Global Security Watch > May 31, 2008

Bugtraq: [SECURITY] [DSA 1590-1] New samba packages fix arbitrary ...

SecurityFocus Vulnerabilitieshttp://www.securityfocus.com/archive/1/492835 [SecurityFocus Vulnerabilities] [SECURITY] [DSA 1590-1] New samba packages fix arbitrary code execution

Read related posts for „Bugtraq: [SECURITY] [DSA 1590-1] New samba packages fix arbitrary ...“.


 

Microsoft Security advisory for Safari and Windows, (Sat, May 31st)

SANS Internet Storm Center, InfoCON: greenhttp://isc.sans.org/diary.php?storyid=4495&rss [SANS Internet Storm Center, InfoCON: green] The Microsoft Security Response Center (MSRC) has posted an entry to alert people of a security iss ...(more)...

Read related posts for „Microsoft Security advisory for Safari and Windows, (Sat, May 31st)“.

Posted at 02:31 PM

May 31, 2008

Bugtraq: [SECURITY] [DSA 1590-1] New samba packages fix arbitrary ...

SecurityFocus Vulnerabilitieshttp://www.securityfocus.com/archive/1/492835 [SecurityFocus Vulnerabilities] [SECURITY] [DSA 1590-1] New samba packages fix arbitrary code execution

Read related posts for „Bugtraq: [SECURITY] [DSA 1590-1] New samba packages fix arbitrary ...“.

Posted at 02:31 PM

Microsoft Security advisory for Safari and Windows, (Sat, May 31st)

SANS Internet Storm Center, InfoCON: greenhttp://isc.sans.org/diary.php?storyid=4495&rss [SANS Internet Storm Center, InfoCON: green] The Microsoft Security Response Center (MSRC) has posted an entry to alert people of a security iss ...(more)...

Read related posts for „Microsoft Security advisory for Safari and Windows, (Sat, May 31st)“.

Posted at 02:31 PM

May 29, 2008

OS X Update To Version 10.5.3

Security Watch[Security Watch] There are 68 different fixes described in the base OS and different components, from the Address Book to the VoiceOver (an accessibility solution for those with vision disabilities). The word "reliability" shows up a lot, but "security" is absent from the details.

Read related posts for „OS X Update To Version 10.5.3“.

Posted at 02:33 PM

UK: Muslim gangs 'taking control' at maximum security prison

Untitledhttp://www.jihadwatch.org/archives/021209.php [Untitled] So while the staff is in fear of their lives from muslim gangs on one hand, they are more afraid of retribution from their supervisors, who I presume, could use the offices of government to criminalize any action the staff might take to do their supposed jobs, and subsequently turn staff into inmates -- who will then be thrown to the gangs?

Read related posts for „UK: Muslim gangs 'taking control' at maximum security prison“.

Posted at 02:31 PM

May 27, 2008

Experts to discuss civil security topics: International conference ...

AlphaGalileo Technology Channel[AlphaGalileo Technology Channel] More safety through technology: Within the framework of the international conference on “Safety and Security Systems in Europe”, to be held on 19th and 20th June in Potsdam/Germany, experts from industry and research are invited to discuss ways in which new technology can be used to enhance civil security.

Read related posts for „Experts to discuss civil security topics: International conference ...“.

Posted at 02:02 PM

21st Century Security and CPTED

Routledge Military, Strategic and Security Studies Arena - New Titleshttp://www.routledgestrategicstudies.com/books/21st-Century-Security-and-CPTED-isbn9781420068078 [Routledge Military, Strategic and Security Studies Arena - New Titles] About the Book Once overlooked as a minor and ineffective tactic in the mitigation and prevention of terrorism and violent crime, Crime Prevention Through Environmental Design (CPTED) has undergone dramatic changes since the September 11 attacks. The most up-to-date reevaluation of CPTED since 2000, 21st Century Security and CPTED reflects updates and amendments to the rules for security in the built environment and presents the knowledge and practice of CPTED as applied to today’s world of threats, including street crime, workplace violence, and terrorism.

Read related posts for „21st Century Security and CPTED“.

Posted at 02:01 PM

May 24, 2008

Ca: New book launched to help businesses comply with privacy law

[PogoWasRight - foreign privacy news] The Office of the Privacy Commissioner ofCanada (OPC) today launched a new book to help businesses comply with thePersonal Information Protection and Electronic Documents Act (PIPEDA), thefederal private sector privacy law.

Read related posts for „Ca: New book launched to help businesses comply with privacy law“.

Posted at 02:35 PM

Genetic Protections Don't Include Privacy, Says Gene Tester

Wired: Wired Sciencehttp://feeds.wired.com/~r/wiredscience/~3/296626300/genetic-protect.html [Wired: Wired Science] Right now, our company, QTrait, is addressing these issues by guaranteeing our clients genetic privacy. We feel the only way to ensure that genetic data is not misused is to give our clients confidential access and complete control over .

Read related posts for „Genetic Protections Don't Include Privacy, Says Gene Tester“.

Posted at 02:33 PM

May 22, 2008

Sensitive Information - Privacy and Your Medical Records (2008)

Consumer Action[Consumer Action] Lack of medical records privacy has led to loss of jobs, discrimination, identity theft and embarrassment. These records contain sensitive data, such as illnesses that might carry social stigma and personal details about substance abuse, family planning and mental health.

Read related posts for „Sensitive Information - Privacy and Your Medical Records (2008)“.

Posted at 02:34 PM

Google Health Ails in Infancy! Privacy Concerns!

Untitledhttp://www.pagetrafficblog.com/google-health-ails-in-infancy-privacy-concerns/4608/ [Untitled] I hereby authorize Google to share the health information contained in my Google Health profile(s) in its entirety, to only those entities and individuals I designate, for the purpose of providing me with medical care and for the purpose of sharing my information with others that I choose.

Read related posts for „Google Health Ails in Infancy! Privacy Concerns!“.

Posted at 02:33 PM

May 20, 2008

FBI and Romanian police break two phishing rings

CAUCE North America[CAUCE North America] In a press release today, the FBI said that in cooperation with the Romanian Prosecutor General they'd arrested 38 people who'd been running phishing rings. According to the FBI, the people arrested had sent out millions of phishing .

Read related posts for „FBI and Romanian police break two phishing rings“.

Posted at 02:07 PM

Phishing trip to Romania

Investigations[Investigations] US authorities have smashed a "phishing" ring that operated across three continents. It's a rampant scam that involves mass emailed spam that looks like it comes from legitimate banks.

Read related posts for „Phishing trip to Romania“.

Posted at 02:01 PM

May 17, 2008

May 15 - Thompson Releases Report on Security for Mass Gatherings

EM Forum News Feed[EM Forum News Feed] Chairman Thompson issued the following statement with the release of the report: “First responders and their partners are working hard to ensure public health, safety and security at large-scale mass gatherings. The external threat to these venues is real and rising as interest in targeting mass gatherings grows.

Read related posts for „May 15 - Thompson Releases Report on Security for Mass Gatherings“.

Posted at 02:34 PM

Defence & Security Report South Africa

Bharat Book Researchhttp://bharatbookresearch.wordpress.com/2008/05/17/defence-security-report-south-africa/ [Bharat Book Research] 5-year industry forecasts for South Africa through end-2012; company rankings and competitive landscapes covering national and multinational arms and components manufacturers, electronic and software producers, and companies providing defence solutions, as well as analysis of latest industry developments, trends and regulatory changes in South Africa.

Read related posts for „Defence & Security Report South Africa“.

Posted at 02:32 PM

May 15, 2008

Security Roundtable for May 2008 | RSA Conference - Beyond the Hype

The Security Roundtable[The Security Roundtable] For the May SRT, we welcomed:. Dr. Anton Chauvakin | http://chuvakin.blogspot.com/. James Costello | http://genesyswave.blogspot.com/. Jennifer Leggio | http://mediaphyter.wordpress.com/. Martin McKeay | http://www.mckeay.net/ ...

Read related posts for „Security Roundtable for May 2008 | RSA Conference - Beyond the Hype“.

Posted at 02:34 PM

Q1 2008 - Client OS Vulnerability Scorecard

Jeff Jones Security Bloghttp://blogs.technet.com/security/archive/2008/05/15/q1-2008-client-os-vulnerability-scorecard.aspx [Jeff Jones Security Blog] This paper is a compilation of vulnerability data for client operating systems for the first 3 month, January through March, of 2008. Vulnerabilities and fixes for the following products are discussed:

Read related posts for „Q1 2008 - Client OS Vulnerability Scorecard“.

Posted at 02:33 PM

May 13, 2008

Rape: Security firm won’t be axed

The Times - Breaking Newshttp://www.thetimes.co.za/News/Article.aspx?id=765237 [The Times - Breaking News] Carter said: “There are more than 20 000 people, including staff, students from three universities and patients, who come to the hospital.”

Read related posts for „Rape: Security firm won’t be axed“.

Posted at 02:04 PM

The Trust and Security 2nd Workshop: Usability and ...

National Centre for e-Social Science BLOG[National Centre for e-Social Science BLOG] This workshop was organized by Andrew Martin from Oxford University. As stated by the organizer, the objective of this workshop is to take a snapshot of work being done in this area, particularly in the UK, to identify and disseminate the most promising solutions and best practice, and to inform and develop proposals for future research.

Read related posts for „The Trust and Security 2nd Workshop: Usability and ...“.

Posted at 02:03 PM

May 10, 2008

Phishing Scams, Frivolous Arguments Top the 2008 “Dirty Dozen” Tax ...

Do You Know...[Do You Know...] Phishing is a tactic used by Internet-based thieves to trick unsuspecting victims into revealing personal information they can then use to access the victims’ financial accounts. These criminals use the information obtained to empty the .

Read related posts for „Phishing Scams, Frivolous Arguments Top the 2008 “Dirty Dozen” Tax ...“.

Posted at 02:35 PM

Phishing Campaign Targets Tax Rebate Checks

PC Sympathyhttp://www.pcsympathy.com/2008/05/09/phishing-campaign-targets-tax-rebate-checks/ [PC Sympathy] IC3 warns. “In addition, the IRS does not request detailed personal information via e-mail or ask taxpayers for the PIN numbers, passwords, or similar secret access information for their credit card, bank, or other financial accounts.”

Read related posts for „Phishing Campaign Targets Tax Rebate Checks“.

Posted at 02:34 PM

May 08, 2008

How to protect your Rapidshare Premium Account from Phishing

Digg / upcominghttp://digg.com/security/How_to_protect_your_Rapidshare_Premium_Account_from_Phishing [Digg / upcoming] Few steps and safety precautions to make your Rapidshare premium account safe from phishing.

Read related posts for „How to protect your Rapidshare Premium Account from Phishing“.

Posted at 03:29 PM

Google AdWords Phishing

MX Logic ThreatBloghttp://www.mxlogic.com/itsecurityblog/1/2008/05/Google-AdWords-Phishing.cfm [MX Logic ThreatBlog] The phishing link mentioned in Trend's blog points to a Chinese registered domain that appears to have been taken down as of the time of this posting, but being the resilient type that cyber criminals are they have started to send out a new spam run with links pointing a new domain (also Chinese registered): adwords.google.com.s0leo9.cn, which is currently still active. 

Read related posts for „Google AdWords Phishing“.

Posted at 03:02 PM

May 06, 2008

Microsoft Baseline Security Analyzer 2.1

FileHippo.comhttp://www.filehippo.com/download_mbsa/4116/ [FileHippo.com] Microsoft Baseline Security Analyzer (MBSA) 2.0 is an easy-to-use tool that helps small and medium businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance. Improve your security management process by using MBSA to detect common security misconfigurations and missing security updates on your computer systems.

Read related posts for „Microsoft Baseline Security Analyzer 2.1“.

Posted at 02:09 PM

Traveling Wilbury Security

TaoSecurityhttp://taosecurity.blogspot.com/2008/05/traveling-wilbury-security.html [TaoSecurity] Sorry for the 20-year-old song reference, but I couldn't help myself after seeing the lines in Greg Shipley's diagram from his recent InformationWeek security article. I like what he shows but I think it can be radically more simple.

Read related posts for „Traveling Wilbury Security“.

Posted at 02:05 PM

May 03, 2008

Phishing gets more sophisticated

Staring At Empty Pageshttp://staringatemptypages.blogspot.com/2008/05/phishing-gets-more-sophisticated.html [Staring At Empty Pages] Notwithstanding that, IBM has no connection to this web log or the writing herein, and what I say, no matter the topic, comes from me alone and does not represent the opinions or policies of IBM.

Read related posts for „Phishing gets more sophisticated“.

Posted at 02:35 PM

Fly Phishing

F-Secure Antivirus Research Webloghttp://www.f-secure.com/weblog/archives/00001428.html [F-Secure Antivirus Research Weblog] So now the phishers don't need to ask for passwords anymore, they can just take them.This technique keeps the classic element of phishing by mimicking the trusted institution — the bank.

Read related posts for „Fly Phishing“.

Posted at 02:33 PM