vSphere 4.1 Hardening guide

VMWare just published a security guide to hardening vSphere 4.1

http://communities.vmware.com/servlet/JiveServlet/previewBody/15413-102-2-18829/vSphere%204.1%20Hardening%20Guide%20April%202011.pdf

Live malware analysis tool

Tool to look at for live exe analysis, Carbon Black.

http://www.kyrus-tech.com/faq-2/

Interesting IPv6 video

Informative IPv6 video and implications for security on VIMEO

Rick Hayes - Assessing and Pen-Testing IPv6 Networks from Adrian Crenshaw on Vimeo.

When is a VPN not a VPN?

When its based on SSH and just seems to work out of the box...

https://github.com/apenwarr/sshuttle#readme

IPv6 view from Cisco

Interesting article on IPv6 from Cisco Blog, with more to come.

Cisco Blog

Egypt severs Internet connection

Article on BBC News website about how Egypt has removed itself from the Internet whilst the unrest is ongoing. Interesting to consider the implications for companies that rely on the Internet for their WAN connectivity for any offices they have in countries like this.

Bypassing Applicatio/DLL whitelisting in SRP and AppLocker

Didier Stevens has an interesting article on the ability to bypass DLL whitelisting by making the appropriate call. Apparently the reason you can do this is to help developers, and malware writers too....

Link Here