ZDNet: Attackers switching to applications, media play ers

[jeremy.epstein at webmethods.com (Jeremy Epstein)]

Also reported in the Washington Post today:
http://www.washingtonpost.com/wp-dyn/content/article/2005/11/21/AR2005112101
424.html?sub=AR (regisration required).  The Post isn't known for their
technology coverage; perhaps it's because SANS is local.

--Jeremy 

> -----Original Message-----
> From: sc-l-bounces at securecoding.org 
> [mailto:sc-l-bounces at securecoding.org] On Behalf Of Kenneth R. van Wyk
> Sent: Tuesday, November 22, 2005 11:06 AM
> To: Secure Coding Mailing List
> Subject: [SC-L] ZDNet: Attackers switching to applications, 
> media players
>
> FYI, interesting article on ZDNet today citing a SANS study.  
> The article says, among other things, "Online criminals 
> shifted their attacks in 2005 from operating systems such as 
> Windows to media players and software programs, according to 
> a study released Tuesday."
>
> If the study's findings are correct, then it places an 
> emphasis on organizations' software security efforts.  IMHO, 
> it's certainly not about "the perimeter" anymore (if it ever 
> really was).
>
> Cheers,
>
> Ken
>
> P.S. On a list administrative front, it appears that the 
> Mailman list manager seems to be working pretty well for us.  
> One significant change that could impact you subscribers is 
> that I've configured Mailman to discard incoming messages 
> from anyone that is not subscribed to SC-L.  So, if you use a 
> local mail alias to read your SC-L, you might have 
> difficulties submitting messages to the group. If that's the 
> case, just drop me a note and I'll step you through setting 
> things up so that your submissions don't get discarded.  (The 
> discarding has done wonders for reducing the amount of spam 
> in my life.)
>
> --
> Kenneth R. van Wyk
> KRvW Associates, LLC
> http://www.KRvW.com
>
>
> _______________________________________________
> Secure Coding mailing list (SC-L)
> SC-L at securecoding.org
> List information, subscriptions, etc - 
> http://krvw.com/mailman/listinfo/sc-l
> List charter available at - 
> http://www.securecoding.org/list/charter.php