News

IT management

• June 01, 2005 01 Jun'05

  Zombie machines used in 'brutal' SSH attacks

  IT managers use SSH to gain secure access to remote computers. Hackers are using it to crack your network, with help from their zombie friends.

• May 29, 2005 29 May'05

  Patching resource kit

  From vulnerability scanning to patching flubs, here's a collection of other helpful resources to ensure your patching efforts are effective.

• May 23, 2005 23 May'05

  Pre-CISSP: Options for the security newbie

  Shon Harris advises novice security practitioners on the value of entry-level certifications -- and good, old-fashioned experience -- in preparation for the CISSP®.

• May 17, 2005 17 May'05

  Should the government define spyware?

  Who's best qualified to define what is and isn't spyware -- your congressman or your online user community? Security experts say no entity can do it alone.

• May 17, 2005 17 May'05

  Some vendors get labeled as spyware pushers

  To win the battle with spyware, you must be able to spot it. That's not as easy as you think.

• May 11, 2005 11 May'05

  A new era of computer worms: Wireless mobile worms

  In this excerpt of Chapter 9 from "The Art of Computer Virus Research and Defense," author Peter Szor dissects the Cabir worm.

• April 25, 2005 25 Apr'05

  Tight contract management vital, users told at SSRG debut

  The Strategic Supplier Relationships Group, which brings together 10 of the UK's most influential IT user groups, was formally...

• April 19, 2005 19 Apr'05

  LogicaCMG on Met payroll

  The Metropolitan Police Authority has selected LogicaCMG to provide a £31m fully-managed payroll and pension administration...

• April 14, 2005 14 Apr'05

  Who should be on (and off) the hook for ID theft?

  An influential cryptographer and a panel of technologists today debate how best to fight false authentication and fraudulent transactions.

• April 14, 2005 14 Apr'05

  Spike ** LogicaCMG to manage Met payroll

  The Metropolitan Police Authority (MPA) has selected LogicaCMG to provide a £31m fully-managed payroll and pension administration...

• April 12, 2005 12 Apr'05

  Met Police gets LogicaCMG on payroll

  The Metropolitan Police Authority (MPA) has selected LogicaCMG to provide a £31m fully-managed payroll and pension administration...

• April 03, 2005 03 Apr'05

  Are identities safer on laptops than central databases?

  Microsoft pledges better ID security. Given the theft of a laptop storing 100,000 Social Security numbers, Redmond's approach could prove controversial.

• March 29, 2005 29 Mar'05

  Quiz: Do you have a firm e-mail security foundation?

  This Security School quiz is the first in a series of three on e-mail security essentials.

• March 24, 2005 24 Mar'05

  Atos wins DWP deal extension

  The Department for Work and Pensions has renewed a contract with IT services company Atos Origin to deliver medical advice and...

• March 21, 2005 21 Mar'05

  Linux lags Windows in new security report

  A controversial research paper takes a critical look at two popular platforms' track record on vulnerabilities and fixes. In turn, its findings are facing sharp scrutiny as well.

• March 17, 2005 17 Mar'05

  Botnets more menacing than ever

  Researchers from the Honeynet Project and iDefense say bots are spreading quickly, digging their heels into more than a million machines around the world.

• March 15, 2005 15 Mar'05

  ID theft and national security

  Check out what some ITKnowledge Exchange members had to say about this controversial issue.

• March 14, 2005 14 Mar'05

  HIPAA compliance officers explain hurdles, data security successes

  @9417

• March 14, 2005 14 Mar'05

  HIPAA causes data security problems for small businesses

  If your local dentist isn't complying with HIPAA's security rules, he's not alone. Experts say most doctors' offices aren't getting it.

• March 14, 2005 14 Mar'05

  HIPAA security rules apply to firms with healthcare plans

• March 08, 2005 08 Mar'05

  Small businesses targeted with RFID

• March 08, 2005 08 Mar'05

  A sound architecture involves both strong technology and a professional approach

  Although many large organisations need to respond rapidly to changes in the market as well as to competition and globalisation...

• March 07, 2005 07 Mar'05

  Windows vulnerable to LAND attack

  Security researchers say this type of attack leaves enterprise customers of popular Windows products open to a denial of service. There is good news, though.

• February 24, 2005 24 Feb'05

  Security Bytes: Cisco patch available for ACNS flaws

  Workaround outlined for new php exploit. IBM issues patch for DB2 flaw. Payroll service goes offline to investigate security claims , and BoA loses personal data on customers.

• February 15, 2005 15 Feb'05

  Federal agency security still poor, but improving

  Report cards give federal security a D-plus average, but the Homeland Security Department is still failing.

• February 14, 2005 14 Feb'05

  Local backup

• February 14, 2005 14 Feb'05

  Strategic Storage: DR planning blueprint

  Developing a good disaster recovery (DR) plan is similar to good dental hygiene -- and almost as exciting. Similar to going to the dentist twice a year, you should also test your DR plan with the same frequency. Wait too long to clean up your plan ...

• February 09, 2005 09 Feb'05

  The Controversy of Hacking Books and Classes

  Read this excerpt and download Chapter 1, Ethics of Ethical Hacking from Shon Harris' All-in-One Gray Hat Hacking.

• February 07, 2005 07 Feb'05

  CEOs and CIOs split on IT success

  Business and IT directors are still at loggerheads on key technology issues, according to a new survey by the Economist...

• February 02, 2005 02 Feb'05

  Compressed files strike another blow to AV

  The "alternative" .rar files are picking up where popular .zip files left off as attack vectors.

• January 31, 2005 31 Jan'05

  ID theft remains No. 1 worry

  For the fifth straight year, the FTC said most complaints came from identity theft victims. And that's a problem for enterprises.

• January 23, 2005 23 Jan'05

  Cyberstorm chasers: The folks who look out for the latest Internet threats

  They keep a 'round-the-clock watch on conditions in cyberspace. CTO Johannes Ullrich discusses the volunteer effort behind the SANS Internet Storm Center.

• January 19, 2005 19 Jan'05

  Sun develops Centera competitor

• January 10, 2005 10 Jan'05

  Security Bytes: George Mason U. hacked; new Trojans on the loose

  Hackers steal personal data of more than 30,000 members of George Mason University. Two new Trojans emerge. BMC Software buys a Parisian company.

• January 10, 2005 10 Jan'05

  Security on a Shoestring: Creating Internet policies on the cheap

  No matter how small the organization, it's impractical to stand over employees and make sure they properly use the Internet. So here's how to write a decent acceptable use policy, and make sure everyone abides by it.

• December 19, 2004 19 Dec'04

  Transforming the cybersecurity culture

  Eleven New Year's resolutions can help employees at all levels empower the security function at their organization.

• December 08, 2004 08 Dec'04

  The security lingo of 2004

  This was the year of botnets, zombie PC armies and phishying online schemes.

• October 28, 2004 28 Oct'04

  MoD may write off £200m Chinook helicopters

  The Ministry of Defence could write off more than £200m spent on eight Chinook Mk3 helicopters.

• October 08, 2004 08 Oct'04

  First integrated children's system goes live

  The first web-based system to help councils meet new legal requirements for information sharing among teachers, social workers...

• October 04, 2004 04 Oct'04

  Symantec offers bare metal restore software

• October 03, 2004 03 Oct'04

  Training for CISSP Certification: SearchSecurity.com's Security School

  Study guides for each of the ten domains of the CBK for those preparing to take the CISSP exam or expanding their knowledge of security concepts and practices.

• September 26, 2004 26 Sep'04

  Authorize.Net says it has 'learned' from attack

  The credit card processing service was unprepared for the kind of attack it suffered last week, but it will use the experience to improve security.

• August 27, 2004 27 Aug'04

  Over-specify when buying low cost replacement for Frame Relay

  A project manager reveals how a VPN saved £275,000 a year

• August 24, 2004 24 Aug'04

  Latest worm uses IM to lure victims

  A version of the worm which spread from infected Microsoft Internet Information Services (IIS) web servers in June has been...

• July 27, 2004 27 Jul'04

  New attacks and vulnerability trends highlighted at Black Hat

  Presentations beginning today will analyze vulnerabilities, zero-day code, phishing and secure wireless deployment, among many other topics.

• July 26, 2004 26 Jul'04

  Fewer IT supplier conflicts are going to court

  Law firms have reported a sharp fall in the number of IT disputes reaching the courts over the past 12 months as more users turn...

• July 25, 2004 25 Jul'04

  Learning about Security Threats: Profiling

  A look at what it means to be a hacker.

• July 18, 2004 18 Jul'04

  Debian fixes multiple flaws

  Denial-of-service, buffer overflow and format string vulnerabilities in Debian GNU/Linux that an attacker could use to remotely execute malicious code has been fixed.

• July 18, 2004 18 Jul'04

  Enterprise-class RAID functions, part 2: N-way mirroring, splitting and more

  With the convergence of RAID and lower-priced storage technologies, advanced RAID functions can be enjoyed by any small-to-medium sized organization with critical data.

• June 21, 2004 21 Jun'04

  Users at risk after web host attack

  Users have been warned to brace themselves for attacks on sites which provide patch downloads and web hosting services.