August 5, 2015 In a BIND: DNS Server Attacks Exploit New Software Flaw 2 min read - New DNS server attacks are exploiting a flaw in the open-source BIND9, and websites at risk for attack need to move quickly to patch the problem.
July 15, 2015 Could Open-Source ‘Census Project’ Prevent the Next OpenSSL Flaw? 2 min read - The Core Infrastructure Initiative has released a ranking of open-source tools that should help the industry avoid problems in OpenSSL and similar tools.
November 18, 2014 Latest Shellshock Attack Uses Bashlite to Target Devices Running BusyBox 2 min read - The Shellshock vulnerability has spawned a new wave of attacks using Bashlite, a malware variant aimed at devices using BusyBox open-source software.
Software Vulnerabilities October 16, 2014 Heartbleed and Shellshock: The New Norm in Vulnerabilities 6 min read - Major vulnerabilities as the new norm. What can you do to protect your business against incidents like Shellshock and Heartbleed?
Network September 29, 2014 Can a SSH Honeypot Be Used to Attract Attackers and Improve Security? 4 min read - Using cheap hardware to build a SSH honeypot as a sensor is a possible way to learn from SSH attackers, though return on investment is questionable.