Monthly Archives: July 2009

Multiple top-security sites hacked (zf05)

If you follow the full disclosure mailing list, you are probably aware that many sites of top security professionals were hacked (including Kevin Mitnick, Robert Lemos from Security Focus, Dan Kaminsky, etc). I know how easy it is to forget … Read more


Posted in Uncategorized | Tagged , | Leave a comment

Matasano.com hacked

Matasano has just been hacked. They are one of the top security web sites with an amazing group of professionals. This is the screenshot: I don’t know what happened, but it probably wasn’t a 0-day as people are saying. If … Read more


Posted in Uncategorized | Tagged , | Leave a comment

Careful with Those Shortened Links

Awesome article by Dailyblogtips about the Security of Short links. They even mention Sucuri: If you want to be safe, therefore, only click on shortened links if you trust who created them. If you must or want click on a … Read more


Posted in Uncategorized | Tagged , | Leave a comment

Sonia Gandhi site hacked

It is not the first time her site got hacked, but we would image that they would be taking their security a bit better by now. Not only her, but the site of Manmohan Singh (Indian Prime Minister) got hacked … Read more


Posted in Uncategorized | Tagged , | 1 Comment

Australian Air Force site hacked

And it it still defaced (for more than couple of hours). Link http://www.airforce.gov.au/. Snapshot:


Posted in Uncategorized | Tagged , | 3 Comments

Sucuri.net Updated

Another set of updates from http://Sucuri.net. First, we improved the email alerts to be more clear and removed some false positives from the snapshot comparisons. We were offline for a few hours on Sunday, but everything is back in order … Read more


Posted in Uncategorized | Tagged | Leave a comment

Network Integrity Monitoring Article on DailyBlogTips

Integrity monitoring is a very common practice on server security, generally done inside a file system, where it creates a cryptographic checksum of all your files and if something changes you get an alert. Useful, no? This is called FIM … Read more


Posted in Uncategorized | Tagged , | Leave a comment

SSH 0-day exploit rumors

People are going crazy with the SSH 0-day exploit rumors. Some are even considering to switch back to telnet because of that. Finally, an official voice from Damien Miller of the SSH development team suggesting that it is just FUD … Read more


Posted in Uncategorized | Leave a comment

Sucuri Quote from Lenny Zeltser

Quote from Lenny Zeltser (from SANS) on Twitter about Sucuri: Free service by @sucuri_security detects changes to website content, DNS, whois records: http://sucuri.net. Quite handy. Glad to see it is being useful!


Posted in Uncategorized | Tagged , | Leave a comment

Sucuri Quote on the Security Basics list

Quote from about Sucuri from Manuel Aróstegui on the security-basics mailing list. This is the first tool I have seen just focused on the Internet domains monitoring. The interface is simple and easy to manage. Well done!


Posted in Uncategorized | Leave a comment