I received an e-mail from Mirko Zorz of Help Net Security, informing me of an free online magazine he is publishing, (IN) SECURE Magazine. I had a read through the 3rd edition and was very impressed. Almost every article appealed to me (including the one on Patching by Eschelbeck). There is a hell of a lot of advertising, but it was all directly relevant so I found myself reading it, something I swore never to do.

There is a nice mix of technical, governance and theory articles, coupled with some useful side notes, like good security blogs. TaoSecurity is mentioned quite a lot and Bejtlich, mentions the mag in his blog too.

This issue contains:

• Security vulnerabilities, exploits and patches
• PDA attacks: palm sized devices - PC sized threats
• Adding service signatures to Nmap
• CSO and CISO - perception vs. reality in the security kingdom
• Unified threat management: IT security's silver bullet?
• The reality of SQL injection
• 12 months of progress for the Microsoft Security Response Centre
• Interview with Michal Zalewski, security researcher
• OpenSSH for Macintosh
• Method for forensic validation of backup tapes