In this video, Niklas Wolff of the CSIS Security Group demonstrates an exploit for the recent integer overflow vulnerability in Adobe Reader (CVE-2010-2862), disclosed at Black Hat in July, that allows remote code execution.

Shorten URL: . Click to copy to clipboard or post to Twitter

In this video from the OWASP AppSec Research conference, Tom Brennan of WhiteHat Security discusses the current trends in vulnerabilities in Web applications and what's driving them.

Shorten URL: . Click to copy to clipboard or post to Twitter

In this video, the folks at Offensive Security demonstrated exactly how the Windows DLL-hijacking vulnerability can exploited using Metasploit and a benign PowerPoint slide.

Shorten URL: . Click to copy to clipboard or post to Twitter

In this video from the OWASP AppSec Research conference, Gustav Rydstedt from Stanford University, discusses frame-busting and clickjacking vulnerabilities on popular Web sites.

Shorten URL: . Click to copy to clipboard or post to Twitter

In this video from the OWASP AppSec Research conference in Sweden, security researcher Ivan Ristic of Qualys discusses practical methods for breaking SSL.

Shorten URL: . Click to copy to clipboard or post to Twitter

In this video from the OWASP AppSec Research 2010 conference in Sweden, Michael Schrank, Bastian Braun and Martin Johns discuss the problem of session fixation and what can be done to solve it.

Shorten URL: . Click to copy to clipboard or post to Twitter

In the Google TechTalk, Justin Ma, a PhD candidate at UC San Diego, discusses a novel method for determining which URLs are malicious by applying large-scale online learning techniques.

Shorten URL: . Click to copy to clipboard or post to Twitter

This is a recording of a live chat session with the technical support agent associated with a rogue AV program. The session was recorded by Nicolas Brulez, a security analyst at Kaspersky Lab.

Shorten URL: . Click to copy to clipboard or post to Twitter

In the third part of his talk on politically motivated DDoS attacks at the recent Kaspersky Lab Security Analyst Summit, Jose Nazario of Arbor Networks discusses the tactics and motivations for these attacks.

Shorten URL: . Click to copy to clipboard or post to Twitter

In the second part of his discussion on DDoS attacks at the Kaspersky Lab Security Analyst Summit in Cyprus, Jose Nazario of Arbor Networks delves into some of the statistics he has compiled on these attacks.

Shorten URL: . Click to copy to clipboard or post to Twitter