News

IT strategy

• August 14, 2006 14 Aug'06

  Mocbot update targets MS06-040 flaw

  Security experts raised the red flag Sunday as new malware targets the Windows flaw addressed in the MS06-040 patch. Attackers are using the flaw to expand IRC-controlled botnets.

• August 10, 2006 10 Aug'06

  Security Blog Log: Israeli-Hezbollah war spills into cyberspace

  This week blogosphere warily watches online attacks inspired by the Mideast conflict and rants over the latest security incidents at AOL and the VA.

• August 10, 2006 10 Aug'06

  Vista kernel limits have security vendors on edge

  Microsoft's PatchGuard feature will prevent extension of Windows Vista kernel, and antivirus vendors say it'll make it harder for them to produce good security products.

• August 08, 2006 08 Aug'06

  Users cautious about Brocade-McData merger

  Customers are worried about McData switches interoperating with other products and how Brocade will handle product overlap.

• August 06, 2006 06 Aug'06

  Security Bytes: CA fixes eTrust Antivirus flaws

  Online thieves steal $700,000 from personal accounts, researchers expose e-passport vulnerability; and arrests are made in the VA security breach case.

• August 03, 2006 03 Aug'06

  Ajax threats worry researchers

  Black Hat: While it makes smooth Web applications like Google Maps possible, the rush to adopt Ajax may fuel haphazard development and a feeding frenzy among hackers.

• August 03, 2006 03 Aug'06

  Vendors reject preferential knowledge sharing

  While Cisco continues to investigate a potential PIX firewall flaw, it and other vendors say sharing security information quickly and indiscriminately is always the best policy.

• August 03, 2006 03 Aug'06

  EMC updates SAN Advisor design tool

  EMC's SAN design tool now recognises zones and allows users to customise rules; HP and EMC sign five-year cross-licensing deal.

• August 02, 2006 02 Aug'06

  Twelve Microsoft fixes coming on Patch Tuesday

  Microsoft Tuesday will release a dozen new security bulletins for its Windows and Office products, likely including fixes for several outstanding PowerPoint flaws.

• August 02, 2006 02 Aug'06

  Mobile security begins with policy

  Mobile security can no longer be an afterthought. Mobile experts say security starts, but doesn't end, with policy.

• August 02, 2006 02 Aug'06

  Possible Cisco zero-day exploit revealed at Black Hat

  Details of an alleged flaw related to SIP and PIX appliances, briefly mentioned in a Wednesday Black Hat presentation, are being kept under wraps as Cisco and US-CERT investigate.

• August 01, 2006 01 Aug'06

  Security Bytes: Exploits targeting freshly patched Apple flaw

  Apple patches nearly two dozen holes in OS X, but not before exploits are unleashed. Plus McAfee fixes a critical flaw and EMC gets the OK to buy RSA.

• August 01, 2006 01 Aug'06

  Litchfield: Database security is 'IT's biggest problem'

  At Black Hat USA 2006, database security guru David Litchfield unveils 20-plus IBM Informix flaws that attackers could exploit to create malicious files, gain DBA-level privileges and access sensitive data.

• July 31, 2006 31 Jul'06

  Security Bytes: ISS warns of new Microsoft Windows flaw

  Attackers could exploit the latest Microsoft Windows flaw to crash vulnerable machines and Symantec fixes a Brightmail AntiSpam flaw.

• July 30, 2006 30 Jul'06

  EqualLogic updates storage provisioning software

  Users have more options when it comes to pooling storage with version 3.0 of EqualLogic's array software, but some are wondering whatever happened to the SAS disks.

• July 26, 2006 26 Jul'06

  Mozilla issues critical security updates

  New patches to fix 13 software security flaws, eight of which have been deemed critical.

• July 26, 2006 26 Jul'06

  DHS puts Zitz in charge of cybersecurity division

  American career intelligence officer Robert S. Zitz has taken over day-to-day operations of the US National Cyber Security Division, but his department still has numerous digital defence problems to remedy.

• July 26, 2006 26 Jul'06

  Blue Cross bears burden of 'no wireless' policy

  Blue Cross of Idaho had a "no wireless" policy on paper but never really enforced it. That is, until a team of auditors said the company had better do something.

• July 25, 2006 25 Jul'06

  Employee monitoring should be done with care

  Employee monitoring is on the rise as firms try to safeguard their sensitive information and increase productivity.

• July 24, 2006 24 Jul'06

  Security Bytes: New Microsoft exploits in the wild

  The exploits target issues Microsoft patched earlier this month. Meanwhile, flaws are reported in Oracle for OpenView and a Mozilla Firefox keystroke logger is on the loose.

• July 18, 2006 18 Jul'06

  Midsized firms reach out to backup service providers

  Data growth and ever-tightening compliance rules are among the factors driving some organizations to turn to service providers for help with backups.

• July 14, 2006 14 Jul'06

  CSI survey: Data breaches still being swept under the rug

  The annual CSI/FBI Computer Crime and Security Survey shows companies are reporting fewer financial losses from data breaches. That doesn't mean the good guys are winning.

• July 14, 2006 14 Jul'06

  Answers: Compliance All-in-One Guide quiz

  The key compliance questions unveiled

• July 13, 2006 13 Jul'06

  Security Bytes: Investigators slam VA over data breach

  Meanwhile: Cisco patches a router application flaw, a Washington law firm sues IBM over a server attack; and spammers sucker Web surfers with fake Vladimir Putin death reports.

• July 13, 2006 13 Jul'06

  Trojan targets Microsoft PowerPoint flaw

  Update: The exploit might be tied to an older flaw in Excel. Attackers who exploit the serious flaw could launch arbitrary code. Microsoft says it is investigating.

• July 11, 2006 11 Jul'06

  Critical flaws found in Excel, Flash Player

  FrSIRT says holes in Microsoft's spreadsheet program and Adobe's media player could allow attackers to take control of affected machines and initiate malicious commands.

• July 11, 2006 11 Jul'06

  Looking ahead to life without passwords

  Security pros know that passwords are nothing but trouble. For them, single-sign on, two-factor authentication and federated ID represent the path to stronger authentication.

• July 10, 2006 10 Jul'06

  Skills fears as number of IT students plummets

• July 10, 2006 10 Jul'06

  Downtime: Now here's an idea for all of you flag flyers...

• July 10, 2006 10 Jul'06

  Security Bytes: Data breach affects 100,000 military personnel

  Meanwhile: Phishers use a phone trick to dupe PayPal users; the PCI security standard will get more teeth and a survey illustrates an increase in security breaches

• July 10, 2006 10 Jul'06

  Application layer logging quiz answers

  The key questions revealed

• July 06, 2006 06 Jul'06

  Strong authentication for businesses large and small

  Product review: Customer service could return calls more quickly when there's a problem. But overall, RSA SecurID Appliance 2.0 delivers robust, scalable protection.

• June 27, 2006 27 Jun'06

  Cost of Libra magistrates system trebles

  The Department of Constitutional Affairs has admitted that the cost of the Libra case management system for magistrates courts will rise to £487m – more than three times the £146m original cost set in 1998.

• June 26, 2006 26 Jun'06

  Dundee to teach ethical hacking BSc

  A degree in ethical hacking will be on offer at a Scottish university from the new academic year.

• June 15, 2006 15 Jun'06

  Microsoft offers SMBs all-in-one security and protection

  Small- to medium-sized businesses (SMBs) are among the key targets of Microsoft's latest solution, Windows Live OneCare.

• June 13, 2006 13 Jun'06

  Fifa ready for cyber attack on World Cup

• June 01, 2006 01 Jun'06

  FullArmor lives up to its name

  PolicyPortal provides an Internet interface to easily configure, monitor and enforce near real-time Active Directory-based policy compliance through client agents.

• June 01, 2006 01 Jun'06

  BlueCat appliance offers rock-solid security

  Hot Pick: The Adonis 1000 appliance bundles DNS and DHCP into an enterprise-class appliance for the centralized secure operation of network addressing.

• May 03, 2006 03 May'06

  Shifting services back indoors

  Almost a quarter of blue chip firms in the UK are so disillusioned with outsourcing they are hauling their services back in-house.

• March 28, 2006 28 Mar'06

  Outsourced way to hire contract staff

  IT services company FDM has launched a "straight through" recruitment service to help IT departments in the finance sector recruit contract staff.

• March 07, 2006 07 Mar'06

  Networks news in brief

  Short takes from this week's network news

• February 27, 2006 27 Feb'06

  Not just a big switch

  Fibre Channel directors don't just provide lots of ports, they also offer ways to connect disparate SANs, isolate data and devices within a fabric, and configure throughput for specific applications. We look at how the big three directors match up.

• December 21, 2005 21 Dec'05

  Sony struggles to regain trust

  The company is trying to mend a reputation bruised over its antipiracy practices. One advocate for online civil liberties explains why redemption is a long way off.

• December 20, 2005 20 Dec'05

  Guidance turns investigative tools on itself

  The forensics software firm says it was compromised by hackers in November. It's just one in a growing list of companies admitting to recent attacks or lax security.

• December 14, 2005 14 Dec'05

  Flaws reported in Trend Micro ServerProtect

  Storage and security managers should be wary of vulnerabilities in the AV product that could enable a denial-of-service and malicious code execution. Workarounds are available.

• December 14, 2005 14 Dec'05

  Hospital ditches EMC Centera for long-term archiving

  UHCS in Augusta, Ga., is replacing its Centera archiving system from EMC with IBM's GMAS product after performance, reliability and cost issues forced it to seek alternatives.

• December 14, 2005 14 Dec'05

  Roundup: 2005's 'curious malicious code'

  These viruses, worms and Trojans sometimes escaped our notice. But it didn't get past one antivirus vendor, who rounded up some of the year's stranger offerings from the underground.

• December 12, 2005 12 Dec'05

  Two Windows patches coming, IE fix uncertain

  It remains to be seen whether the software giant on Dec. 13 will address an outstanding Internet Explorer issue that is currently the target of a malicious Trojan.

• December 12, 2005 12 Dec'05

  Titan Rain shows need for better training

  SANS says the Chinese-based attacks demonstrate the growing sophistication of hackers, and the need for IT admins who can articulate the dangers to execs.

• December 07, 2005 07 Dec'05

  Security pros gain ground in the board room

  Executives are paying more attention to their IT security managers and taking more responsibility for online threats against their companies, according to a new study.