In the "I need just ONE more reason to change to Firefox" department, 2 new security holes were discovered in IE today. These occur even WITH the service pack 2 update to Windows XP.

IPCop is a Linux-based open source firewall system that can secure anything from a single home computer to an enterprise-level network. It goes beyond the simple security guard analogy and provides services like routing, logging of entry attempts, reporting of traffic patterns, and regulation of inbound and outbound traffic.

A vulnerability has been discovered in the Cyrus implementation of the SASL library, the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. The library honors the environment variable SASL_PATH blindly, which allows a local user to link against a malicious library to run arbitrary code with the privileges of a setuid or setgid application.

Network security is a broad topic, and while a good firewall is an essential part of network security, it does not work in isolation. A secure system also requires effective monitoring and intrusion detection, as well as a “respond and restore” plan in the event of a security breach. We'll be restricting our discussion to firewalls, but keep in mind that your firewall plan must coexist with your other security measures.

Users of the increasingly popular, open-source MySQL database may be at risk from remote attacks due to a bug in phpMyAdmin, a widely used Web-based MySQL administration tool.

It's that time again, time to tell your friends, your parents, anyone running Windows, to update their computers IMMEDIATELY. :)

On a related note, no recent major security issues for Linux.

This week, advisories were released for syscons, shareutils, netpbm, kdelibs, PHP, samba, kernel, XFree86, samba, getmail, zlib, mozilla, and squid. The distributors include Debian, Fedora, FreeBSD, Gentoo, Redhat, Mandrake, Slackware, SuSE, Trustix, and Turbolinux.

The security research group The SANS Institute on Friday released its annual Top 20 list of the most critical Internet-related vulnerabilities to give organizations a way to prioritize their defensive efforts.

Przemyslaw Frasunek discovered a vulnerability in tnftpd or lukemftpd respectively, the enhanced ftp daemon from NetBSD. An attacker could utilise this to execute arbitrary code on the server.

Disaster Recovery and Business Continuity Article
Data Security: Backups are the Key to Protecting your Data and your Business

We have written a range of guides highlighting excellent free books for popular programming languages. Check out the following guides: C, C++, C#, Java, JavaScript, CoffeeScript, HTML, Python, Ruby, Perl, Haskell, PHP, Lisp, R, Prolog, Scala, Scheme, and SQL.