News

IT security

• August 09, 2007 09 Aug'07

  VeriSign employee data exposed in laptop theft

  Current and former employees of VeriSign were exposed to potential data fraud when a laptop housing their information was stolen from the car of a former employee.

• August 09, 2007 09 Aug'07

  VoIP vulnerability threatens data

  VoIP vulnerabilities have now reached a level of sophistication that allows hackers to steal, view or delete data.

• August 09, 2007 09 Aug'07

  Immunity releases new exploit-writing tool

  Pen testing company says its Debugger tool offers researchers a new way to write exploits, analyse malware and reverse engineer binary files.

• August 08, 2007 08 Aug'07

  NAS appliance specifications

  NAS appliances are noted for their convenience, offering dedicated internal storage that is relatively straightforward to identify and manage. The biggest issue for NAS appliances is avoiding network bottlenecks and supporting expansion without ...

• August 08, 2007 08 Aug'07

  Cisco warns of critical IOS flaws

  Attackers could exploit multiple flaws in Cisco's IOS to cause a denial of service or remotely execute arbitrary code.

• August 08, 2007 08 Aug'07

  Wi-Fi simplicity edging out Wi-Fi security

  Experts say the standards are available to lock down Wi-Fi, but many network and security managers are taking an easier approach.

• August 08, 2007 08 Aug'07

  EMC's RSA to acquire Tablus for data loss prevention

  RSA, the security division of EMC Corp., said it planned to acquire Tablus, a maker of sensitive data scanning and classification tools and data protection software.

• August 07, 2007 07 Aug'07

  Subpar security compromises compliance

  Pressure to keep trading applications available has nudged security to the back of the development line.

• August 06, 2007 06 Aug'07

  Researchers wrangle petabytes of data storage with NAS, tape

  Scientists at Cern's LHC say dozens of petabytes require custom-built NAS systems and data migration software, but commercial tape drives are mostly up to snuff.

• August 03, 2007 03 Aug'07

  Discovery of malware cesspool triggers attack fears

  Trend Micro researchers say a malware-infested Web server in Russia, linked to several Italian Web sites, could lead to a large-scale attack.

• August 02, 2007 02 Aug'07

  Apple releases fixes for Mac OS X, iPhone vulnerabilities

  Apple Computer has released software patches fixing critical vulnerabilities in Mac OS X and its newly released iPhone.

• August 01, 2007 01 Aug'07

  Users make iSCSI Sans with USB keys

  Users say that Open-E's iSCSI San software, which is delivered on a USB stick, is more affordable than prepackaged systems and has more support than free iSCSI target products.

• August 01, 2007 01 Aug'07

  Black Hat 2007: Researchers highlight new database attack method

  At this week's hacker confab, expert penetration testers will demonstrate how cyberthieves can reach into corporate databases -- without exploiting a specific software flaw -- to steal credit card and Social Security numbers.

• July 31, 2007 31 Jul'07

  Attackers ultimately drive security market, analyst says

  The security market is being driven by spam gangs, cyberthieves and other criminals bent on hacking into company and government databases to steal sensitive information.

• July 31, 2007 31 Jul'07

  Security update fixes Yahoo Widgets flaw

  Attackers could exploit a Yahoo Widgets flaw to run malicious code on compromised Windows computers, but a security update is available.

• July 31, 2007 31 Jul'07

  Cisco knocks out Avaya as IP PBX heavyweight

  IP PBX adoption is rising as Cisco and Avaya square off for market dominance.

• July 30, 2007 30 Jul'07

  Most antispam technologies get failing grade

  An independent study finds that many enterprises are not satisfied with traditional antispam technologies.

• July 26, 2007 26 Jul'07

  Stop simultaneous connections to corporate LANs and external Wi-Fi networks

  How can you stop simultaneous connections to corporate LANs and external Wi-Fi networks? Find out from expert Lisa Phifer.

• July 25, 2007 25 Jul'07

  EMC reports Clariion surge, data archiving slump

  EMC's revenues are up this quarter, attributed in part to a big boost in Clariion sales, but CEO Joe Tucci is critical of the company's execution in data archiving.

• July 25, 2007 25 Jul'07

  Cisco issues warning for wireless LAN controller flaws

  Cisco Systems is warning customers of flaws in its wireless LAN controllers that initially crippled a wireless network at Duke University.

• July 24, 2007 24 Jul'07

  Apple iPhone crack discovered by security researchers

  Researchers have found a way to take complete control of the Apple iPhone by sending a user to a malicious Web site.

• July 24, 2007 24 Jul'07

  New hacking technique exploits common programming error

  Researchers at Watchfire Inc. say they discovered a new technique that exploits a common dangling pointer error.

• July 23, 2007 23 Jul'07

  PCI compliance costs often underestimated, study finds

  Companies are moving forward with PCI DSS projects, but many are underestimating the costs associated with compliance.

• July 23, 2007 23 Jul'07

  Core Security CEO to step down

  Paul Paget, the CEO of penetration testing software vendor Core Security Technologies said he is better-suited for start-ups

• July 22, 2007 22 Jul'07

  Black Hat Las Vegas 2007: Special news coverage

  SearchSecurity.com covers all the controversy at this year's show with news, features, podcasts, interviews, exploits and more direct from Las Vegas.

• July 22, 2007 22 Jul'07

  NAC growth sluggish as companies consider network security options

  Companies are taking a wait-and-see approach, hoping the technology's maturity will make it more cost effective.

• July 18, 2007 18 Jul'07

  For Boeing, data security, network access still hazy

  Boeing is trying to reshape its network security architecture to better protect sensitive systems from threats without degrading employee productivity.

• July 17, 2007 17 Jul'07

  CDP platform purchase considerations

  Busy IT organizations are employing continuous data protection (CDP) technologies to guard data on the fly, essentially eliminating the backup window and allowing granular file and system restoration -- sometimes down to the individual disk write ...

• July 17, 2007 17 Jul'07

  Zero-day auction site complicates security efforts, IT pros say

  WabiSabiLabi, the eBay-like marketplace for zero-day flaws, will make it tougher for companies to ward off attackers, some IT security professionals say.

• July 17, 2007 17 Jul'07

  Oracle plans 46 security updates for database, software

  Attackers could tamper with database servers and host operating systems by exploiting flaws across Oracle's product line.

• July 17, 2007 17 Jul'07

  CDP platform specifications

  Continuous data protection (CDP) products track changes to files and data -- typically in real time -- recording activity and allowing recovery to an extremely granular level. This effectively reduces backup windows and restore points, allowing busy...

• July 16, 2007 16 Jul'07

  Oracle's July 2007 CPU has 45 security fixes

  Oracle stuffed 45 security updates into its July 2007 CPU, fixing flaws across its product line attackers could exploit remotely to compromise corporate databases.

• July 13, 2007 13 Jul'07

  Symantec fixes flaws in AntiVirus, Backup Exec

  Symantec fixed flaws attackers could exploit in AntiVirus Corporate Edition and Backup Exec to launch malicious code, gain elevated user privileges or cause a denial of service.

• July 13, 2007 13 Jul'07

  Antispyware legislation gets tepid reviews

  Congress is debating three different bills that would punish spyware pushers, but some IT professionals have their doubts about legislation as a solution to the problem.

• July 12, 2007 12 Jul'07

  Web security gateways meet rising malware threats

  Web security gateways combine layered defense against the rising tide of Web-based malware with URL filtering and application control.

• July 12, 2007 12 Jul'07

  Zero-day auction site highlights ethical debate

  A new auction site plans to cash in on flaw research. Executive Editor Dennis Fisher explores if it's a viable business model and if research should be sold to the highest bidder.

• July 10, 2007 10 Jul'07

  United in threat management part three: how scared are you?

  Wrapping up his look at unified threat management, Ian Yates wonders if the technique will help you sleep better at night.

• July 09, 2007 09 Jul'07

  Microsoft July updates for critical Excel, Windows and .NET flaws

  Of the six security updates Microsoft released Tuesday, experts expressed the most concern about a critical glitch in the .NET Framework that could leave client machines and Web servers open to attack.

• July 09, 2007 09 Jul'07

  Data breaches, compliance drive intellectual property protection

  Recent high profile data breaches and compliance pressures are forcing companies to spend more on technology to protect intellectual property, according to a new study.

• July 09, 2007 09 Jul'07

  Google buy shakes up email archiving

  Google's acquisition of Postini will boost adoption of Gmail, pushing email archiving players to add support for hosted applications.

• July 06, 2007 06 Jul'07

  Microsoft preps six security updates for Windows, Office

  Microsoft will release six security updates on Tuesday 10 July to address flaws attackers could exploit to launch malicious code and access sensitive information on victims' machines.

• July 05, 2007 05 Jul'07

  Security Metrics: Replacing Fear, Uncertainty, and Doubt

  In this chapter excerpt from "Security Metrics: Replacing Fear, Uncertainty and Doubt," author Andrew Jaquith reveals ways to present security data in a clean and elegant manner.

• July 05, 2007 05 Jul'07

  Zero-day auction site opened by Swiss lab

  Swiss start-up WabiSabiLabi is offering zero-day findings for qualified buyers. The site could fuel new debate over flaw disclosure.

• July 04, 2007 04 Jul'07

  Cisco users upbeat about security direction

  Cisco customers say the vendor's security strategy is headed in the right direction, which is why they believe the networking giant's IronPort integration will be smooth sailing.

• July 03, 2007 03 Jul'07

  Data storage startups emerge from stealth

  Three new storage firms have come out of stealth mode this June. Analysts predict the next new crop of startups will focus on wireless storage, reporting and alternatives to RAID.

• July 02, 2007 02 Jul'07

  Are PCI auditors pitching products?

  Auditors shouldn't be pitching remediation services or products to bring a company into compliance with PCI DSS rules, but some merchants are reporting the practice

• July 01, 2007 01 Jul'07

  SearchSecurity.com Blogs

• June 29, 2007 29 Jun'07

  CIOs get solutions to meet governance regulations

  CIOs facing a rising bills to meet governance, risk and compliance regulations may be able to control their costs better if they turn to new purpose-built software.

• June 29, 2007 29 Jun'07

  Software to help CIOs meet governance regulations

  CIOs facing a rising bills to meet governance, risk and compliance regulations may be able to control their costs better if they turn to new purpose-built software.

• June 29, 2007 29 Jun'07

  Vendors admit more cooperation needed on security

  Security leaders from large software vendors pledge to cooperate on embedding more security into their products.