* CompleteDaylight Saving Time coverage * Symantec issues signature for new worm variant * Security crisis? Keep your cool, expert says, and other interesting reading
Editor’s Note: Daylight Saving Time is less than a week away. Are your systems ready for the clocks to “spring ahead”? Check out our complete DST coverage here.
Today’s bug patches and security alerts:
Five new updates from Gentoo:
Mozilla Suite (multiple flaws)
SpamAssassin (denial of service)
Snort (buffer overflow, code execution)
**********
Three new patches from Mandriva:
Snort (buffer overflow, code execution)
Timezone (DST update for older systems)
**********
Two new fixes from rPath
Firefox / Thunderbird (multiple flaws)
**********
Today’s virus news:
Symantec issues signature for new worm variant
Security experts are urging users of Symantec antivirus software to update it to combat a new variant of the worm known as either Rinbot or Delbot, depending on what naming convention is used. Network World, 03/01/07.
**********
From the interesting reading department:
Paper: Know your Enemy: Web Application Threats
Gadi Evron writes on BugTraq: “The paper is very good, and deals with all kinds of web threats such as SQL Injection and XSS. Of most interest to me were the Code Injection and Remote Code-Inclusion due to my own research in that field. The Honeynet paper deals with many issues other than these, and is most definitely recommended reading.”
Security crisis? Keep your cool, expert says
Security managers have to keep their cool and clearly communicate with CIOs during a crisis affecting company networks, a top security official with Microsoft said Wednesday. IDG News Service, 03/01/07.
Black Hat hears of data leak dangers
The biggest threat to your personal and professional security may be the information that your computer is already transmitting to the world around you. InfoWorld, 03/01/07.
Black Hat: Think like an attacker
The best way to develop software applications that can defend themselves against malicious attacks is to think like an attacker. Network World, 03/01/07.
