Infosec checklists becoming common, but they're not magic
Three and a half years ago, the organisation then called the Defence Signals Directorate (DSD) used science to better understand the causes of information security problems. Its resulting recommendations reflected what security professions had long ...


Adam Gowdiakfrom Polish vulnerability research company Security Explorations has issued an announcement concerningvulnerabilites in the Google App Engine. Details are still somewhat thin, but it appears that multiple vulnerabilities have been discovered and thatsome of these vulnerabilities will allowa Java VM sandbox escape.

Further information is available at Full Disclosure archive at seclists.org.

-- Rick Wanner - rwanner at isc dot sans dot org - http://namedeplume.blogspot.com/ - Twitter:namedeplume (Protected)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Internet Storm Center Infocon Status