------------------------------------------------------------------------
--------
YOU'RE INVITED: IT SECURITY ON DEMAND WEBCAST

"Replicating the Gonzalez Cyber Attacks through Penetration Testing"
Register: http://www.coresecurity.com/Form/generic/campaign/SecurityFocusGonzalez
--------------------

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

Apple recently released the new CrashWrangler tools to anyone with a
free ADC account, and is available at:

https://connect.apple.com/cgi-bin/WebObjects/MemberSite.woa/wa/getSoftwa
re?bundleID=20390

... or just look for it in the downloads s

[ more ]  [ reply ]

The videos from HITBSecConf2008 - Malaysia are now available for download!

Day 1
=====

http://thepiratebay.org/torrent/4654588/HITBSecConf2008_-_Malaysia_Video
s___Day_1

Keynote Address 1: The Art of Click-Jacking - Jeremiah Grossman
Keynote Address 2: Cyberwar is Bullshit - Marcus Ranum

Present

[ more ]  [ reply ]

In the last week, Apple has released a number of new product versions
and security updates.

Briefly listing the updates with links to detailed information...

QuickTime 7.5.5
http://support.apple.com/kb/HT3027

Bonjour for Windows 1.0.5
http://support.apple.com/kb/HT2990

iTunes 8.0
http://support.

[ more ]  [ reply ]

Spanish url: http://ba-con.com.ar/speakers.html?language=es

Speaker list and Dojos for BA-Con, September 30, October 1st.
(all presentations in both Spanish and English)

  Presentations:

  WPA/WPA2: how long is it gonna make it - Cédric Blancher & Simon Maréchal,
EADS & SGDN
  Security Concerns

[ more ]  [ reply ]

This week, Surrey, U.K.-based security research firm Corsaire released
"Securing Mac OS X Leopard (10.5)."

The whitepaper, by Daniel Cuthbert, is an "updated version of the
Securing Mac OS X Tiger (10.4) and includes the new security features
offered by Mac OS X Leopard (10.5)."

An excerpt of the

[ more ]  [ reply ]

You are right about the disconnect between marketing and engineering,
but the disconnect goes further than that. Most of the upper layer of
management these days does not understand the technology.

Is this disconnect not a security issue in itself which should be
addressed? We tend to focus on tech

[ more ]  [ reply ]

http://it.slashdot.org/it/08/08/03/0031228.shtml

I think this just shows how far the corporate culture has to go before
they actually are able to deal with problems effectively like MS does.

At least the OS X rootkit talk sounds like it's still going to take
place.

Indy

[ more ]  [ reply ]

Apple just released Security Update 2008-005, which addresses the
ARDAgent and DNS security issues, among others:

http://support.apple.com/kb/HT2647

- Dave

Begin forwarded message:

> From: Apple Product Security <product-security-
> noreply (at) lists.apple (dot) com [email concealed]>
> Date: July 31, 2008 10:07:45 PM C

[ more ]  [ reply ]

On Friday, July 11, 2008, Apple released iPhone 2.0 and iPod touch 2.0 which addresses the following security issues:

CFNetwork

Type: Malicious proxy server; Spoofing; Unexpected application termination; Arbitrary code execution
Platforms: iPhone 1.0 to 1.1.4, iPod touch 1.1 to 1.1.4
Resolution: I

[ more ]  [ reply ]

On Friday, July 11, 2008, Apple released Xcode tools 3.1 which addresses
the following security issues:

CoreImage Examples

Type: Unexpected application termination; Arbitrary code execution;
Buffer overflow
Platform: Mac OS X v10.5.x
Resolution: Improved bounds checking
Credit: Kevin Finisterre of

[ more ]  [ reply ]

On Thursday, July 10, 2008, Apple released Apple TV 2.1 which addresses the following security issues.

Type: Data reference atoms; Unexpected application termination; Arbitrary code execution; Heap buffer overflow.
Platform: Apple TV
Resolution: Improved validation of data reference atoms
Credit: C

[ more ]  [ reply ]

Apple today released the following update to address security vulnerabilities in Safari:

WebKit

Type: Memory corruption; Unexpected application termination; Arbitrary code execution
Platforms: Mac OS X & Mac OS X Server 10.4.11, Mac OS X & Mac OS X Server 10.5 through 10.5.3, Windows XP & Vista
Re

[ more ]  [ reply ]

Apple today released Security Update 2008-004 and Mac OS X 10.5.4.

The updates address the following issues:

Alias Manager

Type: Maliciously crafted volume mount; Unexpected application termination; Arbitrary code execution; Memory corruption
Platform: Mac OS X & Mac OS X Server 10.4.11 on Intel

[ more ]  [ reply ]

This is a reminder that the Call for Papers for HITBSecConf2008 -
Malaysia is closing on the 30th of June.

The HITBSecConf series is a deep-knowledge technical conference. Talks
that are more technical or that discuss new and never before seen attack
methods are of more interest than a subject that

[ more ]  [ reply ]