Archive for May, 2006



Got back from vacation this morning to discover a fresh vulnerability for Symantec Antivirus.  This particular vulnerability allows for remote code execution, not good.
This is an interesting trend as several antivirus products have created they’re own share of problems.  There was the bad McAfee virus definition that deleted Microsoft Office files and the CLAM AV […]

SANS is reporting a targeted attack to a particular company.  This attack begins with email from a domain that closely resembles the company’s own domain, so that it appears as an internal email.  The attached Word file uses an undisclosed exploit to extract and execute a Trojan.  Another interesting bit is that it overwrites the […]

We just completed our second network security seminar in San Luis Obispo, Recovering From a Network Break-In: How Loyal Would Your Clients Be? The seminar was well-attended and very well received. Attendees gained knowledge in how security threats are increasing through exploits and vulnerabilities and specific examples were cited. And we covered […]

Larry Seltzer of eWeek weighs in on UTM (Unified Threat Management) for the small business.
In the meantime, the reasons to buy one are still compelling: networkwide protection, a second source of protection besides your desktop vendor, access to extra features like content filtering, and easier management.

Nice post here surveying various security organizations and the wide disparity between them. One will issue a vulnerability as Low while another as Highly Critical. The lesson, to be serious about security, you have to be reading a lot to keep up with what’s really going on and cannot get comfortable with a […]