BuyLow.com Computers And Internet - Internet Security, Computers, Mobile Devices, Networks


BuyLow.com | Resources | Contact Us


 

Fraudulent Web Sites

We are aware of public reports indicating that attackers are using legitimate web pages to run malicious code on victims’ machines.
Reports, including a posting by Sophos, indicate that these messages
* Include keywords and names related to a current event (such as, the 9/11/2001 terrorist attack)
* Prompt users [...]

Read More About - Fraudulent Web Sites »

Avoiding Social Engineering and Phishing Attacks

What is a social engineering attack?
To launch a social engineering attack, an attacker uses human interaction (social skills) to obtain or compromise information about an organization or its computer systems. An attacker may seem unassuming and respectable, possibly claiming to be a new employee, repair person, or researcher and even offering credentials to support that [...]

Read More About - Avoiding Social Engineering and Phishing Attacks »

RSS BugTraq

  • Re: Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation?
    Posted by steve . povolny on Sep 03There's not a lot in the way of information about IIS settings required to exploit this. What I've gleaned so far is IIS 5.1, and a request to a directory using the :$i30:$INDEX_ALLOCATION in the request...Can't seem to replicate this though. Are there any other settings that you are aware of for IIS? Basic a […]
  • VUPEN Security Research - Google Chrome Focus Processing Memory Corruption Vulnerability (VUPEN-SR-2010-249)
    Posted by VUPEN Security Research on Sep 03VUPEN Security Research - Google Chrome Focus Processing Memory Corruption Vulnerability (VUPEN-SR-2010-249) http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Google Chrome is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and e […]
  • [ MDVSA-2010:170 ] wget
    Posted by security on Sep 03 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:170 http://www.mandriva.com/security/ _______________________________________________________________________ Package : wget Date : September 2, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, […]
  • [SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution
    Posted by Sebastien Delafond on Sep 03- ------------------------------------------------------------------------ Debian Security Advisory DSA-2102-1 security () debian org http://www.debian.org/security/ Sébastien Delafond Sep 3, 2010 http://www.debian.org/security/faq - ------------------------------------------------------------------------ Package : barn […]
  • nullcon Goa dwitiya (2.0) Call For Papers
    Posted by nullcon on Sep 03nullcon Dwitiya (2.0) The Jugaad(hacking) Conference nullcon is an initiative by null - The open security community. Website: http://nullcon.net Calling all Jugaadus(hackers) It's the time of the year when we welcome research done by the community as paper submissions for nullcon. So, sip your coffee, dust your debuggers, fire […]