|  |  |  |  |  |  |
 
WELCOME TO iDEFENSE LABS 
WELCOME TO iDEFENSE LABS 
WELCOME TO iDEFENSE LABS 
 iDefense Labs: The Home of VeriSign Security Intelligence Services
Email This Page URL  Print This Page

iDefense Labs is changing! Starting in July of 2008, and continuing through the end of the year, iDefense Labs will be working to add new and better functionality to this website. On August 19th, iDefense Labs launched the new interactive VCP Portal. The portal allows contributors to submit vulnerabilities and then track the progress, as well. Please visit the new portal at: https://labs.idefense.com/vcpportal/.

//  Microsoft Security Bulletin: July 2008
  seperator  open/close
07.08.08
//  2008: $50,000 Annual Vulnerability Challenge
  seperator  open/close
07.02.08

Prior to 2008, the old Challenge Program had awarded cash prizes for the best research submission targeting a specific technology over a 90 day period. Many iDefense VCP contributors had complained that 90 days was simply not enough time to properly research a good vulnerability, and informed the VCP that more time was needed. Recognizing that this was a fundamentally valid assertion, iDefense decided to ‘take the hint’ and restructure the entire iDefense VCP Challenge Program.

As of July 1, 2008 the new VCP Challenge Program takes effect, considering all qualifying research submissions through the end of the calendar year (31 December). Thereafter, the Challenge will consider all qualifying research accepted and compensated by the VCP Program that were received between the first day of January and the last day of December in each subsequent year. Following the acceptance deadline the iDefense Labs Vulnerability Research Team (VRT) will determine the winners and award the prizes. iDefense will award all cash prizes within thirty (30) days of the Challenge deadline. Under no circumstances will any submission be considered for any of the current year’s Challenge prizes if the contributor has not accepted the iDefense VCP’s offer for compensation for the submission.

Read more...

//  Microsoft Security Bulletin: June 2008
  seperator  open/close
06.10.08
//  Spear Phishing and Whaling Attacks Reach Record Levels
  seperator  open/close
06.07.08
Targeted social engineering attacks against corporations have reached new highs during April and May 2008. These e-mail-based attacks, often referred to as "spear phishing" or "whaling,' target individual users and contain personal information such as name, company, mailing address and phone number. Many of these attacks target senior executives and other high profile individuals

Read more...

//  Symantec Moves to Threatcon 2 Based on Flash Vuln...
  seperator  open/close
05.28.08
You can read more News from the Labs or subscribe to the RSS feed.
XML Feed
//  cyber threat level
ELEVATION REASON:
Cyber security baseline. While some threat to customers exists, standard operating procedures, threat monitoring and mitigation are effective. This level of global risk is not elevated, reflecting normal daily operating conditions.