Independent source for security vulnerabilities, alerts, and threats.

Explanations of basic IDS evasion techniques as well as suggested fixes and countermeasures to such attacks. Topics covered include basic string-matching weaknesses, polymorphic shell code, session splicing, fragmentation attacks, and denial of servic...

Example security policy to demonstrate policy writing techniques introduced in three earlier articles.

Computer network administrator faces multiple felony charges and years in prison for allegedly installing Distributed.net clients without permission. [SecurityFocus]

SecurityFocus BugTraq mailing list reports that the court order against the partners of the project has been suspended and the back-dooring functions in JAP were disabled.

SecurityFocus reports the Java Anonymous Proxy (JAP), used to anonymise access to the Internet, has been back-doored by court order.

An attacker with command over his own DNS service could gain root access if reverse DNS lookups are configured. Recent versions have been fixed.

Intrusion detection focus area; designed to assist discussion on security related topics, and provides a database of security knowledge and resources. It also hosts the BUGTRAQ mailing list.

Article covering what Steganography is, its applications, tools available and possible approaches to detecting where it is being used.

Article about spyware keyloggers, how they work, how to remove them and prevention of keystroke capture.