New Security Tools

Monday, June 9th, 2008

Here is a list of new security tools that were released in the past week. SQL Ninja 0.2.3 - SQL server injection and takeover tool fgdump 2.1.0 - Tool for mass password auditing of windows systems AxBan 1.0.0.4 - ActiveX killbit program Nmap 4.65 - Network port scanner Nessus 3.2.1 - Vulnerability assessment tool Immunity Debugger ...

Making The Move To Multiple Browsers

Tuesday, June 3rd, 2008

For a while now I’ve been using different web browsers to compartmentalize my risk. Most of my primary browsing is in one browser, but I use another for potentially risky activities I want to isolate more. Running different browsers for different sessions isolates certain types of attacks. For example, unless ...

Lynis – Security and system auditing tool

Sunday, June 1st, 2008

Lynis is an auditing tool for Unix (specialists). It scans the system and available software, to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of ...

Firefox 3 RC2 Confirmed

Wednesday, May 28th, 2008

On today’s Firefox 3 status meeting, the need for a second release candidate was confirmed and it has been tentatively targeted for early June. RC2 will fix about a couple dozen bugs including some top crashers, some affecting performance and localization related. Most of the bugs already have patches waiting for ...

Less is more (secure)

Wednesday, May 28th, 2008

Complexity is the enemy of security. Simple systems are inherently more secure than complex solutions. We see this idea validated again and again in security. Unfortunately, our IT systems are getting more and more complex as we depend on technology to fuel business growth and innovation. But do we really need ...