SecurityFocus

Cryzip Trojan encrypts data, requests ransom
News Brief, 2006-03-14
A malicious program searches for 44 different types of files, encrypts them, and then leaves a note for the user to pay $300 for the password to recover the files. A major flaw undermines the scheme, however.

Ubuntu stores password as clear text
News Brief, 2006-03-13
Version 5.10 of Ubuntu, the popular "Linux for Human Beings" distribution, has been found to store the system's primary password in clear text.

Virus names likely a lost cause
Robert Lemos, 2006-03-09

The Common Malware Enumeration Project clears up confusion for responders, but racing to name the latest virus in the media will continue to be the norm.

Debit-card fraud continues
OS X security contest ends without incident
Citibank issues ATM fraud statement
Risky sites account for 5 percent of traffic
Antivirus groups fight over Crossover sharing
MS developer responds to backdoor speculation

Vulnerabilities XML more

PHP PHPInfo Cross-Site Scripting Vulnerability
Apple Mac OS X Archive Metadata Command Execution Vulnerability
PHP Group Exif Module Infinite Recursion Denial Of Service Vulnerability
Safari Archive JavaScript Same Origin Policy Violation Vulnerability

Bugtraq XML more

Fortinet Security Advisory: FSA-2006-09
Fortinet Security Advisory: FSA-2006-08
High Risk Vulnerability in Microsoft Excel
[eVuln] CyBoards PHP Lite SQL Injection Vulnerability

Incidents more

RE: Possible AIM Hack?
Re: Possible AIM Hack?
Re: A pretty neat Chase Phish
RE: Possible AIM Hack?

Security Basics more

SF new article announcement: Social engineering reloaded by Sarah Granger
nmap graphical diagram
RE: Sorbs.net DNS Blacklist
RE: Sorbs.net DNS Blacklist