tutorial about web security computer networking

I'm very pleased to share news of an awesome new book titled Practical Malware Analysis by Michael Sikorski and Andrew Honig. The auth...

I just read Experimental Storm Worm DNS Blocklist at SANS. The result of such a scheme looks something like this: richard@neely:~$ host ba...

One of the reasons I blog is to record concrete events so I can more easily reference the exact details in the future. In Black Hat USA 200...

During my classes I mentioned seeing a post on malware that performs ARP spoofing to inject malicious IFRAMEs on Web pages returned to anyon...

In February I blogged about a vulnerability in a Trend Micro product that exposed systems "protected" by this anti-virus softwar...

Renowned botnet hunter Gadi Evron posted a message titled mitigating botnet C&Cs has become useless to several newsgroups. His post i...

I'd like to congratulate the United States Attorney's Office, Central District of California for indicting a bot net controller. ...

This article describes the Common Malware Enumeration project. CME is a sister project to Mitre's Common Vulnerabilities and Exposure...

I found Ryan Naraine's article From Melissa to Zotob to be a good summary of popular worms of the last few years. I remember Melissa ...

The SANS ISC is reporting that a worm which exploits the Plug and Play (PnP) vulnerability described by MS05-039 is in the wild. The F-Se...

Wednesday I reported the publication of an exploit for the FTP service used by the Sasser worm . Now there's a new worm called Dabber ...

We've heard of intruders exploiting systems already infected by worms, but this is another way to take advantage of poorly deployed syst...

I just heard about a thread on NTBugTraq regarding the presence of a kernel level driver called ierk8243.sys . This might be evidence of a...

I just finished listening to the SANS webcast on the recent 1434 udp traffic. It's worth a background listen and lasts one hour.

Looks like the Internet is weathering a new worm. Check out Internet Health Report to see that UUNet appears worse affected at the moment....