Monday September 8, 2008 11:23 AM AEST

SC Magazine Australia/NZ > Latest Security Reviews

Vulnerability Alerts

SANS

Microsoft

MS08-022 – Critical: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338) - Version:2.1
Microsoft Security Advisory (951306): Vulnerability in Windows Could Allow Elevation of Privilege

CERT/CC

Latest Security News

Access Control

Unauthorised web servers connected to IRS network

The Internal Revenue Service found 1,811 unauthorised web servers connected to its network.

Vulnerabilities & Exploits

Phishing drops as Rock Phish invests in technology updgrade

A highly organized gang of phishers took some time off to rebuild its botnet infrastructure -- but experts expect the scams to return with a vengeance.

Vulnerabilities & Exploits

Cisco warns of new security risks

Attack can cripple Access Control Server, security appliances.

Latest Security Features

Legal

Tactics: Show me the money

Looking for the board to invest in your security project? Learn to speak their language before you pitch, suggest Jessica Twentyman

Access Control

Cloud details are too fluffy

Cloud computing and security - what are the issues? Information at the moment is sketchy to say the least.

Vulnerabilities & Exploits

Web 2.0: Attack of the JavaScript malware

Imagine you are sitting in front of your computer and all of a sudden you hear weird sounds coming from your hard drive.

Latest Comments

"i like this network."

on Application vulnerability assessment tools

by liao niandong | Sep 7, 2008 7:27 PM

"hi.. i like google chrome. I need to know if in future, google is willing to upgrade google ..."

on Layered security in Google Chrome browser

by george s | Sep 7, 2008 1:52 AM

"I urge every business person and IT person, management or staff, to get hold of a copy of "I.T. ..."

on Bank of New York loses 12.5 million customer details

by John Franks | Sep 6, 2008 1:20 AM

"test for intresting"

on Forensic Tool Kit v 1.70

by cocoboy | Sep 5, 2008 5:39 PM

""Google arrived on the browser scene with the launch of Chrome"... Seems a bit misplaced to ..."

on Google Chrome flaws discovered

by Jeme | Sep 5, 2008 12:33 AM

Latest Security Reviews

Risk Management

NetIQ Secure Configuration Manager 5.7

Sep 2, 2008 |

NetIQ's Secure Configuration Manager (SCM) is a combination of client server and web-based components to help organisations manage configurations of workstations and servers.

Vulnerabilities & Exploits

Secure Auditor 2.0

Sep 1, 2008 |

Secure Bytes Secure Auditor is actually a suite comprised of several different pieces designed to audit vulnerabilities across a broad range of systems.

Vulnerabilities & Exploits

Tenable Network Security

Aug 28, 2008 |

For this review, I decided to combine these products into a single group of their own. Please keep in mind that these products can be purchased separately and can function on their own.

Vulnerabilities & Exploits

netVigilance SecureScout EagleBox SP 2.0

Aug 27, 2008 |

The netVigilance SecureScout EagleBox SP 2.0 is a highly comprehensive vulnerability management product.

Vulnerabilities & Exploits

StillSecure VAM 5.5

Aug 25, 2008 |

The StillSecure VAM appliance is serious vulnerability management in a single device.

Vulnerabilities & Exploits

eEye Retina Appliance 651

Aug 22, 2008 |

Last year for this Group Test, we saw the software version of this product, so this year we were very excited to see it in an appliance version.

Vulnerabilities & Exploits

Lumension Security's PatchLink Scan

Aug 21, 2008 |

Lumension Security's PatchLink Scan is a fairly robust vulnerability scanner.

Vulnerabilities & Exploits

Rapid7 NeXpose 4.6

Aug 19, 2008 |

The Rapid7 NeXpose 4.6 appliance is a feature-packed vulnerability assessment and risk analysis tool that always goes beyond expectations.

Vulnerabilities & Exploits

Core Impact 7.5

Aug 15, 2008 |

If we had to describe Core Impact in just a few words we would have to say: serious vulnerability and penetration testing.

Access Control

GFi LANguard Network Security Scanner

Aug 15, 2008 |

The GFi LANguard Network Security Scanner focuses into three areas of network security scanning.

Risk Management

Big Fix Enterprise Suite 7

Aug 12, 2008 |

BigFix Enterprise Suite (BES) 7 is a series of client server and web-based components designed to assist with workstation/server configuration and vulnerability management.

Biometrics & Forensics

Paraben Device Seizure

Aug 7, 2008 |

Paraben has been the market leader in hand-held forensics because the software is easy to use and covers a wide range of devices, including PDAs, smart phones and cell phones.

Messaging

SpamTitan for VMware

Aug 6, 2008 |

SpamTitan takes an interesting approach to managing spam.

Vulnerabilities & Exploits

Scanner + Exploit

Aug 5, 2008 |

Saint Scanner and Saint Exploit 6.7.11 are two great tools wrapped up to work together to provide an in-depth view of vulnerabilities throughout a network.

Risk Management

DeviceExpert 5.1

Aug 1, 2008 |

ManageEngine DeviceExpert 5.1 is a web-based configuration and change management solution for network devices.

Access Control

Array Networks SPX3000

Jul 29, 2008 |

The SPX3000 appliance from Array Networks combines many good features for making network resources easily accessible to users outside the network - without sacrificing security.