Ahead of SANS London 2012, Europe’s largest IT security training event, a top security expert and trainer is warning that a big challenge and knowledge gap for penetration testers is the growth of operating systems that include new anti-exploitation defences, “Although developers and operators still make coding and configuration mistakes, discovering or adapting an exploit to handle modern-day defences is more difficult than ever,” comments Stephen Sims, the author of SANS' only 700-level course, SEC710: Advanced Exploit Development.
CORE Security released the latest version of CORE Impact Professional vulnerability assessment and penetration testing software, that allows organizations to proactively test IT infrastructure.
BackTrack is a Linux-based penetration testing arsenal that aids security professionals in the ability to perform assessments in a purely native environment dedicated to hacking.
Nearly a year ago, Facebook introduced its bug bounty program, inviting security researchers to poke around the site, discover vulnerabilities that could compromise the integrity or privacy of Facebook user data, and then responsibly disclose them to the company.
In the same way that a hardware keylogger may remain undetected by office workers, Power Pwn - a newly created piece of hardware resembling a power strip or surge protector that is actually a network-snooping device - might pass unnoticed until it's too late.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.