Welcome to the realm. This realm, is not your ordinary realm. Here you will find happenings in the network security world, as well as the underground and the ethical arena.

Followers

Tuesday, September 23, 2008

Maltego » Home

Maltego » Home:

"What Is Maltego?

Maltego is an open source intelligence and forensics application. It allows for the mining and gathering of information as well as the representation of this information in a meaningful way.

Coupled with its graphing libraries, Maltego, allows you to identify key relationships between information and identify previously unknown relationships between them. It is a must-have tool in the forensics.security and intelligence fields!

Maltego offers the user with unprecedented information. Information is leverage."

Thursday, September 18, 2008

More Known Unknowns in NSA Spy Controversy: Secret Appeals Courts, Tea Leaves and the Mineshaft Gap | Threat Level from Wired.com

More Known Unknowns in NSA Spy Controversy: Secret Appeals Courts, Tea Leaves and the Mineshaft Gap Threat Level from Wired.com

Analysis: New Law Gives Government Six Months to Turn Internet and Phone Systems into Permanent Spying Architecture - UPDATED | Threat Level from Wired.com

Analysis: New Law Gives Government Six Months to Turn Internet and Phone Systems into Permanent Spying Architecture - UPDATED Threat Level from Wired.com:

"A new law expanding the government's spying powers gives the Bush Administration a six-month window to install possibly permanent back doors in the nation's communication networks. The legislation was passed hurriedly by Congress over the weekend and signed into law Sunday by President Bush."

NSA to Become America's Firewall | Threat Level from Wired.com

NSA to Become America's Firewall Threat Level from Wired.com:

"The National Security Agency is preparing to take over the job of monitoring the Internet and other domestic communication networks, a massive expansion of the agency's defense duties into networks used routinely by American citizens, according to a story by Siobhan Gorman of the Baltimore Sun."

NSA Must Examine All Internet Traffic to Prevent Cyber Nine-Eleven, Top Spy Says | Threat Level from Wired.com

NSA Must Examine All Internet Traffic to Prevent Cyber Nine-Eleven, Top Spy Says Threat Level from Wired.com:

"The nation's top spy, Michael McConnell, thinks the threat of cyberarmageddon! is so great that the U.S. government should have unfettered and warrantless access to U.S. citizens' Google search histories, private e-mails and file transfers, in order to spot the cyberterrorists in our midst."

Justice Department Moving to Immunize Snooping Telcos | Threat Level from Wired.com

Justice Department Moving to Immunize Snooping Telcos Threat Level from Wired.com:

"Two months ago, President Bush won congressional approval to immunize the nation's telecommunications companies from lawsuits accusing them of helping Bush funnel Americans' electronic communications to the National Security Agency without warrants -- all in the name of national security following the Sept. 11 terror attacks."

California Backs Off Real ID - Update | Threat Level from Wired.com

California Backs Off Real ID - Update Threat Level from Wired.com:

"For a short moment Thursday, millions of Californians were in danger of facing pat-downs at the airport and being blocked from federal buildings come May 11."

Group Posts E-Mail Hacked From Palin Account -- Update | Threat Level from Wired.com

Group Posts E-Mail Hacked From Palin Account -- Update Threat Level from Wired.com:

"Vice-presidential candidate Sarah Palin's private Yahoo e-mail account was hacked, and some of its contents posted on the internet Wednesday."

Kevin Mitnick Tells All in Upcoming Book -- Promises No Whining | Threat Level from Wired.com

Kevin Mitnick Tells All in Upcoming Book -- Promises No Whining Threat Level from Wired.com:

"Now that the statute of limitations has lifted on many of his crimes -- as well as a seven-year court ban prohibiting him from writing about them (the ban ended midnight on January 28, 2007) -- former hacker Kevin Mitnick is telling his story in a book to be published next year."

Mitnick Security Consulting, LLC

Mitnick Security Consulting, LLC

Computer security problems found at IRS - Security- msnbc.com

Computer security problems found at IRS - Security- msnbc.com:

"WASHINGTON - IRS employees ignored security rules and turned over sensitive computer information to a caller posing as a technical support person, according to a government study."

Tuesday, September 16, 2008

Revealed: The Internet's Biggest Security Hole | Threat Level from Wired.com

Revealed: The Internet's Biggest Security Hole | Threat Level from Wired.com:

"Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency.

The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let an attacker surreptitiously monitor unencrypted internet traffic anywhere in the world, and even modify it before it reaches its destination"

Thursday, September 11, 2008

I-Hacked.com Taking Advantage Of Technology - Installing Backtrack3 on an Eee PC

I-Hacked.com Taking Advantage Of Technology - Installing Backtrack3 on an Eee PC:

"**UPDATE**
This tutorial will walk you though the installation of BackTrack 3.0 (FINAL) onto the Eee PC. This is the first of many tutorials using this great platform!"

IPhone Takes Screenshots of Everything You Do | Gadget Lab from Wired.com

IPhone Takes Screenshots of Everything You Do | Gadget Lab from Wired.com

Secure Computing snaps up user control firm Securify | The Register

Secure Computing snaps up user control firm Securify | The Register:

"Security appliance firm Secure Computing has bought user access monitoring and control firm Securify, in a deal valued at up to $20m ($15m guaranteed in cash and stock, plus an earn-out of up to $5m).

Securify's appliance-based technology allows organisations to control and keep tabs on user access to applications. The technology integrates with Microsoft's Active Directory and features automatic discovery. Once plugged in, it provides alerts of unsanctioned application use and, dependent on policy, automatic blocking of applications or traffic through integration with either networking kit or firewalls."

Mythbusters busted over RFID gagging | The Register

Mythbusters busted over RFID gagging | The Register:

"The co-host of popular science television show Mythbusters has backtracked on claims that the Discovery Channel spiked a planned exploration of RFID security after coming under commercial pressure from credit card companies.

Previously, Mythbusters co-host Adam Savage told delegates at the Hackers on Planet Earth conference in no uncertain terms that a planned segment of the reliability, security and trackability of RFID had been pulled by Discovery. According to this version of events, lawyers for credit card firms jumped on board a conference call to discuss the technology between the Mythbusters team and made it 'clear to Discovery that they were not going to air this episode talking about how hackable this [RFID card] stuff was'."

Report: IRS networks riddled with vulns, rogue servers | The Register

Report: IRS networks riddled with vulns, rogue servers | The Register:

"The US Internal Revenue Service is putting tax payers at risk by operating thousands of web servers that contain security vulnerabilities or have not received proper authorization, a new report has concluded."

CookieMonster nabs user creds from secure sites | The Register

CookieMonster nabs user creds from secure sites | The Register:
"Websites used for email, banking, e-commerce and other sensitive applications just got even less secure with the release of a new tool that siphons users' authentication credentials - even when they're sent through supposedly secure channels."

Aanval Intrusion Detection and Correlation Console. - Home

Aanval Intrusion Detection and Correlation Console. - Home

Aanval is the leading web-based snort and syslog interface for correlation, management and reporting. Capable of handling more than 1+ Billion events, Aanval has been protecting Domestic and Foreign Governments, Fortune 50 Enterprises, Global Financial Institutions and local Small Businesses since 2003.

Saturday, September 6, 2008

Most organizations fail to stop interior network threats

Most organizations fail to stop interior network threats:

"A survey by Opine Consulting revealed nearly half of the IT professionals who responded had endpoints connecting to their corporate networks without their knowledge. Yet compared to other security issues, 86 percent of respondents said controlling network access ranked as a high priority. The survey, commissioned by Mirage Networks, reported that network access control solutions are gaining traction vs. more perimeter security technologies to address the problem."

Wednesday, September 3, 2008

Create a certificate rule: Security Policy; Security Services

Create a certificate rule: Security Policy; Security Services

Configuring IPSec Policies through GPO

Configuring IPSec Policies through GPO:

"As written in previous articles (see related articles at bottom of page), Windows 2000/XP/2003 machines have a built-in IP security mechanism called IPSec (IP Security). IPSec is a protocol that’s designed to protect individual TCP/IP packets traveling across your network by using public key encryption. Besides encryption, IPSec will also let you protect and configure your server/workstation with a firewall-like mechanism."

Google Chrome Remote Denial of Service Vulnerability

Google Chrome Remote Denial of Service Vulnerability

Twitter Updates

    follow me on Twitter

    Blog Archive

    Packet Storm Security Headlines

    Packet Storm Security Exploits

    milw0rm.com

    The Ethical Hacker Network RSS News Feed

    SecurityFocus News

    SecurityFocus Vulnerabilities

    The Security Zealot