News (79)

RSS, Atom feeds may carry security risk

Reading blogs via popular RSS or Atom feeds may expose computer users to hacker attacks, a security expert warns. Read more »

Symantec products threatened by Active X flaw

Symantec is urging its customers to patch their security products after being warned about a critical vulnerability that could allow hackers to execute code remotely. Read more »

Windows XP SP2 flaw complex but dangerous

Security experts have identified a modified exploit that can target computers running Windows XP SP2. Read more »

Web threats to surpass e-mail pests

By next year, Internet users can expect more cyberattacks to originate from the Web than via e-mail, security firm Trend Micro predicts. Read more »

Hacker backpedals on Firefox zero-day

A hacker who claimed to have found a serious zero-day bug in Firefox now says he was never able to exploit the supposed vulnerability to hijack computers. Read more »

DNS disaster: first attacks reported

The first attacks that are likely to have stemmed from a serious Domain Name System flaw have been reported. Read more »

Bluetooth security vulnerabilities ignored

Former White House cybersecurity adviser Howard Schmidt has warned of the dangers of flaws in Bluetooth protocols, claiming these vulnerabilities are unrecognised. Read more »

WordPress blog server hacked

An intruder has compromised a WordPress server and added a remote control tool to downloadable versions of the widely used blogging software. Read more »

Open source intrusion detector flawed

Snort, the open-source intrusion-detection software, is vulnerable to hackers, its developers said this week. Read more »

Kevin Mitnick: Social engineering 101

Kevin Mitnick has proven that the weakest link in any security system is the person holding the information. Read more »

Features (18)

What hackers can teach you about security

He's probably the most infamous hacker of all time. Which is why we should listen when Kevin Mitnick says that traditional network security tools aren't enough to keep our information safe. Read more »

Should you hire an ex-hacker?

Hiring a hacker as a chief security officer may sound crazy, but it has paid off for one company. See why an ex-hacker might be your smartest hire ever. Read more »

UNIX tools track down hackers

Catching malicious hackers isn't impossible. With the right tools, you can gather important information to help stop hack attacks. How can you use common UNIX tools to hunt down network attackers? Read more »

Knowledge is power against hacker schemes

Most IT managers neglect to tell users how to avoid falling prey to the dangerous hacker technique of social engineering. Here's what you need to know. Read more »

You've been hacked: What to do in the first five minutes

There's nothing quite like the mix of fear and adrenaline you get when you realise your system has been hacked. Here's how to best use that rush of energy during the first five minutes. Read more »

Better way to hacker-proof your site

Think malicious users need sophisticated tools to attack a Web site? Think again. All they really need is a Web browser and basic knowledge of SQL or another scripting language. Read more »

10+ things you should know about rootkits

Malware-based rootkits fuel a multibillion dollar spyware industry by stealing individual or corporate financial information. If that weren't bad enough, rootkit-based botnets generate untold amounts of spam. Here's a look at what rootkits are and what to do about them. Read more »

Avoid security vulnerabilities in your CGI programs

CGI makes creating Web-executable programs quick and easy--both for you and for hackers. Learn about some of the explicit security vulnerabilities of CGI and how to avoid them. Read more »

How CGI programs make your server vulnerable

CGI is the popular standard for generating content dynamically on the server side. But running CGI apps on your server can result in a signficant security risk. Read more »

CGI wrappers for Apache-based apps can boost security

CGI scripts represent a big potential security risk in Web development, but using CGI wrappers can help insulate your servers from attack. Here's an outline of how to create CGI wrappers to protect an Apache Web server. Read more »

Blog (2)

5 reasons restricting hacking is not like gun control

Nick Gibson [blogs:byteclub] -- Let's get it out of the way: Guns don't kill people, people with guns kill people. People with hacking tools can steal your personal data, shut down your system and deface your web site -- but is that any reason to ban them? Read more »

We don't need an eBay for security holes

Nick Gibson [blogs:byteclub] -- It's been likened to an eBay for hackers -- new security site WabiSabiLabi is a market place for auctioning security vulnerabilities. Read more »

Log in


Sign up | Forgot your password?

  • Brendon Chase Sun eye Web developers with Netbeans 6.5

    Despite the recent employment axe hitting Sun the company has pushed out a new release of its Netbeans open source IDE with an eye to appeal more to Web developers. Read more »

    -- posted by Brendon Chase

  • Renai LeMay BarCamp buzz: Let the hacking continue

    Attending last weekend's BarCamp in Sydney, it was hard to escape the conclusion that a certain "dot-com bust" flavour had seeped into the kool aid previously being drunk by Australia's web 2.0 and early stage start-up sector. Read more »

    -- posted by Renai LeMay

  • Staff Adobe briefly considered its own browser

    Internet Explorer dominates the Web browser market, but are that many people so in love with it? Meanwhile, the Flash player dominates its segment because lots of people find it to be a terrific. So might Adobe one day decide that the next logical step is to try its hand at building its own Web browser? Read more »

    -- posted by Staff

What's on?