Great Reviews!Need help setting up your website, installing Apache, PHP, MySQL, or RavenNuke(tm)?Need help customizing or designing scripts?Please contact us via the Contact Us option for further details and pricing.
nb1 writes "Symantec has announced that it plans to shut down part of its SecurityFocus security information portal. The company says that only the Mailing Lists, including Bugtraq, and its Vulnerability Database will remain online Starting on the 15th of March, SecurityFocus will begin transitioning its content to the Symantec Connect site.
Founded in 1999, SecurityFocus was acquired in 2002 by Symantec, the company behind another acquisition the popular Norton range of security products. In addition to its various mailing lists and vulnerability database, SecurityFocus maintains a comprehensive collection of articles and papers on a number of security issues. The site has also served as a reliable source for news from security experts on the latest security threats and problems.
Posted by Raven on Friday, March 12, 2010 @ 22:56:26 EST (607 reads) ( | Score: 0)
Searching for Corey Haim Leads to Rogue AV
Websense Security Lab™ ThreatSeeker™ Network has discovered that search terms related to Corey Haim have become the latest target for Blackhat SEO
Corey Haim, 1980s teen idol actor and a star of such famous movies as "The Lost Boys" and "License to Drive", was found dead in his Los Angeles apartment at the age of only 38 on Wednesday.
Whether it's a natural disaster or a death, Blackhats monitor and adapt to popular search trends. Not long after the sad news emerged, the search phrase "Corey Haim" became one of the hottest topics in Google trends.
Cybercriminals again jump at a chance to spread their rogue AVs. When users enter keywords such as "Corey Haim death" in Google, some of the results will lead them to download fake security software. The downloading FakeAV file has only 17% coverage from antivirus products.
Websense Messaging and Websense Web Security customers are protected against this attack.
DESCRIPTION: A vulnerability has been reported in Apache HTTP Server, which can be exploited by malicious people to potentially compromise a vulnerable system. For more information see vulnerability #2 in: SA38776
SOLUTION: Fixed in the SVN repository: http://svn.apache.org/viewvc?view=revision&revision=920961
ORIGINAL ADVISORY: http://httpd.apache.org/security/vulnerabilities_20.html
OTHER REFERENCES: SA38776: http://secunia.com/advisories/38776/
Posted by Raven on Wednesday, March 10, 2010 @ 21:14:10 EST (565 reads) ( | Score: 0)
Renewal4 - New Theme Release For RavenNuke(tm)
papamike writes "I just released my newest theme Renewal4 that's free to members. I haven't released a theme in quite a while but now I have the time to start releasing themes regularly.
Renewal4 is a nice theme with matching forums, download and weblink graphics, and more. I rely on the extensive array of RavenNuke(tm) blocks and modules that users can access to help them build up their site. I offer a wide array of themes in different categories that cover most peoples needs.
I am the first and longest running designer of RavenNuke(tm) themes, stop in and see what I have to offer.
And as always, I say Support RavenNuke(tm) in anyway that you can.
Oh, one more thing. I see some of my themes offered for download at other sites but I need to tell you that I upgrade my themes often so you should always download my themes from my site to ensure you are getting the most recent version.
Thanks, have a nice day! :)"
Posted by Raven on Tuesday, March 09, 2010 @ 23:10:34 EST (537 reads) ( | Score: 0)
DESCRIPTION: rPath has issued an update for gzip. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.
Posted by Raven on Monday, March 08, 2010 @ 19:14:35 EST (655 reads) (Read More... | 921 bytes more | Score: 0)
Critical Security Release Announcement From PHPBB Group
From the PHPBB Group:
We are sorry to announce the immediate release of phpBB 3.0.7-PL1 to address a security issue which was introduced in 3.0.7, unfortunately the issue wasn't noticed during testing and has only surfaced a week after the release of 3.0.7.
We promised working feeds for phpBB 3.0.7. Sadly, we were not able to deliver on that promise - a critical bug in the permission handling for feeds slipped past. To all people who already have updated to 3.0.7, it is of critical importance to update to 3.0.7-PL1. Otherwise, it is possible for users to bypass permission settings under the following circumstances:
- Feeds are enabled
- Any of the posts or topics feeds are enabled
- The unauthorised user - or one of the groups they are a member of - has forum permissions set on a private forum
- If you have excluded a forum from the list of forums that provide feeds, it is unaffected
The fix for the issue is a single line change inside of feed.php, line 525 has changed from:
Posted by Raven on Saturday, March 06, 2010 @ 00:51:16 EST (549 reads) ( | Score: 0)
Moving on – the future of phpBB development
Read the full article from the PHPBB Blog at http://blog.phpbb.com/2010/02/18/moving-on-the-future-of-phpbb-development/
Over the last few weeks we have made a few important decisions, that we believe can positively impact phpBB development. These include changes to development infrastructure as well as our development model. I will briefly outline these changes here, more details will be posted on the blog or as an announcement soon.
Posted by Raven on Saturday, March 06, 2010 @ 00:42:24 EST (511 reads) ( | Score: 0)
Microsoft open-sources clever U-Prove identity framework
nb1 writes "U-Prove, a powerful framework that couples strong privacy with high security for online authentication, has been released as an open source preview by Microsoft. Unfortunately, even open source is unlikely to ensure widespread adoption of this clever—and highly desirable—technology
Posted by Raven on Thursday, March 04, 2010 @ 00:31:15 EST (538 reads) ( | Score: 0)
Microsoft's *Operation b49* chokes Waledac botnet
Microsoft’s Digital Crimes Unit has effectively shut down the Waledac botnet, cutting off cybercriminal access to hundreds of thousands of infected Windows computers around the world.
In partnership with security vendors and law enforcement officials, Microsoft implemented “Operation b49″ and moved to the federal courts to get a temporary restraining order cutting off 277 Internet domains believed to be run by criminals as the Waledac bot.
According to Microsoft associate general counsel Tim Cranton, the action quickly and effectively cut off traffic to Waledac at the “.com” or domain registry level, severing the connection between the command and control centers of the botnet and most of its thousands of zombie computers around the world.
Waledac is one of the 10 largest botnets in the US and is responsible to distributing billions of spam messages around the world. According to Microsoft, the botnet is estimated to have infected hundreds of thousands of computers around the world and, prior to this action, was believed to have the capacity to send over 1.5 billion spam emails per day.
Posted by Raven on Tuesday, March 02, 2010 @ 01:30:26 EST (510 reads) ( | Score: 0)
What enterprise still uses IE 6? Try Intel
Internet Explorer 6 is a relic, but corporations continue to cling to it. At this point, IE 6 in the enterprise is common, but it’s nonetheless surprising when Intel—Microsoft’s long-time partner—is still using the ancient browser.
In a blog post walking through its implementation of Windows 7, Intel talked a lot about the “heavy lifting” involved with moving from XP to Windows 7.
Turns out the browser is part of the heavy lifting.
![[Valid RSS]](http://www.ravenphpscripts.com/images/valid-rss.png "Validate my RSS feed"){kind=small}
:: 
::
