An indispensable source of reference for anyone concerned with computer security, the Bulletin is the forum through which leading security researchers publish the latest security research and information in a bid to share knowledge with the security community. Publications cover the latest threats, new developments and techniques in the security landscape, opinions from respected members of the industry, and more. The Bulletin archives offer informative articles going back to 1989. Our editorial team is happy to hear from anyone interested in submitting a paper for publication.
Energy and utility companies are being turned down when requesting insurance cover for cyber attacks because their defences are perceived to be too weak.
Read moreSecurity firm finds millions of stolen credentials and email addresses on the black market.
Read moreExpiro is a file infector that resurfaces from time to time, demonstrating more skills on each new appearance – infecting a service that gives a unique vantage point on traditional malicious activities; running the malware at computer restart without…
Read moreJohn Aycock highlights an ACSAC paper that looks at the issue of detecting web content modifications.
Read moreCross-platform execution is one of the promises of Java - but cross-platform infection is probably not what the designers had in mind. Nevertheless, it was clearly in the mind of the author of W32/Java.Grimy, a virus for the Windows platform, which…
Read moreGabor Szappanos (Sophos)
Sometimes what looks like a genuine MP3 encoder library, and even works as a functional encoder, actually hides malicious code deep amongst a pile of clean code. Gabor Szappanos reveals the lengths to which one piece of malware goes to hide its…
Read moreSality has been around for many years, yet it is still one of today’s most prevalent pieces of malware. Last month, Raul Alvarez described Sality’s algorithm, showing the strengths of its encryption, how it uses the stack as temporary memory for code…
Read moreXpaj.B is one of the most complex and sophisticated file infectors in the world. It is difficult to detect, disinfect and analyse. Liang Yuan provides a deep analysis of its infection.
Read moreDavid Harley (ESET)
Industry veteran, prolific writer and educator David Harley reviews two recently published eBooks that aim to provide security guidance for consumers: Improve Your Security by Sorin Mustaca, and One Parent to Another by Tony Anscombe.
Read more‘Challenge [defenders] to take a penetration testing or exploit development class.' Andreas Lindh
Read more