********************************************************************

                         SecuritySpace Newsletter
                         Published by E-Soft Inc.

                           November 3rd, 2008

====================================================================

Is your Web site up?  If you subscribed to to SecuritySpace's
Network Monitor, you'd know for sure.
                                                                                
With a rich feature set, including:
                                                                                
   o) FTP, SMTP, POP, SNMP, Web server monitoring and more.
   o) Alert notification and escalation profiles to an
      unlimited # of contacts
   o) Continuous monitoring in intervals of your choice,
      ranging from every second via ICMP ping monitoring,
      to 1-60 minute intervals for other services.
   o) SSL, Form submission, password protected page,
      page content checking support
   o) Complex multi-action monitoring supported via custom
      scripts
   o) False positive reduction technology via monitoring
      from geographically diverse locations spread across
      North America, Europe and Asia.
   o) Performance charts, uptime reports, weekly summaries.
                                                                                
For pennies a day, keep tabs on your network services.
Don't wait for customers to tell you your site is down.
                                                                                
http://www.securityspace.com/netmon/index.html

====================================================================

In this month's newsletter:

I.   New This Month:
       1) 33 new vulnerability tests on-line

II. Security News - Your Top 10 Picks of October

III.  Subscription / Removal Information

====================================================================
I. New This Month

1) 33 new vulnerability tests on-line
--------------------------------------
    Security Audits have 33 new tests added this month, bringing
    the total this month to 15632 vulnerability tests on-line.

    Date   Test   Description
    ----   ----   -----------
    Oct 11 61704  Mandrake Security Advisory MDVSA-2008:210 (mono)  
    Oct 11 61703  Mandrake Security Advisory MDVSA-2008:209 (pam_krb5)
    Oct 11 61689  Mandrake Security Advisory MDVSA-2008:208 (pam_mount)
    Oct 11 61702  FreeBSD Security Advisory (FreeBSD-SA-08:10.nd6.asc)
    Oct 11 61699  FreeBSD Ports: mysql-client                       
    Oct 11 61700  mplayer -- multiple integer overflows             
    Oct 11 61701  FreeBSD Ports: lighttpd                           
    Oct 11 61713  Debian Security Advisory DSA 1648-1 (mon)         
    Oct 11 61712  Debian Security Advisory DSA 1647-1 (php5)        
    Oct 11 61715  Ubuntu USN-650-1 (cpio)                           
    Oct 11 61698  Ubuntu USN-649-1 (openssh)                        
    Oct 11 61697  Ubuntu USN-648-1 (nasm)                           
    Oct 11 61710  Fedora Core 8 FEDORA-2008-8678 (mediawiki)        
    Oct 11 61709  Fedora Core 9 FEDORA-2008-8639 (mediawiki)        
    Oct 11 61708  Fedora Core 9 FEDORA-2008-8618 (pam_krb5)         
    Oct 11 61707  Fedora Core 8 FEDORA-2008-8605 (pam_krb5)         
    Oct 11 61706  Fedora Core 8 FEDORA-2008-8582 (libxml2)          
    Oct 11 61705  Fedora Core 9 FEDORA-2008-8575 (libxml2)          
    Oct 11 61694  Fedora Core 9 FEDORA-2008-8429 (seamonkey)        
    Oct 11 61691  Fedora Core 9 FEDORA-2008-8425 (firefox)          
    Oct 11 61696  Fedora Core 8 FEDORA-2008-8423 (emacspeak)        
    Oct 11 61693  Fedora Core 8 FEDORA-2008-8401 (seamonkey)        
    Oct 11 61692  Fedora Core 8 FEDORA-2008-8399 (blam)             
    Oct 11 61695  Fedora Core 9 FEDORA-2008-8379 (emacspeak)        
    Oct 11 61690  Fedora Core 9 FEDORA-2008-8322 (rubygem-activerecord)
    Oct 11 61686  RedHat Security Advisory RHSA-2008:0908           
    Oct 11 61687  RedHat Security Advisory RHSA-2008:0907           
    Oct 11 61685  RedHat Security Advisory RHSA-2008:0892           
    Oct 11 61684  RedHat Security Advisory RHSA-2008:0890           
    Oct 11 24017  Unmaintained Gentoo packages                      
    Oct 11 61688  Mandrake Security Advisory MDVSA-2008:207 (openafs)
    Oct 11 61714  Gentoo Security Advisory GLSA 200810-01 (wordnet) 
    Oct 11 61711  Debian Security Advisory DSA 1643-1 (feta)        

    http://www.securityspace.com/smysecure/last30.html

====================================================================
II. Security News - Your Top 10 Picks of October

Our readers ranked the following 10 articles as the most interesting
in October (based on click-through percentage):

They are, in order:

    1.  Skype admits Chinese privacy breach
        http://www.theregister.co.uk/2008/10/03/skype_coughs_to_china_test_tap/
        Story from theRegister

    2.  Security vendors cry foul over exploit tests
        http://www.theregister.co.uk/2008/10/15/secunia_tests_backlash/
        Story from theRegister

    3.  Two-step UAC hack published
        http://www.techworld.com/security/news/index.cfm?newsID=8873
        Story from TechWorld

    4.  Download backdoor found in Windows Update
        http://www.vnunet.com/vnunet/news/2189711/download-backdoor-found-windows
        Story from VNUNet

    5.  Using 'offensive technologies' to secure networks
        http://www.networkworld.com/news/2007/051407-woot-offensive-technologies.html
        Story from NetworkWorld

    6.  Security probe after MI6 camera sold on eBay
        http://www.vnunet.com/vnunet/news/2227214/security-probe-mi6-camera-sold
        Story from VNUNet

    7.  Merchants and punters cry foul over Verified by Visa
        http://www.theregister.co.uk/2008/10/23/vbyv_analysis/
        Story from theRegister

    8.  Security industry falling behind the hackers
        http://www.vnunet.com/vnunet/news/2228330/security-industry-falling
        Story from VNUNet

    9.  Dutch researcher claims e-passport hack
        http://news.zdnet.co.uk/security/0,1000000189,39496723,00.htm
        Story from ZDNet

   10.  Recession fails to dent security spending
        http://www.vnunet.com/computing/news/2228280/security-spending-unlikely-hit
        Story from VNUNet


====================================================================
III. Subscription/Removal Information

If you know of anyone who may find this newsletter interesting,
please forward it to them.

To subscribe or unsubscribe from this monthly newsletter, please
visit https://secure1.securityspace.com/secnews/subscribe.html
--------------------------------------------------------------------
Ying Chan                          Tel: (905) 304-6922
Marketing Manager                  Fax: (905) 304-7122
E-Soft Inc.                        http://www.e-softinc.com
SecuritySpace.com                  http://www.securityspace.com