links for 2008-04-22

The April 2008 issue of (IN)SECURE. Thanks to Kevin Riggins of http://infosecramblings.wordpress.com/ for the link!

Counterfeit Cisco, 3Com (and probably other) networking gear poses a serious security risk. This is obviously a good place for attackers (state sponsored or not) to insert backdoors or intentional security flaws.

“Not Very Friendly!”

Nice writeup from Symantec on a new-ish web exploit pack/backdoor.

A very well-written review of this book. It sounds OK, but it suffers from some of the lack of good editing and review that a lot of Syngress books seem to be exhibiting.