIS concentrates on Certified Protection Professional (CPP), Physical Security Professional (PSP), and Professional Certified Investigator (PCI).
With my background in physical security, I fit right into their world. I plan on attending one of their meetings in the future.
Between ASIS and ISSA members we filled an auditorium. With that kind of networking something big is begining to happen in Colorado.
Todays presentation of a smart card readers system had a lot of cross over appeal for both information security professionals and physical security professionals alike.
Worm hits CNN, ABC, NY Times
CNN apparently didn't patch their Windows 2000 computers. Link is to story about the Zotob worm but here is a screen shot of CNN's computer getting hit. http://ejeet.home.comcast.net/worm.jpg
Pirates of Silicon Valley (Torrent)
Torrent for Pirates of Silicon Valley, coming soon to DVD. Since most of us don't have VCRs, this is useful. Don't forget to buy the DVD!