Executive Summary
FireEye Labs has been tracking a recent spike in malicious email
detections that we attribute to a campaign that began in 2013. While
malicious email campaigns are nothing new, this one is significant in
that we are observin…
Executive Summary
FireEye Labs has been tracking a recent spike in malicious email
detections that we attribute to a campaign that began in 2013. While
malicious email campaigns are nothing new, this one is significant in
that we are observin…
According to OWASP:
When a user authenticates to a site, the site should generate a (cryptographically strong) pseudorandom value and set it as a cookie on the user’s machine separate from the session id.
(emphasis mine)
Why does the CSR…
Preamble: Am in awe about the quality of both questions and answers on https / SSL on this site. My humble question below pales in comparison.
Both on professional and amateur websites I’ve encountered the following phenomenon, when try…
Today we released seven security bulletins addressing 66 unique CVE’s. Two bulletins have a maximum severity rating of Critical while the other five have a maximum severity rating of Important. This table is designed to help you prioritize the deployme…
Some days ago, I was studying Web Programming for academic purposes. So I was learning SQL Injection by applying it on a sample website sqlzoo.net/hack/
But soon after it, in the Google ads on every page, every ad has been of “acunetix – …
An Overview of KB2871997 An Overview of KB2871997 Microsoft recently released KB2871997 for Windows 7, Windows 8, Windows Server 2008R2, and Windows Server 2012. This blog will give an overview of the feature changes, their impact, and some important c…
From Beginning Cryptography with Java – chapter 4, digital signatures:
Signatures are created using the RSA algorithm by applying the RSA
algorithm using the private key and then distributing the result as
the signature. Because of…
Using a buffer overflow, I have been able to override return addresses. But the problem is that Windows addresses contain zeros at the beginning (e.g. 0x00401020). As a result, the objdump of any C binary will contain zero’s. This makes it…
Dynamically loading libraries in an application can lead to vulnerabilities if not secured properly. In this blog post we talk about loading a library using LoadLibraryEx() API and make use of options to make it safe.
Know the defaults:
The library fil…
