Resources: Impersonating The Domain Administrator via SQL Server – commonexploits.com A recent presentation I gave for 7Safe. It demonstrates how it is possible to fully compromise the domain using a fully patched Microsoft SQL server that has a firewall enabled. RuxCon 2010 Materials – ruxcon.org.au Talk PDFs now posted. Nuff said. New SANS Course – [...]

. Here are the information security events in North America this month: Secure360: May 11 – 12 in St. Paul IEEE Symposium on Security and Privacy: May 16 – 19 in Oakland CEIC 2010 (Computer and Enterprise Investigations Conference): May 24 – 27 in Summerlin SANS WhatWorks in Security Architecture Summit 2010: May 24 – [...]