Приветствую тебя, читатель! В январском номере ][ мы подробно рассмотрели один из новейших багов в PHP от известного специалиста по информационной безопасности Стефана Эссера. Как ты наверное помнишь, баг заключается в небезопасном использовании функции unserialize применительно к объектам

You can spend millions of dollars on network security, but it's all for naught if the data center has physical weaknesses that leave it open to intruders. Red team experts hired to social-engineer their way into an organization say they regularly find physical hacking far too easy.

The vast majority of people surfing the web leave behind digital fingerprints that can be used to uniquely identify them, research released Monday by the Electronic Frontier Foundation suggests.

The Pirate Bay is largely unavailable today after legal action against the site's internet service provider (ISP).

 A former security guard has pleaded guilty to charges that he broke into his employer's computers while working the night shift at a Dallas hospital.

What does business continuity mean to you? For Microsoft Global Security it can involve locking a door from the other side of the world.

Если бы шесть лет назад, когда наш журнал еще пугал распространителей новым на рынке названием, нам сообщили, что "Железо" будет тестировать будильники, реакцию предсказать было бы весьма несложно. Однако маховик прогресса раскручен и оборот за оборотом приближает нас к чудесным вещам из светлого будущего, среди которых оказался и "умный" будильник Axbo Sleep Phase Alarm Clock

Продолжая тему по тренировке памяти, предлагаем вам еще несколько интересных упражнения с цифрами. Хоть исследования и показывают, что после 25 лет память ухудшается, мы ведь с вами оптимисты и знаем, что при правильном подходе нет ничего невозможного.

Это видео демонстрирует возможность обхода встроенного WAF в Danneo CMS на примере одного из сайтов. Используя NULL-byte и несогласованность кода CMS, атакующий проводит SQL-инъекцию для получения зашифрованного пароля администратора, несмотря на проверку входящих данных по черному списку

Facebook says it has discovered the identity of "Kirllos," the hacker who claimed to be selling 1.5 million Facebook logins on the black market last month. It turns out that Kirlios didn't quite have as many accounts as he originally claimed, though he did manage to sell a number of credentials to third parties. Facebook has also updated its login system to make it more secure for users who want to make sure they maintain control of their accounts.

One of the internet's most resilient and crimeware-friendly networks was knocked offline Friday after the plug was pulled on its upstream service provider, security watchers said.

A Ukrainian national accused of helping to hack into nine US retailers and making off with data for millions of credit cards has been arrested in India, IDG News has reported.

During the 17 years this writer worked on braking and stability control systems, we occasionally joked about being able to remotely update the software in people's vehicles and bring them to a halt. At that time, the technology didn't really exist to actually do that. Today that's no longer true. Researchers the Universities of California and Washington will present a paper at a security conference in Oakland, California next week outlining how they were able to hack into vehicle computer systems.

A just-published attack tactic that bypasses the security protections of most current antivirus software is a "very serious" problem, an executive at one unaffected company said.