SecurityFocus

Microsoft criticized for silent patches
News Brief, 2006-04-17
Some security researchers take issue with the software giant's little-documented changes to software, but Microsoft says that sometimes less information means better security.

Suspected Czech phishing mule busted
News Brief, 2006-04-14
Law enforcement authorities in Prague charge a man with fraud, after arresting him at a bank where he allegedly attempted to pick up cash wired to him by phishing victims.

Browsers feel the fuzz
Robert Lemos, 2006-04-12

Security researchers are starting to aim network fuzzers away from servers and toward browsers, finding that dozens of flaws have been missed.

MySpace hires former cybercrime investigator
Classified U.S. data on sale in Afghan bazaar
Congress targets phone-record dealers
Microsoft tool aims to stymie typosquatters
EFF files against AT&T surveillance
Study shows stock spam boosts prices

Vulnerabilities XML more

DbbS Topics.PHP SQL Injection Vulnerability
Mozilla Firefox HTML Parsing Null Pointer Dereference Denial of Service Vulnerability
RateIt Rateit.PHP SQL Injection Vulnerability
Sun Java Studio Local Privilege Escalation Vulnerability

Bugtraq XML more

ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability
Neuron Blog <= 1.1 XSS
ShoutBOOK <= 1.1 XSS
- PHPGraphy <= 0.9.11 "editwelcome" unauthorized access / cross site scripting -

Incidents more

Re: Someone scanning for new PHP issues?
Re: Someone scanning for new PHP issues?
Someone scanning for new PHP issues?
Re: How to determine which PHP-script allows spamming?

Security Basics more

Re: Suggestions for a secure home network
NAT and Websphere load balancers
Re: Annoyed with M$
Re: how nmap can know my firewalled servers ?