Posts Tagged ‘ digest ’

NYC APPSEC RECAP: Here is a nice summary of the OWASP conference that happened this week. http://tinyurl.com/4dp5qx # NYC APPSEC SUMMARY: Starting with this post Josh has seemed to write up summaries of almost every session. http://tinyurl.com/4ym8dp # DEVELOPER SEC: There are many vectors to attack webapps, including social eng ciders. http://tinyurl.com/47ocus # ALWAYS...
Read more »

END POINT SECURITY: Interesting product; too bad it’s Russian; won’t get US gov work. http://tinyurl.com/4gpn9s # PDF PROBS: Be sure to keep you PDF readers patched. http://tinyurl.com/3js6rm # MORE SCADA VULNS: Hopefully if folks segragate their nets, this won’t be a prob. http://tinyurl.com/43a7yg # TINYURL SECURITY TIP: Paranoid about TinyURL links? Just add “preview”...
Read more »

SCAP SUMMARY: Nice summary of NIST’s conference from last week. http://tinyurl.com/48f3ay # WELCOME SUZANNE # CSSLP: ISC2 has a new cert for secure software dev. http://tinyurl.com/4vgz7t #
Read more »

THE PRAGMATIC CSO: Get your infosec business groove on with this podcast by Mike Rothman. # CERTS PAY: Pay is up for those w/ sec certs http://tinyurl.com/4glbd8 # CLICKJACKING & MORE: SANS NewBites is out again. http://tinyurl.com/3zo3st # NEVER PRESS OK: Most people are fooled by fake pop-ups. Better to just hit X to...
Read more »

W3AF: Interesting open source web app testing software. Wonder if it this could replace some of the commercial options? # LUNARSOFT ANTI-MALWARE TOOLKIT: Nice all-in-one kit for removing malware from your Mom’s PC. # INFOSEC CONFERENCE SITES: Nice Google Calendar (http://tinyurl.com/463ook) plus post that started it all for me (http://tinyurl.com/4bdrxq) # IE ZONE BYPASSES:...
Read more »

iphone lockdown – the next couple of tweets are just some thoughts i wanted to get down for a potential blog post # iphone lockdown – enable pin; enable sim pin; disable bt when not being used; disable wifi when not being used # iphone lockdown – enable option to wipe phone after 10...
Read more »

wink.com – pull info from multiple social networking sites; useful for social engineering testing; see what you can find out about yourself # facebook hole – first photos & now fans http://tinyurl.com/4lbxol #
Read more »

compliance != security; maybe training does… http://tinyurl.com/3lcqro # sans newsbites is out… man … more lost pii data http://tinyurl.com/44uahg # now we can all produce insecure code http://tinyurl.com/4qd8ge # another scada issue; at least it appears they assume no internet connection http://tinyurl.com/48sa7o # are we ready for a cyber attack? they just need find...
Read more »