Each week, we’ll highlight a major city in the US and cover the places and events you can go to in that area to get your security information fix. This post is part of the information security communities. It doesn’t get any hotter than Phoenix, in the literal sense. The intense climate is nothing to [...]

Resources: Common Weakness Scoring System (CWSS) – cwe.mitre.org So for each weakness in the architecture, design, code or implementation that might be introduced into an application, which in some cases can contribute to a vulnerability within that software, we need to be able to reason and communicate about the relative importance of different weaknesses. Brief [...]

Events Related: RSnake, Web Security and a few beers – andlabs.org Reminiscing Black Hat Abu Dhabi. DojoCon Follow-Up – novainfosecportal.com Although there was a formal CFP, everything else followed a traditional unconference format. SANS SEC660: Post Mortem – c22.cc The class is designed to cover the ground between the SEC560 Network Penetration Testing class and [...]

Each week, we’ll highlight a major city in the US and cover the places and events you can go to in that area to get your security information fix. This post is part of the information security communities. To most mainlanders, Hawaii means vacation time in the sun and relaxing with leis around their necks. [...]

Events Related: OWASP BeNeLux Day 2010 Wrap Up – rootshell.be Yesterday, the three OWASP Benelux chapters organized together their annual OWASP BeNeLux day. Ok folks, secwest11@cansecwest.com is live and the countdown timer goes to December 29th for entries to CanSecWest 2011 Call For Papers – twitter.com, @dragosr BayThreat was awesome, do it again! – mckeay.net Which [...]

Each week, we’ll highlight a major city in the US and cover the places and events you can go to in that area to get your security information fix. This post is part of the information security communities. The Yellowhammer State is primarily about agriculture but there’s also a bit of a security community in [...]

Resources: Impersonating The Domain Administrator via SQL Server – commonexploits.com A recent presentation I gave for 7Safe. It demonstrates how it is possible to fully compromise the domain using a fully patched Microsoft SQL server that has a firewall enabled. RuxCon 2010 Materials – ruxcon.org.au Talk PDFs now posted. Nuff said. New SANS Course – [...]

Each week, we’ll highlight a major city in the US and cover the places and events you can go to in that area to get your security information fix. This post is part of the information security communities. Rhode Island and the city of Providence are favorite vacation spots for many in the East Coast. [...]

. Here are the information security events in North America this month: Hackers to Hackers Conference 2010: December 3 in Cancun SANS WhatWorks in Incident Detection and Log Management Summit 2010: December 8 to 9 in Washington, DC BayThreat: December 10 to 11 in Mountain View DojoCon 2010: December 11 to 12 in Dulles . [...]