News

Hackers and cybercrime prevention

March 07, 2011 07 Mar'11
France's G20 files target of cyber attack

France's files on the G20 meetings were the target of a cyber attack, the country's finance minister has confirmed.
March 07, 2011 07 Mar'11
HSBC uses token to secure smartphone banking

HSBC is sending four million online banking customers a security token which will enable them to log in to their online bank account wherever they are, without using a card reader.
March 07, 2011 07 Mar'11
Malvertising, pop-up ad virus problems demand more user protection

A recent pop-up ad infection on the London Stock Exchange's website highlights the growing scourge of malicious advertising, or malvertising.
February 25, 2011 25 Feb'11
nullcon 2011 Day Zero: Photo feature

Botnet detection, fuzzing intricacies, Zeus MitMo, VoIP attacks, and more. nullcon Day Zero saw considerable action worth the capture.

February 24, 2011 24 Feb'11
ISC releases security fix for Bind DoS vulnerability

The Internet Systems Consortium has published an advisory and an update for the Bind domain name system software versions 9.7.1 to 9.7.2-P3.
February 24, 2011 24 Feb'11
Exxon, Shell, BP hacked in Night Dragon attacks

Exxon Mobil, Royal Dutch Shell and BP were among the oil companies targeted by hackers working through internet servers in China, say US reports.
February 24, 2011 24 Feb'11
Microsoft fixes security flaw in malware protection engine

Microsoft has patched a flaw in its malware protection engine that could be exploited to gain control of victim's computer.
February 17, 2011 17 Feb'11
New SMB vulnerability identified in Windows XP and Server 2003

A new SMB vulnerability discovered in Windows could open systems to DoS attacks and remote access. The vulnerability, tagged as CVE-2011-0654, has been rated "critical" and confirmed on Windows Server 2003 SP2 and Microsoft Windows XP SP3.
February 17, 2011 17 Feb'11
RSA 2011: RSA, EMC and VMWare advise on defending against advanced persistent threats

Security leaders have outlined ways organisations can better defend against advanced persistent threats (APTs) in a paper published by RSA, the security division of EMC.
February 15, 2011 15 Feb'11
RSA 2011: Cybersecurity leads conference with cloud security keynote

Cybersecurity is one of the key topics at the RSA Conference 2011 taking place this week in San Francisco.

February 10, 2011 10 Feb'11
IT departments are unable to support employee devices

Security concerns are holding companies back from allowing staff to use their own technology at work.
February 09, 2011 09 Feb'11
Microsoft's February Patch Tuesday outlines five critical vulnerabilities

Microsoft has released 12 security bulletins addressing 22 vulnerabilities in its monthly security update for February
February 08, 2011 08 Feb'11
Post Office faces legal action over alleged accounting system failures

More than 50 postmasters are planning legal action against the Post Office to reclaim money they paid to the Post Office after being accused of theft and false accounting.
February 08, 2011 08 Feb'11
Businesses must learn how to defend against cyberattack, says McAfee

Cybercrime has thrived over the past decade according to recent reports from security firm McAfee, but business can expect even more dramatic change in the next ten years, researchers say.
January 25, 2011 25 Jan'11
Spam level dips

The recent decline in global spam was the result of a halt in the spam-sending activities of three botnets and unrest among pharmaceutical spam-sending gangs, Symantec's latest MessageLabs Intelligence Report has revealed.
January 19, 2011 19 Jan'11
2010 IT security threats point to priorities for 2011, says Sophos

Cyber threats of 2010 highlight the top risks to business for 2011, including social media sites, whistleblowers, and hacktivists, warns security firm Sophos.
January 12, 2011 12 Jan'11
Microsoft January Patch Tuesday misses open security issues

Microsoft's January 2011 Patch Tuesday security update contains only two bulletins, but misses several open security issues.
January 07, 2011 07 Jan'11
Microsoft to patch critical IE vulnerability to block ongoing attacks

Microsoft will issue two security bulletins, addressing a critical vulnerability affecting all versions of WIndows.
December 04, 2008 04 Dec'08
How the Mytob virus caused havoc in the NHS

The Mytob virus has been removed from 5,000 PCs at
October 05, 2007 05 Oct'07
Podcast: the true cost of IT security

In this interview, Cliff Saran speaks to Martin Sadler, director of HP's Trusted Systems Lab, about how much should we be expected to spend and how much security is enough. Hackers are getting smarter and Martin believes newly trained IT ...
September 24, 2007 24 Sep'07
PCI council adds Pin security to remit

The PCI Security Standards Council has added Pin Entry Device (PED) security technology to its payments industry testing portfolio to streamline standardisation.
August 28, 2007 28 Aug'07
SANS: Attackers may be attempting Trend Micro exploits

The SANS Internet Storm Center (ISC) warns that attackers may be attempting to exploit flaws in Trend Micro products to hijack computer systems.
August 15, 2007 15 Aug'07
Latest Microsoft flaws affect Windows, IE, Excel

Microsoft released nine security updates Tuesday -- six of them critical -- for flaws in Internet Explorer, Excel and other programs within the Windows OS.
August 03, 2007 03 Aug'07
Discovery of malware cesspool triggers attack fears

Trend Micro researchers say a malware-infested Web server in Russia, linked to several Italian Web sites, could lead to a large-scale attack.
August 02, 2007 02 Aug'07
Apple releases fixes for Mac OS X, iPhone vulnerabilities

Apple Computer has released software patches fixing critical vulnerabilities in Mac OS X and its newly released iPhone.
July 24, 2007 24 Jul'07
New hacking technique exploits common programming error

Researchers at Watchfire Inc. say they discovered a new technique that exploits a common dangling pointer error.
July 17, 2007 17 Jul'07
Zero-day auction site complicates security efforts, IT pros say

WabiSabiLabi, the eBay-like marketplace for zero-day flaws, will make it tougher for companies to ward off attackers, some IT security professionals say.
July 12, 2007 12 Jul'07
Zero-day auction site highlights ethical debate

A new auction site plans to cash in on flaw research. Executive Editor Dennis Fisher explores if it's a viable business model and if research should be sold to the highest bidder.
June 25, 2007 25 Jun'07
PCI Council hears complaints, suggestions for changes

Companies with the most stringent security technologies endure hurdles to comply with PCI DSS. Some firms are turning to the upcoming Burton Group Catalyst Conference for answers.
June 25, 2007 25 Jun'07
DHS suffered more than 800 cyber attacks in two years

Senior officials at the US Department of Homeland Security have acknowledged hundreds of security lapses but say improvements have been made.
June 20, 2007 20 Jun'07
HP to acquire SPI Dynamics for Web security

HP says it will would bolster Web site assessments and Web application vulnerabilities with its acquisition of Atlanta-based SPI Dynamics Inc.
June 18, 2007 18 Jun'07
Will HP do the right thing with SPI Dynamics?

Analysts say HP can dramatically boost its security with the purchase of SPI Dynamics, but some users worry about SPI's technology wilting under the new ownership.
June 17, 2007 17 Jun'07
Burton Group Catalyst Conference San Francisco 2007

SearchSecurity.com brings you the latest news, interviews, podcasts and more from the Burton Group Catalyst Conference 2007 in San Francisco.
June 13, 2007 13 Jun'07
Microsoft patches Windows Vista, IE 7

Microsoft fixed 15 flaws in a variety of products Tuesday, including Windows XP, Vista and Internet Explorer 7. Attackers could exploit the most serious flaws for remote code execution.
June 05, 2007 05 Jun'07
Watchfire will help IBM build application security

Analysts have been pushing the Security 3.0 concept this week at Gartner's IT Security Summit, and one analyst says IBM's acquisition of Watchfire illustrates the trend.
June 01, 2007 01 Jun'07
Top spammer indicted on email fraud, identity theft

The arrest may reduce the volume of spam in the short-term, say experts and analysts, but the real spam threat comes from criminal gangs based in Asia and Russia.
June 01, 2007 01 Jun'07
Google dives into security market

Search engine giant Google has acquired security startup GreenBorder Technologies, making it a bigger player in the wider information security market.
May 24, 2007 24 May'07
IETF approves new weapon to fight spam, phish

DomainKeys Identified Mail specification (DKIM) gained approval as an official IETF standard. The approval is seen as a major step in the fight against spam and phishing attacks.
May 21, 2007 21 May'07
Cisco warns of new IOS flaws

The new flaws are classified as "low," but if exploited they could result in a sustained DoS condition, Cisco said.
May 17, 2007 17 May'07
VoIP security fundamentals

VoIP security is a challenge for IT staff because IP telephony brings with it not only the security problems of data networks but also new threats specific to VoIP. In this fundamentals guide, learn about network security threats and emerging IP ...
May 16, 2007 16 May'07
Screencast: How to configure a UTM device

In this exclusive screencast, expert David Strom demonstrates the configuration options available in SonicWall's unified threat management product.
May 02, 2007 02 May'07
Microsoft to release DNS patch Tuesday

In addition to a fix for the DNS Server Service flaw, Microsoft plans to patch critical flaws in Windows, Office, Exchange, CAPICOM and BizTalk.
April 16, 2007 16 Apr'07
DNS worm strikes at Microsoft flaw

A new worm called Rinbot.BC exploits the Microsoft DNS flaw by installing an IRC bot on infected machines and scanning for other vulnerable servers.
April 15, 2007 15 Apr'07
Malware outbreak 'largest in almost a year'

Security firm Postini and the SANS Internet Storm Center said they are tracking a significant malware outbreak. Postini calls it the biggest email attack in almost a year.
April 12, 2007 12 Apr'07
Microsoft investigates DNS server flaw

Attackers could exploit a DNS flaw in Microsoft Windows 2000 Server and Windows Server 2003 and run malicious code on the system. A workaround is suggested until a patch is issued.
April 11, 2007 11 Apr'07
Instant messaging threats become more sophisticated

Instant messaging faces greater threats as more enterprises begin to utilize it, making it a more appealing target to hackers.
April 10, 2007 10 Apr'07
The changing threat of email attacks

In this Messaging Security School lesson, expert Mike Rothman details the state of next-generation email threats, explores reputation systems and uncovers threats AV can't catch.
April 08, 2007 08 Apr'07
Spam campaign uses Storm-like attack technique

Spammers used an attack technique much like last January's "Storm" assault to dupe people into downloading malware over the weekend. This time, they used fake WWIII headlines.
April 08, 2007 08 Apr'07
Symantec fixes 'high-risk' flaw in Enterprise Security Manager

Attackers could hijack machines from remote locations by exploiting a flaw in Symantec Enterprise Security Manager (ESM). Kaspersky Lab users also have a flaw to deal with.
April 04, 2007 04 Apr'07
Data security breach at UCSF may have exposed thousands

The University of California at San Francisco (UCSF) acknowledged Wednesday that a security hole in a computer server may have exposed 46,000 people to potential identity fraud.