- TrueCrypt 7.0 released: Looks good.
- Attack and Defense Labs: Shell of the Future Reverse Web Shell Handler for XSS Exploitation: “the browser equivalent of a reverse command shell, instead of a command prompt from which you type in commands, you get to browse the victims HTTP/HTTPS session from your browse”
- SCADA Systems Hard-Coded Password Circulated Online for Years: More on the scada attack. It’s very amusing that changing the hard coded default password means the system stops working.
- After Worm, Siemens Says Don’t Change Passwords: Gotta love SCADA systems. Security like it’s 1990. At best.
- Researchers Show How Twitter, Twitpic Make Stalking Simple: I was happly un-aware of SexyPeek until I read this. Sigh.