The official videos from Hack in the Box Malaysia conference are now online via torrent. There are two torrents, and you can find the the Day 1 and Day 2 videos on The Pirate Bay. For all presentation materials, check out our previous post – HITB 2008 Malaysia Presentations.

A few months ago we mentioned that Elcomsoft was coming out with an application that utilizes Nvidia GPUs to crack WPA and WPA2 keys. That application is now available, and it can also utilize ATI GPUs as well. The $1,199 price tag is quite expensive when you compare it to pyrit, the FREE open source [...]

SQLiBENCH is an OWASP SoC 2008 project to benchmark automatic sql injectors related to dumping databases. There’re a bunch of and great open source tools (takeover/dumpers/hybrid) for taking advantage of an sql injection vulnerability both used by web application security specialists and attackers. Techniques used, databases supported, algorithms employed and abilities implemented by these "sql [...]

Today, SANS and MITRE released their 2009 Top 25 Most Dangerous Programming Errors list. The 2009 CWE/SANS Top 25 Most Dangerous Programming Errors is a list of the most significant programming errors that can lead to serious software vulnerabilities. They occur frequently, are often easy to find, and easy to exploit. They are dangerous because [...]

McAfee Secure published the McAfee Secure Standard last month. It is a high level overview of what test for, to determine if they are “secure” or not. The McAfee SECURE™ standard is an aggregate of industry best practices, designed to provide a level of security that an online merchant can reasonably achieve to help provide [...]

The presentations from the recent India conference, ClubHack are now online. Hacking Client Side Insecurities by Aditya K Sood Immune IT: Moving from Security to Immunity by Ajit Hatti AntiSpam – Understanding the good, the bad and the ugly by Aseem Jakhar Reverse Engineering v/s Secure Coding by Atul Alex Network Vulnerability Assessments: Lessons Learned [...]

Happy new year from the Infosec Events team! Here are the information security events in North America this month: SCADA Security Scientific Symposium – Jan 21-22 in Orlando SANS Security West 2009 – Jan 24-Feb 1 in Las Vegas DoD Cyber Crime Conference 2009 – Jan 26-30 in St. Louis And remember to check out [...]