20061227

Top Security Threats for 2007

Link

Funny, this article says exactly cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 opposite of what SANS had predicted. Alan Paller of SANS had said that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re were already so many infected PC's that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 number wasn't that likely to grow too much. They had basically reached a critical mass. In fact, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 economies of botnets for rent was actually pretty fascinating. Initially, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re was low demand, but a big market, so cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 cost became artificially low, which drove demand artificially high, which again drove cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 cost up - cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 numbers just aren't growing that fast anymore.

Paller's prediction (and I tend to agree) is that we'll see more application side attacks. As SQL injection tools become better and better, we'll see cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same botnets being used for application-layer investigatory work - probes being sent from those bots for XSS or SQL injection vulnerabilities.

My predictions are that not just video, but ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r media viruses will grow. JPEG can be used to carry arbitrary payload, and I'm kinda' shocked only one QuickTime bug was really exploited well.

And I also predict that XSRF will continue to be a hot item. And I think with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 organization that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 bad guys have, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y'll be able to farm out blogs, ads, etc., to push cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 exposure of those in a short amount of time.

0 comments: