Hackers are now attacking RFID tags and readers, mobile devices and hardware drivers and using advanced techniques such as rootkits and self-morphing Trojans to gain control of PCs. Read through our news, tips and advice to get the latest knowledge you need to defeat these tactics.
Dan Kaminsky on DNS, Web attacks
SearchSecurity.com | 24 Jul 2008 VIDEO - Noted network security researcher Dan Kaminsky, director of penetration testing at IOActive, shares his research on DNS and Web-based attack techniques.
Clickjacking details released after attack proof-of-concept emerges
SearchSecurity.com | 08 Oct 2008 ARTICLE - Security researchers released details of the clickjacking attacks, warning of the seriousness of the problem because they have discovered multiple variants on the Web.
Billy Hoffman on AJAX security and browser attacks
SearchSecurity.com | 07 Oct 2008 INTERVIEW - AJAX and JavaScript security expert Billy Hoffman of HP talks about the issues with Google Chrome and why JavaScript is so dangerous.
Weaponizing Kaminsky's DNS discovery
18 Sep 2008 TIP - Even after the DNS flaw discovered by Dan Kaminsky, many organizations are still not patching their internal servers. John Strand explains why this is a big mistake.
How to patch Kaminsky's DNS vulnerability
12 Aug 2008 TIP - Mike Chapple details why the recently discovered DNS flaw could be devastating, and what organizations should do to protect their end users.
Enterprise Security 2008 Learning Guide
SearchSecurity.com | 12 Feb 2008 LEARNING GUIDE - SearchSecurity.com's panel of experts look back at last year's threats and make predictions about emerging enterprise security concerns for 2008.
Virtual Honeypots: From Botnet Tracking to Intrusion Detection
SearchSecurity.com and Addison-Wesley | 09 Oct 2007 BOOK CHAPTER - In Chapter 11 of Virtual Honeypots: From Botnet Tracking to Intrusion Detection, Niels Provos and Thorsten Holz get inside the botnet and reveal some interesting conclusions.
So Long Script Kiddies
Information Security Magazine | 01 May 2007 FEATURES - EMERGING THREATS As thrill seekers fade away, organizations must contend with skilled attackers wielding sophisticated, stealthy tools in their drive to steal data for financial gain.
Editor's Desk
Information Security Magazine | 01 Feb 2007 COLUMNS - A Bug's Life
This webcast takes a glance ahead at the types of threats expected in 2007, what you can expect and how to be prepared to meet the challenge of these evolving threats. Prepare your company to defend against future web and hacker threats and attend this webcast today.
Attend this webcast today to discover, the top ten malware threats of 2005, the latest trends in the world of malware and how organized criminals are working more closely together than ever before to infect computers.
phlashing
07 Jul 2008 WORD - Phlashing is a permanent denial of service (DoS) attack that exploits
a vulnerability in network-based firmware updates. Such an attack is
currently theoretical but if carried out could render the target device
inoperable. ...
DNS rebinding attack
08 Apr 2008 WORD - DNS rebinding is an exploit in which the attacker uses JavaScript in a malicious Web page to gain control of the victim's router. The attack works on widely-used routers such as D-Link and Linksys and could, in fact, ...
JavaScript hijacking
20 Jun 2007 WORD - JavaScript hijacking is a technique that an attacker can use to masquerade as a valid user and read sensitive data from a vulnerable Web application, particularly one using Ajax (Asynchronous JavaScript and XML). Nearly all ...
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.
