Welcome to TechNet Blogs Sign in | Join | Help

August 2005 - Posts

Changes in Threats?

I have been at the Symposium on Privacy and Security today talking about security for small and medium businesses. Afterwards we had a panel discussion where one person asked about the changes in the threats from the internet. Well, some of the are obvious: Read More...
Posted Wednesday, August 31, 2005 7:32 PM by chsecblo | 0 Comments

To SHA-1 or not to SHA-1

Three Chinese researchers have further refined an attack on the encryption standard frequently used to digitally sign documents, making the attack 64 times faster and leaving cryptographers to debate whether the standard, known as the Secure Hash Algorithm, Read More...
Posted Wednesday, August 31, 2005 1:57 PM by chsecblo | 1 Comments

New IE Security Whitepaper

When I talk to customers regarding Windows XP SP2 and the improvements we made in IE, they relate the security changes with the Pop-Up Blocker. But believe it or not - there is more...... If you are interested to learn about IE 6 SP2 security, check the Read More...
Posted Tuesday, August 30, 2005 8:08 AM by chsecblo | 157 Comments

Professionals in Cyberwarefare

There is an excellent (but lengthy) article about the people being behind Cyberwarefare. Think again: Are you protected against this level of attackers? Are government and law enforcement agencies ready to fight them? Do you even realize that your are Read More...
Posted Monday, August 29, 2005 9:08 PM by chsecblo | 0 Comments

Two Arrests regarding Zotob

I just saw the first news regarding arrests for Zotob: http://apnews.excite.com/article/20050826/D8C7K9NO3.html It seems that the work we are doing together with the different policies starts to pay off Roger Read More...
Posted Friday, August 26, 2005 7:22 PM by chsecblo | 1019 Comments

Al-Kaida hiring hackers

Do we really want to let our phantasy do it's work? Well, let's think a little bit: In the last few weeks we often got articles like those: Chinese Web sites used to target U.S. systems-report . From time to time we see sources claiming that different Read More...
Posted Thursday, August 25, 2005 8:24 PM by chsecblo | 10 Comments

Unbelievebale but true: US Banks Shifting Logins to Non-SSL Pages

That is something I really cannot believe: Major US Banks are starting to use normal http-pages as the first page for the logon... There you find the article on netcraft: http://news.netcraft.com/archives/2005/08/23/banks_shifting_logins_to_nonssl_pages.html Read More...
Posted Wednesday, August 24, 2005 5:44 PM by chsecblo | 0 Comments

Customs computer virus strands travelers

Not only CNN has been hit by a virus, US customs as well. I hope that this will not be happening when I am there the next time :-) MIAMI - Travelers arriving in the United States from abroad were stuck in long lines at airports nationwide when a virus Read More...
Posted Monday, August 22, 2005 8:22 PM by chsecblo | 0 Comments

Bot-War going on

At the moment quite some customers are fighting all the different worms that attack MS05-039. The interesting thing is that there is more than "just" a few virus outbreaks. We are experiencing something we saw pretty often in the near past: An actual Read More...
Posted Friday, August 19, 2005 8:23 AM by chsecblo | 0 Comments

Network Access Protection (NAP) Platform Overview

Network administrators have the challenge of ensuring that computers that connect to a private network are healthy. For example, healthy computers have the correct security software installed (such as antivirus protection), the current operating system Read More...
Posted Thursday, August 18, 2005 9:59 AM by chsecblo | 0 Comments

Microsoft's Windows malicious software removal tool for Zotob variants avaiable

Microsoft on Wednesday made available a free software tool to help victims of the worms that hit Windows computers in the past days clean their systems. The Zotob worm started spreading on Sunday. Since then it along with many of its variants and other Read More...
Posted Thursday, August 18, 2005 9:03 AM by chsecblo | 0 Comments

MS05-039 Updated advisory (incl. Win32/ZOTOB.A Info)

Microsoft has updated the MS05-039 advisory and provides a link to this site for more information about the worm: http://www.microsoft.com/security/encyclopedia/details.aspx?name=Worm:Win32/Zotob.A It also provides a link to this site for more information Read More...
Posted Tuesday, August 16, 2005 2:57 AM by chsecblo | 1 Comments

The Attack to MS05-039 is here

MS05-039 got hit first. SANS seems to have been right but up to now, the worm does not seem to be too heavy (this might change over time but not at the moment). F-Secure released a Level 2 Alert today and called the worm Zotob.A ( http://www.f-secure.com/weblog/ Read More...
Posted Sunday, August 14, 2005 7:35 PM by chsecblo | 0 Comments

SANS on Infocon Yellow

It seems that SANS is expecting that the exploits for our August patches or for the vulnerability in the Veritas Backup software will be integrated in a worm pretty soon. To quote them: "there are enough exploits for these vulnerabilities known to be Read More...
Posted Sunday, August 14, 2005 8:26 AM by chsecblo | 382 Comments

Feedback requested

Hi, I am back :D. After four beautiful weeks of vacation I will start working again on Monday. Looking at the statistics of our blog we have pretty good hit-rates, which gives us quite some motivation for moving on. Where we are not too good is with the Read More...
Posted Friday, August 12, 2005 2:41 PM by chsecblo | 3 Comments

Microsoft to fight crime with spammer's money

Microsoft Settles Suit Against Spam King. Microsoft has settled a lawsuit against former spam kind Scott Richter. Richter and his company, OptInRealBig.com, agreed to pay US$7 million to Microsoft, although that settlement is conditioned on dismissal Read More...
Posted Wednesday, August 10, 2005 3:00 PM by chsecblo | 0 Comments

Security Patches - Links, downloads, problems and workaround

Microsoft Security Bulletin Summary for August, 2005 http://www.microsoft.com/technet/security/bulletin/ms05-aug.mspx Due to some problems with security signatures of some of the patches, some users encountered problems downloading the new August patches. Read More...
Posted Wednesday, August 10, 2005 2:47 PM by chsecblo | 0 Comments

Gartner about Microsoft Security

Reading the latest news on Infoweek about the often discussed Cisco vulnerability announced at BlackHat I found an interesting quote from Pescatore from Gartner: Microsoft, said Pescatore, has set the security bar with its predictable patch release schedule, Read More...
Posted Saturday, August 06, 2005 10:17 PM by chsecblo | 0 Comments

Windows Server 2003 (SP1) - Access-based Enumeration

ABE filters shared folders visible to a user based on that individual user's access rights, preventing the display of folders or other shared resources that the user does not have rights to access. ABE can be accessed via graphical user interface (GUI), Read More...
Posted Friday, August 05, 2005 12:22 PM by chsecblo | 0 Comments

Resources For Law Enforcement Intelligence

A link to a page which provides you with access to dozens of intelligence related documents, PDF files, PowerPoint, Word, and HTML references that may be of interest to intelligence professionals in government and law enforcement at the local, county, Read More...
Posted Thursday, August 04, 2005 7:59 PM by chsecblo | 6 Comments

Bluetooth Discovery Tool for Windows

RFprotect BlueScanner is a Bluetooth discovery tool for Windows. It will discover and display Bluetooth devices which are in range. It will display key information about devices, including what services they offer. BlueScanner can be used to: See how Read More...
Posted Tuesday, August 02, 2005 10:39 AM by chsecblo | 1 Comments

Internet Explorer 7: Now in beta testing for developers

Beta 1 is not intended for broad consumer trial and evaluation but it does offer a preview of some of the benefits that Internet Explorer 7 will offer customers including: Dynamic security protection through a simplified architecture that defends against Read More...
Posted Tuesday, August 02, 2005 10:33 AM by chsecblo | 0 Comments

Introduction to .Net security

.Net is a software framework from Microsoft that enables language-non-specific software development, resulting in applications that can easily interoperate across platforms and networks. A question seasoned developers should ask at this point is, "What Read More...
Posted Tuesday, August 02, 2005 10:30 AM by chsecblo | 0 Comments

Microsoft: Global anti-piracy initiative

Microsoft Corp announced the transition of the Windows Genuine Advantage (WGA) pilot to a version 1.0 launch with worldwide availability. http://www.microsoft.com/presspass/press/2005/jul05/07-25WGA1PR.mspx http://www.microsoft.com/genuine/about.mspx Read More...
Posted Tuesday, August 02, 2005 10:24 AM by chsecblo | 0 Comments
 
Page view tracker