Month: February 2005

View RSS, RDF and ATOM feeds inside IE

By donna

I found a free application that will allow Internet Explorer users to view RSS, RDF and ATOM feeds.  It is Chrysanth NETime Channel.  I gave it a try (Internet Explorer 6 in XP SP2).  See screenshot: Before (Click image for larger view): After (Click image for larger view): After installating this free application, it adds BHO, Toolbar, an entry in HOSTS file, Browser Menu Extension and User’s System Startup: Alert is shown by SpywareGuard for installation of BHO.  Logged by SpywareGuard: NEW BHO DETECTION ALERTOn 05:12:48 02/27/2005 a new BHO installation attempt was detected.BHO: {9323C176-6AA5-4902-B0B9-4D37AA8DFB9A}ProgramID: n/aFile Location: D:WINDOWSsystem32CSNETimeChannelLibrary.dllUser Action Taken: KEEP BHO … Continue reading View RSS, RDF and ATOM feeds inside IE

Opera Tackles Phishing: Second Beta of the Opera Browser Available Today

By donna

Opera Software ASA today released the second Beta version of its next browser, which includes an answer to the recent security debate over Web site spoofing (see – Multiple Browsers IDN Spoofing Security Issue). In this Beta, the browser displays security information inside the address bar, located next to the padlock icon that indicates the level of security present on a site. The small, yellow security bar appears on secure sites and displays the name of the organization that owns the certificate. By clicking on the bar the user has access to more information about the validity of the certificate. … Continue reading Opera Tackles Phishing: Second Beta of the Opera Browser Available Today

Mozilla Firefox 1.0.1 released (Security hole and bug fixes)

By donna

Most of the changes in Firefox 1.0.1 were security fixes and stability fixes. Security hole fixes22183 – Display hostname in title bar when address bar is hidden, to reduce the impact of the fact that web sites are allowed to spoof address bars.260560 – Security and download dialogs can be spoofed by covering them partially using popup windows.262887 – Secunia background tab security issues (SA12712).273699 – 2 Frame Injection Vulnerabilities (popup blocking race condition & onunload event mis-firing).275417 – Download dialog source spoofing (SA13599).279945 – Image drag and drop allows to create executable files.280056 – When dropping a javascript link … Continue reading Mozilla Firefox 1.0.1 released (Security hole and bug fixes)

[March 23, 2005] Phishers, Spammers and Scammers: Criminals of the Internet

By donna

Start Time:   Wednesday, March 23, 2005 9:00 AM (GMT-08:00) Pacific Time (US & Canada)  End Time:   Wednesday, March 23, 2005 10:30 AM (GMT-08:00) Pacific Time (US & Canada)    Event Description  Products: Other Recommended Audience: IT Professional Language: English-American  Description:    Attend this webcast and learn how criminals use the Internet to infiltrate the security of your network. Learn about the underground economy associated with these threats and the co-operation of spammers and virus writers. We will also cover Phishing and attacks against the finance sector, Worms and critical infrastructure vulnerabilities, and we’ll address the issue of “Where are the network police?” Join … Continue reading [March 23, 2005] Phishers, Spammers and Scammers: Criminals of the Internet

[March 22, 2005] Application-Level Attacks: Phishing and Session Hijacking

By donna

Start Time:   Tuesday, March 22, 2005 11:00 AM (GMT-08:00) Pacific Time (US & Canada)  End Time:   Tuesday, March 22, 2005 12:00 PM (GMT-08:00) Pacific Time (US & Canada) Event Description Products: Other Recommended Audience: Developer Language: English-American  Description:    This webcast will provide in-depth demonstrations of a variety of Web application hacking techniques such as SQL Injection and Cross Site Scripting (XSS) and show how to identify whether an application is vulnerable to these types of attacks. Discover how the SQL Injection hacking methodology can transfer to other areas, allowing exploitation of Web services and LDAP. We will also examine the method … Continue reading [March 22, 2005] Application-Level Attacks: Phishing and Session Hijacking

[March 21, 2005] Introduction to Security Patching Using Windows Update Services

By donna

Start Time:   Monday, March 21, 2005 11:30 AM (GMT-08:00) Pacific Time (US & Canada)  End Time:   Monday, March 21, 2005 1:00 PM (GMT-08:00) Pacific Time (US & Canada) Event Description  Products: Windows Update Recommended Audience: IT Professional Language: English-American  Description: This webcast presents an overview of Windows Update Services (WUS), formerly known as SUS 2.0. WUS provides the features administrators need to manage and distribute updates through a Web-based tool.  Administrators are able access this tool on any Windows computer in their corporate network.  Join us as we look at the new features, offer planning and deployment guidance, and demonstrate the technology … Continue reading [March 21, 2005] Introduction to Security Patching Using Windows Update Services

[March 21, 2005] Assessing Network Security

By donna

Start Time:   Monday, March 21, 2005 9:00 AM (GMT-08:00) Pacific Time (US & Canada)  End Time:   Monday, March 21, 2005 10:30 AM (GMT-08:00) Pacific Time (US & Canada) Event Description Products: Security Recommended Audience: IT Professional Language: English-American Description: Identify where you are vulnerable to network attacks!  This webcast will help you plan and implement processes to help identify where you are vulnerable to network attacks, and provide guidance on how to remediate issues identified in the assessment process. We will show you how to plan and perform security assessments, implement penetration testing for intrusive network attacks, and identify and remediate common issues … Continue reading [March 21, 2005] Assessing Network Security

[March 15, 2005] Security360 with Mike Nash: Phishing: Don’t Get Hooked

By donna

Start Time:   Tuesday, March 15, 2005 9:00 AM (GMT-08:00) Pacific Time (US & Canada)  End Time:   Tuesday, March 15, 2005 10:00 AM (GMT-08:00) Pacific Time (US & Canada) Event Description   Products: OtherRecommended Audience: Technology Decision MakerLanguage: English-American  Description: On this month’s Security360 webcast, host Mike Nash, security executive at Microsoft, identifies emerging technologies and best practices that can help you reduce online fraud and phishing scams. Learn what you can do to protect your customers and employees and prevent your company brand from being hijacked. As with every Security360, this session will include the insights of industry experts, a … Continue reading [March 15, 2005] Security360 with Mike Nash: Phishing: Don’t Get Hooked

[March 10, 2005] Ask the IT Security Experts: Overview and Functionality Changes in the Upcoming Windows Update Services Release

By donna

Start Time:   Thursday, March 10, 2005 11:00 AM (GMT-08:00) Pacific Time (US & Canada)  End Time:   Thursday, March 10, 2005 12:00 PM (GMT-08:00) Pacific Time (US & Canada) Event Description Products: Security Recommended Audience: IT Professional Language: English-American Description:    This webcast series brings together some of the sharpest, security-focused, Microsoft IT professionals to provide expert answers to your security questions. Join us in this 60-minute session and find out about the new features and added functionality in the next generation of Software Update Services (SUS). Hang on tight as PSS Security Support Engineers Jason Hoffman and Michael Cook lead an exciting presentation that … Continue reading [March 10, 2005] Ask the IT Security Experts: Overview and Functionality Changes in the Upcoming Windows Update Services Release

[March 08, 2005] Tools and Techniques for Securing the Desktop

By donna

Start Time:   Tuesday, March 08, 2005 1:00 PM (GMT-08:00) Pacific Time (US & Canada)  End Time:   Tuesday, March 08, 2005 2:00 PM (GMT-08:00) Pacific Time (US & Canada) Event Description   Products: WindowsRecommended Audience: IT ProfessionalLanguage: English-American Description:    Desktops are the most numerous and the most vulnerable systems in most IT environments which can place a large burden on support staff.  This webcast will provide guidance on how to improve desktop security. We will discuss Microsoft Software Update Service (SUS), Group Policies, and Microsoft Systems Management Server (SMS) as well as best practices for operating procedures. Don’t miss this … Continue reading [March 08, 2005] Tools and Techniques for Securing the Desktop