IT strategy

Answers: Compliance All-in-One Guide quiz

The key compliance questions unveiled Continue Reading

Security Bytes: Investigators slam VA over data breach

Meanwhile: Cisco patches a router application flaw, a Washington law firm sues IBM over a server attack; and spammers sucker Web surfers with fake Vladimir Putin death reports. Continue Reading

By

• SearchSecurity.com Staff

Trojan targets Microsoft PowerPoint flaw

Update: The exploit might be tied to an older flaw in Excel. Attackers who exploit the serious flaw could launch arbitrary code. Microsoft says it is investigating. Continue Reading

By

• Bill Brenner

Critical flaws found in Excel, Flash Player

FrSIRT says holes in Microsoft's spreadsheet program and Adobe's media player could allow attackers to take control of affected machines and initiate malicious commands. Continue Reading

By

• Bill Brenner

Looking ahead to life without passwords

Security pros know that passwords are nothing but trouble. For them, single-sign on, two-factor authentication and federated ID represent the path to stronger authentication. Continue Reading

By

• Bill Brenner

Skills fears as number of IT students plummets

 Continue Reading

Downtime: Now here's an idea for all of you flag flyers...

 Continue Reading

Security Bytes: Data breach affects 100,000 military personnel

Meanwhile: Phishers use a phone trick to dupe PayPal users; the PCI security standard will get more teeth and a survey illustrates an increase in security breaches Continue Reading

By

• SearchSecurity.com Staff

Application layer logging quiz answers

The key questions revealed Continue Reading

Strong authentication for businesses large and small

Product review: Customer service could return calls more quickly when there's a problem. But overall, RSA SecurID Appliance 2.0 delivers robust, scalable protection. Continue Reading

By

• Phoram Mehta, Contributing Writer

Cost of Libra magistrates system trebles

The Department of Constitutional Affairs has admitted that the cost of the Libra case management system for magistrates courts will rise to £487m – more than three times the £146m original cost set in 1998. Continue Reading

By

• Lindsay Clark

Dundee to teach ethical hacking BSc

A degree in ethical hacking will be on offer at a Scottish university from the new academic year. Continue Reading

By

• Tash Shifrin

Microsoft offers SMBs all-in-one security and protection

Small- to medium-sized businesses (SMBs) are among the key targets of Microsoft's latest solution, Windows Live OneCare. Continue Reading

Fifa ready for cyber attack on World Cup

 Continue Reading

FullArmor lives up to its name

PolicyPortal provides an Internet interface to easily configure, monitor and enforce near real-time Active Directory-based policy compliance through client agents. Continue Reading

By

• James Foster, CSC

BlueCat appliance offers rock-solid security

Hot Pick: The Adonis 1000 appliance bundles DNS and DHCP into an enterprise-class appliance for the centralized secure operation of network addressing. Continue Reading

By

• Sandra Kay Miller, Contributing Writer

Shifting services back indoors

Almost a quarter of blue chip firms in the UK are so disillusioned with outsourcing they are hauling their services back in-house. Continue Reading

SMB finds the perfect host

When All3Media, a medium-sized TV programming producer, inherited an inflexible communications system, it turned to a more appealing, hosted alternative. Continue Reading

By

• Kate Large

Questions that need to be answered on NHS IT plan

Four years ago the government announced to a grateful NHS a national IT programme that would become the world's largest civil computer scheme. Continue Reading

By

• Tony Collins

Outsourced way to hire contract staff

IT services company FDM has launched a "straight through" recruitment service to help IT departments in the finance sector recruit contract staff. Continue Reading

By

• Tash Shifrin

Lenovo goes for gold with SMBs

When Shelley Rudman unexpectedly won a silver medal for her valiant efforts in the skeleton at this year’s Winter Olympics, the world knew she’d gained her unprecedented achievement for the UK in a matter of seconds. In fact, the world expected to know the results in that space of time. Continue Reading

Networks news in brief

Short takes from this week's network news Continue Reading

Industry chiefs to declare war on for-profit cyber criminals

IT industry leaders reaffirm the importance of security to a digital economy beset by money-driven cyber criminals. Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Not just a big switch

Fibre Channel directors don't just provide lots of ports, they also offer ways to connect disparate SANs, isolate data and devices within a fabric, and configure throughput for specific applications. We look at how the big three directors match up. Continue Reading

By

• Jerome Wendt

Be careful you don't get more than you pay for with VoIP

Implementing VoIP is attractive for all companies in particular SMBs. However, there are issues to address that may cost you more than what you save Continue Reading

By

• Joe O’Halloran, Computer Weekly

Voicing concerns on Skype

Skype has blazed a trail in the Voice over IP arena; its popularity hasn’t gone unnoticed by the hacker community however Continue Reading

By

• Joe O’Halloran, Computer Weekly

Sony struggles to regain trust

The company is trying to mend a reputation bruised over its antipiracy practices. One advocate for online civil liberties explains why redemption is a long way off. Continue Reading

By

• Bill Brenner

Guidance turns investigative tools on itself

The forensics software firm says it was compromised by hackers in November. It's just one in a growing list of companies admitting to recent attacks or lax security. Continue Reading

By

• Anne Saita, TechTarget

Flaws reported in Trend Micro ServerProtect

Storage and security managers should be wary of vulnerabilities in the AV product that could enable a denial-of-service and malicious code execution. Workarounds are available. Continue Reading

By

• Bill Brenner

Hospital ditches EMC Centera for long-term archiving

UHCS in Augusta, Ga., is replacing its Centera archiving system from EMC with IBM's GMAS product after performance, reliability and cost issues forced it to seek alternatives. Continue Reading

By

• Jo Maitland, TechTarget

Roundup: 2005's 'curious malicious code'

These viruses, worms and Trojans sometimes escaped our notice. But it didn't get past one antivirus vendor, who rounded up some of the year's stranger offerings from the underground. Continue Reading

By

• Anne Saita, TechTarget

Two Windows patches coming, IE fix uncertain

It remains to be seen whether the software giant on Dec. 13 will address an outstanding Internet Explorer issue that is currently the target of a malicious Trojan. Continue Reading

By

• Eric Parizo, Senior Analyst

Titan Rain shows need for better training

SANS says the Chinese-based attacks demonstrate the growing sophistication of hackers, and the need for IT admins who can articulate the dangers to execs. Continue Reading

By

• Bill Brenner

Security pros gain ground in the board room

Executives are paying more attention to their IT security managers and taking more responsibility for online threats against their companies, according to a new study. Continue Reading

By

• Bill Brenner

Cybersecurity policy takes cooperation, trust, experts say

At the Infosecurity confab, experts explain why sharing information -- even when it's embarrassing -- is vital to securing not only corporations, but also the national infrastructure. Continue Reading

By

• Bill Brenner

Out-of-cycle IE patch may be imminent

Microsoft may release a critical Internet Explorer fix before the next Patch Tuesday, amid reports that malicious code is targeting a memory corruption flaw. Continue Reading

By

• Bill Brenner

By the numbers: The new SOX breakdown

SOX spending for 2006 is expected to be on par with last year but it's not quite dÉjÀ vu all over again. More dough will go to technology. Continue Reading

By

• Linda Tucci, Industry Editor -- CIO/IT Strategy

Who owns and administers the internet's addresses?

Given that IPv4 addresses are a finite resource, we can expect concerns over their distribution to increase in the coming years. Continue Reading

By

• Danny Bradbury

Step 6: Configuring wireless clients

With wireless networks proliferating it is a good idea to understand what it takes to build a VPN for a wireless gateway. Contributor and Microsoft MVP Brien Posey details the necessary steps in this step-by-step guide. Continue Reading

Wireless security: Public Wi-Fi could open security holes

A Michigan county is working to give everyone within its borders wireless Internet access. But when it comes to security, users are on their own. Continue Reading

By

• Bill Brenner

Wireless security crucial to railway safety

A transportation firm uses wireless technology to keep the trains running on time. But securing mobile devices isn't easy when they're spread across the globe. Continue Reading

By

• Bill Brenner

Wireless security: Companies deal with software updates

A health care provider found it could use wireless technology to dramatically boost patient care. But first it had to figure out how to deploy security updates over a wireless network. Continue Reading

By

• Bill Brenner

Hackers installing keyloggers at a record rate

iDefense researchers have found that keylogger infections are up 65% over the year before, putting the private data of tens of millions of users at risk. Continue Reading

By

• Bill Brenner

Sony rootkit uninstaller causes bigger threat

Princeton researchers say a security hole that appears when users try to remove Sony's copy protection software presents an even greater risk than the original rootkit. Continue Reading

By

• Bill Brenner

Demand for development skills soars as firms seek business edge

Computer Weekly salary survey shows IT departments eager to secure skills for the future. Continue Reading

Security Bytes: FTC cracks down on alleged spyware distributors

Patches fix serious RealPlayer flaws, IM malcode launches phishing attacks; Microsoft warns of Macromedia Flash flaw; Liberty Alliance pushes stronger authentication; FEMA data security is in question; patches fix Veritas flaws and TransUnion suffers a security breach. Continue Reading

By

• SearchSecurity.com Staff

Trojans target Sony DRM and Windows

Security researchers track two new Trojan horses. One exploits the Sony DRM program. The other could possibly take aim at the Windows flaw Microsoft patched this week. Continue Reading

By

• Bill Brenner

Sony takes second stab at DRM patch

But a top executive's response to criticism over the company's use of rootkit technology has added fuel to the backlash. Continue Reading

By

• Bill Brenner

Reporter's Notebook: NYC 'controls the software industry'

At Information Security Decisions: a security "rock star" rages against the Microsoft machine; banging the drum for enterprise security; a sour note on zero-day exploits. Continue Reading

By

• Michael S. Mimoso, Senior Editor and Anne Saita, News Director

Elements of a data protection strategy

In this excerpt from Data Protection and Lifecycle Management, Tom Petrocelli addresses the importance of securing data for regulatory compliance and outlines the five components of a data protection strategy. Continue Reading

How avian flu could threaten IT security

Experts say a potential bird flu pandemic could have a disastrous effect on IT infrastructures. But if companies plan well, those infrastructures could also help minimize chaos. Continue Reading

By

• Bill Brenner

Quiz: What's your infosec IQ?

We've collected our toughest questions to see how well you stand up to a challenge. Put your knowledge to the test and let us know how you do. Continue Reading

Secure your extended enterprise

How do you achieve the fine balance between ensuring that there is truly free access to sensitive information, without sacrificing security? Continue Reading

IT spending at midsized companies: How much does size matter?

 Continue Reading

By

• Tom Pisello, Alinean

Secure the interests of your extended enterprise

How do you achieve the fine balance between ensuring that there is truly free access to sensitive information and applications from both inside and outside the firewall, without sacrificing security? Continue Reading

Who best to avert data security disaster: government or business?

People look to government to prevent catastrophe. But in the Information Age, some of those people, namely those working in IT shops, need to do their part to protect us. Continue Reading

By

• Bill Brenner

Telework key to surviving security disaster, expert says

Cybersecurity Industry Alliance Executive Director Paul Kurtz explains why telework may be crucial to surviving The Big One. Continue Reading

By

• Bill Brenner

Leave no trace: Understanding attackers' motives

This excerpt from Chapter 1 of "Rootkits: Subverting the Windows Kernel," explains the purpose of back doors and how hackers use them, as well as how stealth plays a major role in most successful attacks. Continue Reading

Catastrophic cyberattack unlikely, experts say

Predictions of a cataclysmic disaster have been around for awhile. But one security officer cites reasons why the Internet can never be brought down. Continue Reading

By

• Bill Brenner

SAS drives product roundup

Serial-attached SCSI (or SAS) drives offer significant storage capacity at a much lower cost, while maintaining reasonable performance. Find out who the vendors are in this market. Continue Reading

By

• Stephen J. Bigelow, Senior Technology Editor

Security tools help reduce insider threat.

 Continue Reading

By

• Bill Brenner

Insider threat seen as biggest data security issue

Whether they oversee physical or online defenses, security officers say the disaster scenario that scares them most begins with an insider with malicious intentions. Continue Reading

By

• Bill Brenner

Ensure that legal responsibilities are clear -- Especially when trouble strikes

Excerpt from Chapter 15 of Information Nation Warrior: Information Management Compliance Boot Camp. Continue Reading

VoIP turns up the heat on firewalls

New research shows that many organizations are increasingly concerned about VoIP security and plan to augment their firewalls within the next year, changing the landscape of the firewall market. Continue Reading

By

• Eric Parizo, Senior Analyst

Firewalls can help or hurt, so plan carefully

 Continue Reading

By

• Laura E. Hunter, Contributor

Which data backup software is best? - Page 2

 Continue Reading

By

• Rich Castagna

Which data backup software is best? - Page 4

 Continue Reading

By

• Rich Castagna

Which data backup software is best? - Page 3

 Continue Reading

By

• Rich Castagna

IE 7.0 may usher in wave of RSS exploits

Experts warn that Web-feed enhancements in Microsoft's new Web browser may be just the thing crackers need to compromise networks and private data. Continue Reading

By

• Mark Baard

Extending perimeters

The news that, up until 2006, 70% of successful wireless local area network (WLAN) attacks will be because of the misconfiguration of WLAN access points and client software is disquieting on a number of levels. Continue Reading

Myfip's Titan Rain connection

LURHQ researchers say the Myfip worm is a good example of the malcode Chinese hackers are using in the so-called Titan Rain attacks against U.S. government networks. Continue Reading

By

• Bill Brenner

Antivirus can introduce dangerous network security holes into any OS

AV software is one of the most basic security steps available. It's also yet another gateway for security breaches. Continue Reading

By

• Shawna McAlearney, News Editor

Passive fingerprinting: Applications and prevention

In this excerpt from the book Silence on the Wire, author Michal Zalewski discusses both malicious and beneficial uses for passive fingerprinting, and how to prevent successful passive fingerprinting on your network. Continue Reading

High profile breach brings security to top of agenda

There’s nothing like an apparent breach at a global company to concentrate the mind when it comes to information and data security. Continue Reading

By

• Joe O’Halloran, Computer Weekly

HP sales boost as restructuring costs

HP reported a 10% increase in sales for the third quarter, and said it would spend $900m (£530m) on redundancy costs in the final quarter. Continue Reading

By

• Antony Savvas

Reduce risks of disaster recovery testing

Untested business continuity plans can leave your firm in the lurch, but taking down live environments is risky and complicated. Continue Reading

By

• Matt Stansberry, TechTarget

Raising risk prospects with a new SQL injection threat

"Inference attacks" could deliver up your so-called secure database to an attacker. Continue Reading

By

• Shawna McAlearney, News Editor

Attack: USB could be the death of me

Seemingly innocent Universal Serial Bus driver bugs may allow device attacks that many won't see coming, according to Black Hat presenters. Continue Reading

By

• Victor R. Garza, Contributor

Lost at sea: securing the channel

As attacks seem to proliferate almost unabated, it’s worrying to think that of the three interested parties in the security technology market — the technology makers, the technology sellers and the technology users—not everyone shares a common view on the importance of the technology. Continue Reading

Sarbox compliance costing companies

Companies’ required investments to attain compliance with the Sarbanes-Oxley data security legislation has come at the expense of dealing with other security threats, according to the Information Security Forum (ISF). Continue Reading

Combining technology and social engineering: Hacking behind bars

In this excerpt from Chapter 11 of "The Art of Deception: Controlling the Human Element of Security," authors Kevin Mitnick and William L. Simon begin a story that shows how social engineering can be used with technology. Continue Reading

Cisco, Black Hat litigation comes to a close

The vendor and partner ISS settle their dispute over a presentation that resulted in criminal charges and cease and desist orders. Continue Reading

By

• Shawna McAlearney, News Writer

VeriSign raises stakes in battle for threat intelligence

Not to be outdone by 3Com's "Zero-Day Initiative," VeriSign says it'll shell out more cash for hackers who provide vulnerability intelligence. Continue Reading

By

• Bill Brenner

Experts weigh in on spyware's defining moment

We asked IT professionals to review the spyware definitions proposed by a coalition of tech firms and security organizations. They found plenty of room for improvement. Continue Reading

By

• Bill Brenner

VoIP encryption to have 'Pretty Good Privacy

 Continue Reading

By

• Shawna McAlearney, News Editor

HP attempts to reassures anxious customers on impact of job losses

 Continue Reading

By

• Cliff Saran, Managing Editor

Riding the wave of change

CIOs can thrive as pace of change quickens, argues Des Lee Continue Reading

By

• Des Lee

Business continuity keeps companies running

As we speak, it appears that disruption to IT services by the London bombings was minimised due to effective and realistic business continuity strategies. Sally Flood sees how you construct them. Continue Reading

By

• Sally Flood

HP slashes jobs and shuts enterprise divison

HP has announced 14,500 redundancies and will close down its separate enterprise sales division as part of its attempt to streamline operations and cut costs. Continue Reading

By

• Antony Savvas

Users look for value boost from Microsoft licence rejig

Software Assurance needs to offer better support, say IT directors Continue Reading

By

• Cliff Saran, Managing Editor

Sarbox draining corporate security budgets

Corporate investment to comply with the Sarbanes-Oxley data security legislation has come at the expense of dealing with other security threats, according to the Information Security Forum (ISF). Continue Reading

Can alcohol mix with your key personnel?

I persuaded our MD to hire a dedicated IT security expert. I am pleased with his work, but on several occasions he has smelled strongly of drink. How do I nip this in the bud? Continue Reading

Tony Asaro: Blogs and more

Read what Tony Asaro is talking about in this month's blog, and listen to him speak in a number of webcasts. Continue Reading

Sarbox challenge drains security budgets

International corporate spending on compliance with the Sarbanes-Oxley data security legislation has come at the expense of dealing with other security threats, according to the Information Security Forum. Continue Reading

By

• Antony Savvas

Phishing for the missing piece of the CardSystems puzzle

A banking insider examines the ties between customized phishing attacks this spring and the CardSystems breach announced soon after. Don't miss his revelations on how they're linked and what the phishers really needed. Continue Reading

This is not your father's hacker

While Sasser author Sven Jaschan awaits the outcome of his trial this week in Germany, a new cybercrime report explains why the teenager is becoming an anachronism. Continue Reading

By

• Anne Saita, TechTarget

PING with Karen Worstell

The Microsoft CISO discusses how she keeps Redmond and its products secure. Continue Reading

By

• By Amber Plante

Sasser author issues courtroom confession

Sven Jaschan's mea culpa was expected after he earlier admitted to creating the last major malware outbreak more than a year ago. Continue Reading

By

• Anne Saita, TechTarget

Continuing education options for CISSPs: Top 10 ways to earn CPEs

Who says you can't have fun while earning CPE credits? Check out the top 10 ways to meet CISSP® and SSCP continuing professional education requirements. Continue Reading

How to survive a data breach

When Colin Crook offers advice on how companies should deal a security breach, he speaks from experience. He was CTO of Citicorp [now Citigroup, parent company of Citibank] 10 years ago when a hacker penetrated the company's network.

Crook is now senior advisor to the Wharton Fellows at the University of Pennsylvania, a member of the New York Academy of Sciences; fellow of the Royal Academy of Engineering and co-author of "The Power of Impossible Thinking." He shared his experiences with customers of Framingham, Mass.-based ID management firm Courion Corp. during the company's Converge05 conference last week. Business executives, he argues, must do better at listening to others and understand security is about humans, not machinery.

In the first of a two-part question-and-answer feature, Crook explains how companies can survive the fallout from a data heist.

 Continue Reading

By

• Bill Brenner