News

News Archive

• November 08, 2005 08 Nov'05

  Sony takes second stab at DRM patch

  But a top executive's response to criticism over the company's use of rootkit technology has added fuel to the backlash.

• November 06, 2005 06 Nov'05

  Hacking Windows: MSRPC vulnerabilities

  In this excerpt from "Hacking Exposed, Fifth Edition: Network Security Secrets & Solutions," authors Stuart McClure, Joel Scambray and George Kurtz introduce MSRPC vulnerabilities and countermeasures.

• October 24, 2005 24 Oct'05

  Reporter's Notebook: NYC 'controls the software industry'

  At Information Security Decisions: a security "rock star" rages against the Microsoft machine; banging the drum for enterprise security; a sour note on zero-day exploits.

• October 20, 2005 20 Oct'05

  Author delves into novel attack methodologies

  Review of Silence on the Wire, a book about security attack methodologies such as passive fingerprinting.

• October 19, 2005 19 Oct'05

  Elements of a data protection strategy

  In this excerpt from Data Protection and Lifecycle Management, Tom Petrocelli addresses the importance of securing data for regulatory compliance and outlines the five components of a data protection strategy.

• October 17, 2005 17 Oct'05

  How avian flu could threaten IT security

  Experts say a potential bird flu pandemic could have a disastrous effect on IT infrastructures. But if companies plan well, those infrastructures could also help minimize chaos.

• October 12, 2005 12 Oct'05

  Quiz: What's your infosec IQ?

  We've collected our toughest questions to see how well you stand up to a challenge. Put your knowledge to the test and let us know how you do.

• October 12, 2005 12 Oct'05

  Symantec fixes 'critical' Veritas flaw

  Attackers could launch malicious code by exploiting a security hole in Veritas NetBackup servers and clients. But Symantec has released a fix.

• October 10, 2005 10 Oct'05

  Don't discount software distribution sites as attack vectors

  There's a potential downside to update sites, which offer virtually untapped riches to bad guys wanting to compromise your network. Just ask the author.

• October 07, 2005 07 Oct'05

  Service approach will bring benefits to applications development says Gartner

  Service-oriented development of applications (SODA) is the best way to approach globally distributed application development and maintenance, according to a new report by Gartner.

• October 03, 2005 03 Oct'05

  How to break into a computer that is right at your fingertips

  Stressing the importance of physical security, Joel Dubin explains how a hacker can bypass a BIOS password and break into a computer.

• September 29, 2005 29 Sep'05

  Find out how to bridge the communications gap

  Communications between the business and IT will be the subject of the next meeting of the Computer Weekly 500 Club (CW500).

• September 27, 2005 27 Sep'05

  Secure your extended enterprise

  How do you achieve the fine balance between ensuring that there is truly free access to sensitive information, without sacrificing security?

• September 26, 2005 26 Sep'05

  NHS trust creates wireless record

  University College London Hospitals (UCLH) NHS Trust has created the UK's largest single wireless network to support 7,000 users across eight hospitals.

• September 26, 2005 26 Sep'05

  IT spending at midsized companies: How much does size matter?

• September 26, 2005 26 Sep'05

  Secure the interests of your extended enterprise

  How do you achieve the fine balance between ensuring that there is truly free access to sensitive information and applications from both inside and outside the firewall, without sacrificing security?

• September 26, 2005 26 Sep'05

  Gartner stresses SOA and WS importance

  Leading analyst stresses importance of SOA and web services

• September 22, 2005 22 Sep'05

  Who best to avert data security disaster: government or business?

  People look to government to prevent catastrophe. But in the Information Age, some of those people, namely those working in IT shops, need to do their part to protect us.

• September 22, 2005 22 Sep'05

  Telework key to surviving security disaster, expert says

  Cybersecurity Industry Alliance Executive Director Paul Kurtz explains why telework may be crucial to surviving The Big One.

• September 21, 2005 21 Sep'05

  Leave no trace: Understanding attackers' motives

  This excerpt from Chapter 1 of "Rootkits: Subverting the Windows Kernel," explains the purpose of back doors and how hackers use them, as well as how stealth plays a major role in most successful attacks.

• September 21, 2005 21 Sep'05

  IT infrastructure risks key to averting major cyberattack

  Predictions of a cataclysmic disaster have been around for awhile. But one security officer cites reasons why the Internet can never be brought down.

• September 21, 2005 21 Sep'05

  Catastrophic cyberattack unlikely, experts say

  Predictions of a cataclysmic disaster have been around for awhile. But one security officer cites reasons why the Internet can never be brought down.

• September 20, 2005 20 Sep'05

  SAS drives product roundup

  Serial-attached SCSI (or SAS) drives offer significant storage capacity at a much lower cost, while maintaining reasonable performance. Find out who the vendors are in this market.

• September 20, 2005 20 Sep'05

  Security tools help reduce insider threat.

• September 20, 2005 20 Sep'05

  Insider threat seen as biggest data security issue

  Whether they oversee physical or online defenses, security officers say the disaster scenario that scares them most begins with an insider with malicious intentions.

• September 19, 2005 19 Sep'05

  Spy vs. Spy

  Excerpt from Chapter 6 of Spies Among Us: How to Stop the Spies, Terrorists, Hackers, and Criminals You Don't Even Know You Encounter Every Day.

• September 18, 2005 18 Sep'05

  Ensure that legal responsibilities are clear -- Especially when trouble strikes

  Excerpt from Chapter 15 of Information Nation Warrior: Information Management Compliance Boot Camp.

• September 18, 2005 18 Sep'05

  CCSP courses, exam changing next month

  Those seeking Cisco's security credential and specialization in VPN, firewall and IDS will soon follow different curricula that better reflect the vendor's current product lines.

• September 13, 2005 13 Sep'05

  Ethernet users given greater product interoperability

  A new network hardware testing standard will encourage enterprises, service providers and telcos to adopt cheaper and more flexible Ethernet technology for data, voice and video connectivity.

• September 13, 2005 13 Sep'05

  Ofcom liberates BT to offer bespoke pricing

  Ofcom has announced proposals to allow BT to offer large business customers bespoke call prices, which should lead to discounts for some companies.

• September 11, 2005 11 Sep'05

  VoIP turns up the heat on firewalls

  New research shows that many organizations are increasingly concerned about VoIP security and plan to augment their firewalls within the next year, changing the landscape of the firewall market.

• September 09, 2005 09 Sep'05

  Sponsor's Editorial - Making marketing more relevant

  Responsys, a premier global provider of on-demand email and lifecycle marketing solutions, has announced Interact 5, the latest version of the company’s email marketing automation software.

• September 06, 2005 06 Sep'05

  Firewalls can help or hurt, so plan carefully

• September 05, 2005 05 Sep'05

  Which data backup software is best? - Page 2

• September 05, 2005 05 Sep'05

  Which data backup software is best? - Page 4

• September 05, 2005 05 Sep'05

  Which data backup software is best?

• September 05, 2005 05 Sep'05

  Which data backup software is best? - Page 3

• September 05, 2005 05 Sep'05

  IE 7.0 may usher in wave of RSS exploits

  Experts warn that Web-feed enhancements in Microsoft's new Web browser may be just the thing crackers need to compromise networks and private data.

• September 05, 2005 05 Sep'05

  Extending perimeters

  The news that, up until 2006, 70% of successful wireless local area network (WLAN) attacks will be because of the misconfiguration of WLAN access points and client software is disquieting on a number of levels.

• September 01, 2005 01 Sep'05

  Symantec glitch could expose user names, passwords

  Symantec announced a fix for a flaw in AntiVirus Corporate Edition Friday afternoon. The security hole could be exploited to view user names and passwords.

• August 30, 2005 30 Aug'05

  Myfip's Titan Rain connection

  LURHQ researchers say the Myfip worm is a good example of the malcode Chinese hackers are using in the so-called Titan Rain attacks against U.S. government networks.

• August 30, 2005 30 Aug'05

  Antivirus can introduce dangerous network security holes into any OS

  AV software is one of the most basic security steps available. It's also yet another gateway for security breaches.

• August 30, 2005 30 Aug'05

  Passive fingerprinting: Applications and prevention

  In this excerpt from the book Silence on the Wire, author Michal Zalewski discusses both malicious and beneficial uses for passive fingerprinting, and how to prevent successful passive fingerprinting on your network.

• August 29, 2005 29 Aug'05

  Storage area network quiz

  It's all about the storage area network (SAN) -- man. The more you know, the easier it is. Take our SAN quiz and find out where you stand as a SAN guru.

• August 26, 2005 26 Aug'05

  High profile breach brings security to top of agenda

  There’s nothing like an apparent breach at a global company to concentrate the mind when it comes to information and data security.

• August 23, 2005 23 Aug'05

  HP sales boost as restructuring costs

  HP reported a 10% increase in sales for the third quarter, and said it would spend $900m (£530m) on redundancy costs in the final quarter.

• August 16, 2005 16 Aug'05

  Reduce risks of disaster recovery testing

  Untested business continuity plans can leave your firm in the lurch, but taking down live environments is risky and complicated.

• August 10, 2005 10 Aug'05

  Strategic Storage: Storage security -- Change old habits and stop data theft

• August 06, 2005 06 Aug'05

  Trusted Computing Group releases server specs

  The Trusted Computing Group released a new set of trusted server specifications it hopes will help vendors protect their platforms against security breaches.

• August 02, 2005 02 Aug'05

  Raising risk prospects with a new SQL injection threat

  "Inference attacks" could deliver up your so-called secure database to an attacker.