WatchGuard Wire
Last Publish Date: Wed, 07 May 2008 20:56:34 GMT

Adobe updates 'mysterious' Reader advisory from February
Wed, 07 May 2008 20:56:33 GMT

Late yesterday, Adobe released what at first seemed to be a new security advisory describing critical vulnerabilities in Adobe Reader and Acrobat 8.1.1 (and earlier versions) for all platforms. So why don't I sound more worried?

Hit-and-run database attack brings new meaning to "drive-by download"
Wed, 30 Apr 2008 18:14:22 GMT

Check out this photograph of a network security attack that's so crazy, it just might work. (If it does, it'll be one of few hacks committed while traveling a mile a minute.)

Would you give this man a job?
Sat, 26 Apr 2008 00:02:21 GMT

Jerome Kerviel, the person who allegedly drained a French bank of nearly five billion euros in January, has actually managed to get himself some new employment.

Is that security software fake? Check with Bharath
Wed, 23 Apr 2008 19:01:29 GMT

Have you ever wished someone would compile a list of spyware purveyors, perhaps with some screen captures showing what their "products" look like? Yearn no longer; your wish is granted.

Internet Explorer flaw reaches slightly farther than Microsoft thought
Wed, 23 Apr 2008 16:53:31 GMT

Last night, Microsoft issued a "major revision increment" to the Internet Explorer security advisory they released on 8 April. It turns out that the flaw described in MS08-024 affects more versions of Windows than Microsoft initially believed.

Pwn a Cisco NAC appliance with simple packet sniffing
Thu, 17 Apr 2008 20:49:53 GMT

Yesterday, Cisco released a security advisory describing a serious security vulnerability in their NAC appliance; if you use this appliance, you should apply the fix for this vulnerability immediately.

SonicWall Web Filter Defeated
Fri, 11 Apr 2008 23:41:57 GMT

It's never good when someone defeats your security measures, but it must feel especially embarrassing when your security gets trounced by a fourteen year-old schoolboy.

Microsoft fixes eight security flaws; but not Jet Engine zero day
Tue, 08 Apr 2008 19:14:46 GMT

Today, Microsoft released eight security bulletins, fixing a total of ten vulnerabilities in its various products; these include Windows, IE, Project, and Visio. Microsoft rates five of the eight vulnerabilities as Critical.

Microsoft to release eight updates for April's Patch Day
Mon, 07 Apr 2008 20:53:34 GMT

In what appears to be a typical Patch Day, Microsoft's Advanced Notification warns that they will release eight security bulletins tomorrow. The bulletins will include security updates for Microsoft Windows, Internet Explorer (IE), and Office.

"Operation Bot Roast" really starting to cook
Thu, 03 Apr 2008 23:14:27 GMT

It challenges long-held concepts of crime, punishment and international borders: Owen Thor Walker, the 18 year-old creator of a botnet which stole money from banks around the world, pleaded guilty yesterday to all charges in a New Zealand court.

Apple abuses Software Update to sneak new programs onto PCs
Fri, 28 Mar 2008 23:04:37 GMT

From a security viewpoint, there's plenty to find fault with when an automatic updater offers to "update" software you don't have. It's enough to make Corey sour on Apple.

VPN Tracker brings Mobile User VPN to Mac-based Firebox Core and Peak users
Wed, 26 Mar 2008 17:10:20 GMT

WatchGuard Fireboxes make great VPN endpoints, but there is one minor feature lacking: a Mobile User VPN client for Mac users. Thanks to Equinux's VPN Tracker, however, that disappointment may be over.

Zero day Microsoft Jet vulnerability helps hackers create booby-trapped Word documents
Mon, 24 Mar 2008 22:55:26 GMT

Tell your users to stay away from unsolicited Microsoft Word documents and Access database files -- lest hackers hijack their computers.

Oulu University fuzz tests archive file formats
Tue, 18 Mar 2008 00:40:29 GMT

Finland's Oulu University Secure Programming Group and CERT Finland have published an advisory describing security vulnerabilities which affect many vendor implementations of common network protocols.

Dreamcast diehards get phished
Fri, 14 Mar 2008 23:07:57 GMT

I'm a pretty hardcore gamer. One of my favorite gaming systems was Sega's under-appreciated Dreamcast. So, imagine my excitement when I read a gaming blog post saying that Sega had reopened the Dreamcast.com domain. It was too good to be true...