Security Best Practices: Archive: June 2002

Users Urge Disclosure of Security Flaws

IT managers want to know about holes in their systems ASAP, a Hurwitz Group survey shows. But there is little consensus about how to convince vendors to tighten code.

MS Warns of Commerce Server Flaw

Microsoft warns Commerce Server software customers to apply patch.

Serious OpenSSH Flaw Found

Serious OpenSSH Flaw Detected

IT administrators using the free OpenSSH replacement for Telnet, Rlogin, Rsh, and Ftp protocols are urged to implement upgrades immediately.

IT Pros Wary Of Cyber Attack On U.S. Government

IT professionals are worried about a cyber attack against the U.S. government, with many considering such an attack 'likely' in the next year, according to survey results released this week by the Business Software Alliance.

Poll: U.S. Government Not Ready For Cyberattacks

Corporate IT managers in the U.S. have a bleak outlook on the government's cyber-security status, saying critical networks are 'not at all' adequate.

High Risk Apache Exploit Circulating

The source code to an exploit to Apache's chunk handling vulnerability is released, putting users of both 64-bit platforms and 32-bit platforms at high risk.

Apache Chunk Handling Bug Detected

Older Windows Versions Left Out Of Code Cleanup

Microsoft is working to quickly retire old, security-weak code in its Windows operating system, but users running current or old versions won't be able to take advantage of it until they buy into upcoming versions.

Security Policies - Not Yet As Common As You'd Think

Some studies show nearly half of surveyed IT executives have no formal security policy in place. Why are many in the industry running in place when it comes to security?

Self-Propagating Worm Roaming Internet

The latest variant on a worm designed to take advantage of a security vulnerability in Microsoft's Internet Explorer collects email addresses from the Windows Address Book and uses its own SMTP engine to send infected messages.

Information Sharing - Reactions Are Mixed to Government Overtures

While the Federal government pushes companies to share information on security practices and incidents, some in the private sector are unsure of the benefits and nervous about disclosure requirements.

Committing to IT Security

Big changes are happening in how US government agencies can purchase hardware and software. Learn how these changes are bound to have a huge effect on you, too!

Who To Call About Computer Crime

Law enforcement agencies of various stripes are taking significant steps to educate companies on how to deal with computer crime, and to prosecute perpetrators.

Tips For Successful Security Outsourcing

Outsourcing security functions is a viable option for enterprises, but the security service provider market is still maturing, so users must exercise caution and perform due diligence before selecting a provider.

Feds Seek Help Battling Cyber Security Threats

The U.S. government is trying to establish a dialogue with industry and enlist the help of IT professionals to protect against future cyber attacks.

Cross-Platform Chaos? New Virus Infects Windows, Linux

Although it hasn't been unleashed on the Internet, a new virus is able to infect both Windows 32 systems and Linux operating systems, making it the first complex virus with cross-platform capabilities.

Is Linux Ready for National Security?

Is Linux more or less secure than proprietary platforms? At least one U.S. think tank says there should be a national debate and rigorous testing before it is utilized in a national security capacity.

'Unbreakable Linux' Unleashed

Network Security: Covering the Basics

Everyone loves a good security horror story when it's someone else's security that's horrifying. Sticking to some basics can ease your fears about your own network while others swap war stories. First in a series.