IT Security News:

• Microsoft and HP tackle SQL-injection scourge

• Bugs casts shadow over Firefox 3

• Almost half of malicious sites tied to 10 networks

• U.S. gov't pushes cybersecurity at con

• FBI: Cybercrime racks up more profits

• Trend, Sophos and McAfee flunk Vista SP1 anti-virus tests

• DDoS packets soak up to 3 per cent of net traffic

• Coming up: the fingerprint-grabbing keylogger

• Apple patches QuickTime for Mac, Windows

• Pen Test Framework - Version 0.50 released. including Freemind .mm and PDF version.

• cDc automates Google Hacking

• Worries over "good worms" rise again

• The Saga continues: Mujahedeen secrets - 2

• Vulnerability count falls in 2007

• Mozilla plugs critical flaws with Firefox patch

• A rough 24 hours for Windows users - 81.01% affected

• Russix is out

• A US CERT reminder: The net is an insecure place

• Large databases are not safe enough, says stats boffin

• Pentagon: Chinese military hacked us

• German sites close, as anti-hacking law arrives

• Rival malware gangs wage turf war

• Lawmakers worry over government network breaches

• Mpack attack infects PCs on massive scale

• Anti-hacking laws 'can hobble net security'

• NATO, US gear up for cyberpunk warfare

• 10 reasons why the Black Hats have us outgunned

• BlackHat, Defcon - free material!

• eEye launches 0-day tracker site

• Top 100 Security Tools - survey results.

Pen Testing Framework:

• Pen Test Framework  (html)

•     Source  (FreeMind .mm format)

•     PDF       (zip format)

• Framework Poster available

• Pre-site Template (html)

• Pre-site Template (pdf)

• Report Template (html)

• Report Template (pdf)

• Compliance Testing

New Tools:

• maltego client

• acunetix

• sqlorderby

• sqltable

• passive recon

• w3af

• mssqlscan

• theHarvester

• joomsq

• jkain

• nfsping

• aiocracker

• firecat

• goolag

• dirbuster

• fgdump password list

• CTUpdate (WSUS Offline)

• maltego

• evolution (updated)

• OAK

• OracSec

• scuba

• hydra

• smtpscan

• Metasploit (updated)

• NStalker Enterprise

• Jxplorer

• Softerra Browser

• GFI Languard N.S.S

• ssa (updated)

• check password

• sidguess

• lsnrcheck updated

Information:

• DNS Tools

• Exploiting NFS

• IT Threats

• NTP Enumeration

• Online Trace Route

• Routing Registries

• RSS Feed