Security Best Practices: Archive: September 2002

Possible PPTP Flaw Could Leave VPNs Open

A German security firm warns of a possible flaw in the PPTP service that secures VPNs in both Windows 2000 and Windows XP.

Industry Group to Pen Bug-Reporting Standards

Critical Flaws Affront Microsoft's FrontPage

The software giant warns that a vulnerability in its FrontPage Extension Server could allow an attacker to crash your servers or run any code.

Bush Seeks IT Security Advice

Representatives of Akamai, Symantec and Intel, among others, will serve on a new White House panel aimed at safeguarding government and commercial IT systems.

New Industry Group to Pen Bug-Reporting Standards

An unlikely alliance of vendors and security consultancies aims to release draft guidelines early next year for handling newly discovered security flaws

FTC Targets International Net Fraud

The Commission launches initiatives aimed at combating cross-border online consumer scams and fraud against military personnel.

The Great Credit Card Bazaar

Microsoft Virtual Machine Has Real Problem

Having Java applets running on Windows could allow an attacker to hijack your system.

Microsoft Critics Lambaste XP-SP1

Active Internet Content Dangerous - Report

Unauthorized instant messages, among other incursions, can be a sign of an Internet-delivered threat that's now greater than software viruses, according to Aberdeen Group.

Worm Gives a Slap in the Face

Slapper worm takes off, infecting systems in over 100 countries over the weekend.

Mozilla Flaw Springs Privacy Leak

Researchers have found a flaw in Mozilla-based browsers that exposes the URL of the page a user is viewing to the Web server of the site visited last.

New Worm Slaps Linux-based Apache Web Servers

A fast-spreading worm that targets Linux-based Apache Web servers had security vendors and the CERT Coordination Center issuing dire warnings over the weekend that continued on Monday.

Has AES Been Cracked?

Two researchers may have figured out an efficient way to crack the Advanced Encryption Standard but security experts say 'there's no cause for alarm yet.'

SparkLIST Questions Highlight Web Security Woes

As the company and its customers investigate how spammers may have gotten e-mail addresses, mailers continue wrangling with larger issues.

Security Firm: Outlook Express Can Be Used To Bypass Email Filters

Beyond Security's SecurITeam says it has discovered a way to use Microsoft's Outlook Express to email malicious code that may not be detected by common filtering techniques, including virus scanners, content filters and firewalls.

Will Users of Word 97 'Bug' Out?

Microsoft is looking to fix a long-standing 'bugging' vulnerability in Word, but if you're running Word 97, you may be out of luck.

Disaster Recovery: A Preparation Checklist

For too many IT managers, the security fervor that erupted last fall has dissipated. But disaster recovery experts say a company's future literally can hinge on how well-prepared it is for a serious outage. Here are some recommendations for companies preparing for the worst.

Guarding Against WLAN Security Threats

Because they use radio waves, WLANs are vulnerable to security threats. Learn how to make your WLAN stand up against hackers and casual snoopers.

Online Privacy at Odds with Security

FEATURE: While privacy groups make a First Amendment stand, IT companies are the ones walking a fine line between personal freedom and keeping a competitive edge.

Special Report: 9/11 - One Year Later

Disaster Tolerant Unix: An Ounce of Prevention

FEATURE: After Sept. 11, businesses confront the need to protect their data in the face of disasters.

Special Report: 9/11 - One Year Later

9/11 Worm Can't Squirm

Concerns about September 11th-themed worm fade on word that 'Chet' is a dud.

ActiveX Flaw Bugs Apple's QuickTime

The vulnerability exists in the way the ActiveX component handles the 'pluginspage' field when parsed from a malicious remote or local HTML page.

IT Lessons Left Unlearned from September 11

A year after the 9/11 terrorist attacks, what have IT managers learned from the disastrous strike that crippled many businesses and tripped up the American economy? Not enough, according to industry security experts.

I've Been Framed

New vulnerability discovered in IE could allow attackers to compromise your computer through a Web site's frames.

'Pretty Good' Isn't Good Enough

A new vulnerability in the omnipresent PGP encryption software could allow hackers to take over your computer.

IM Security Risks Spark Workplace Monitoring Debate

With more and more U.S. workers using instant messaging in the office, security experts are debating whether IT managers should be monitoring the instant communications.

The Mainframe's Role in Disaster Recovery Planning

When it comes to disaster recovery, no piece of the IT infrastructure gets more attention than the 'big iron'. This being true, it makes sense to make your mainframe the center of your DR strategy.

Microsoft Airs Critical Identity Spoofing Flaws

UPDATE: Once again, Microsoft is forced to whip up a slew of patches; this time, flaws that enable perpetrators to spoof Web sites are deemed 'critical.'

Malicious Spam On The Rise

Email spam is rapidly becoming the 'Tool of Choice' for Internet fraud and identity theft.

MSN Enlists McAfee in War Against Spam

UPDATE: MSN Hotmail, Microsoft's popular e-mail service, finally gets help by licensing SpamKiller.

Groups Rally to Can Spam

Calling the medium 'inherently deceptive,' consumer advocates submit new measures to FTC to attack unsolicited commercial e-mail.

Sophos: Viruses Take a Holiday

The Lynnfield, Mass., security specialist reports that only two of August's 10 most frequent viruses -- Higuy and Datom -- were new.

Bush Administration to Call for Privacy Czar

The Bush administration is expected to call for the creation of a federal chief privacy officer to help minimize criticism of increased electronic surveillance capabilities attached to its National Strategy for Securing Cyberspace.