Monthly Archives: August 2008

Nokia Phones vulnerable to Java Attacks.

A pair of critical vulnerabilities in Sun Microsystems Inc.‘s Java technology for mobile devices could be used by hackers to surreptitiously make calls, record conversations, and access information on Nokia Series 40 cell phones, a Polish researcher said Monday. Adam Gowdiak, a researcher who has found numerous bugs in Java 2 Micro Edition (J2ME) in [...]

Read the full article »

Current State of the Georgia-Russian Cyberwar

I called it from day one. The minute Russia goes to war, they are going to engage in cyberwarfare tactics. They have executed DDOS attacks against Georgian infrastructure, news networks, and any source that georgians could use to communicate military instruction, pleas for help, or update news agencies by anything other than traditional (generally non-actionable) [...]

Read the full article »

DNS Patch Flaw Still Exists

So you still support Private Disclosure of Bugs? The Huge problem that was recently reported in DNS servers was patched, granted it took nearly a year for all coorporations to come on board. Nearly 75% of all servers are patched to “fix” the issue. “Well, What’s the problem”, you may ask. The problem is the [...]

Read the full article »

Georgia-Russian War

Four hours prior to this story, Russia launched a guided missle at the georgian capital. The tensions between Georgia and Russia have been palpable in the international landscape over the past 5 years- and although there have been skirmishes along the border- never have the two nations been so close to full scale war. Both [...]

Read the full article »

Olympic Cyberscape Threat Analysis

I meant for this to go up the day before the olympics, However- Lightning had other plans. Blew out my modem and any dsl access I had, so here is the delayed version of the olympic cyberscape threat analysis So with the 2008 Beijing Olympics beginning tommorow today, I figured I would do an threat [...]

Read the full article »

Tennessee Valley Authority Laptops Stolen

Wonderful. Yet another government computer is stolen out from under the authorities noses.Supposedly this computer was supposed to be encrypted, however- statistics show that only 30 percent of computers required to be encrypted by law- are encrypted. So chances are that the thief stole this laptop from the back of ANOTHER admin’s car, and instantly [...]

Read the full article »

Java Wielding Pictures

More and More evidence is always stacking up to disable Java inside of your browser. This week, a new attack method was revealed by the “Next Generation Security Software” foundation, along with Ernest & Young Advanced Security Center. It turns out that attackers have been beginning to use a new stealth tactic to gain control [...]

Read the full article »

Traveling Tech?

Recently an article from Scheiner on Security tweaked my interest, as it has many security professionals. I began to research the actual policy and am even more stunned than when I read scheiner’s initial article. It seems that anytime you come in to the country (See Ports of Entry:Here) you are subject to a having [...]

Read the full article »

New Phishing Attempts

Almost daily, You will get emails claiming someone has changed your password, that someone wants to be your friend, or that you just received a huge sum of money from a long lost uncle. The catch? All you have to do is login and put in your secret answer. Most people have discovered that these [...]

Read the full article »

How To Visit A Website (In Internet Explorer)

As many people have already learned, either through word of mouth or by personal experience, Internet Explorer is probably the WORST browser you could use for the security of your personal data. Between gaping holes in the coding, ease of manipulation for viruses, and the mass use in the marketplace, internet explorer is ripe with [...]

Read the full article »