tutorial about web security computer networking

The second of the three security principles listed in my first book is: Many intruders are unpredictable. I think the new Adobe Acrobat R...

In January during the WMF fiasco, I wrote The Power of Open Source . What we're now reading in Zero-Day Response Team Launches with Eme...

I received a link to this press release today. Unlike many press releases, this one contained interesting news. It reported that a new se...

Thanks to Tom Ptacek , I learned of a truly lame SANS poll questioning the responsibility of the Metasploit ie_xp_pfv_metafile component. ...

I've stayed out of the whole Sony DRM affair because I felt Windows guru Mark Russinovich has forgotten more about Windows internals th...

Thanks to a comment from Shahid for pointing me to the WebSense Security Labs presentation The Web Vector: Exploiting Human and Browser Vul...

As I expected, FrSIRT published an exploit for the Snort Back Orifice vulnerability discovered last week. I was able to compile and execu...

In my first book , the The Tao of Network Security Monitoring: Beyond Intrusion Detection , I say "some intruders are smarter than you,...

Pete has responded to my previous post. Pete says: "I actually believe the REAL threat exists. While everyone else works on the manuf...

There's a major battle over vulnerability and exploit disclosure occurring between Thomas Ptacek and Pete Lindstrom . I've linked ...

I recently wrote about TippingPoint 's Zero Day Initiative (ZDI), a pay-for-vulnerabilities program. Thank you to the poster (whom I ...

Through the accursed Slashdot I learned of Tipping Point 's Zero Day Initiative program. (Incidentally, I just figured out that Slash...

This afternoon I was researching a bot for a chapter in my latest book. I don't spend a lot of time on exploit sites because I am not a...

When reading today's Incident Handler's Diary , I learned of the public release of draft-gont-tcpm-icmp-attacks-03.txt by the IETF....

Have you noticed that SecurityFocus has removed exploit code from its vulnerability database ? Anyone knowing why, please email me at rich...