Click here

Security Best Practices: Archive: November 2002 

Open Source: The New Security Problem Child?

Move over Microsoft, there's a new security punching bag in town: open source software.

Healthy Revenue Picture for VPN/Firewall, IDS Markets

While uncertainty reigns in terms of overall enterprise IT spending, a pair of recent studies from Infonetics Research suggests that the VPN/firewall and intrusion detection markets are experiencing at least modest growth.

CERT Warns of Solaris Font Flaw

Sun confirms the security flaw in its X Window Font System offered a workaround until a comprehensive patch can be issued.

A Holey Reality

RealNetworks issues a patch for potentially serious security flaws in its flagship RealOne media player.

Identity Theft Case Called Largest Ever

The feds round up three people charged with stealing credit information and identities of more than 30,000 consumers.

Volunteers Wanted For IT National Guard

Looking to volunteer on behalf of your country's safety? The NET Guard bill is an effort to corral cutting edge tech assistance for the nation's emergency workers.

Holiday Fraud May Cost Nearly $300 Million

The stakes get bigger and both the good guys and the bad guys are escalating their efforts in the ongoing online battle between merchants and thieves.

Homeland Defense IT Spending Expected to Spike

Studies point to increased federal IT spending in 2003 as a result of the new department.

  • DARPA Looks to Quantum Future
  • Sept. 11 Lessons: Better Prepare For Direct Attacks

    While the Internet proved itself resilient and an important communications resource on Sept. 11, a new report warns that ISPs and companies need to further prepare themselves to handle future emergencies.

    Microsoft Fixes 'Critical' Flaw in MDAC

    In rare strong language, Microsoft warns that the MDAC buffer overrun flaw 'is very serious' and urged the immediate application of patches.

    Fed Security Systems Receive Failing Grades

    Only three government agencies receive passing marks on annual report card; Justice, State and Defense Departments all flunk.

    Microsoft to Limit 'Critical' Security Warnings

    The software giant will change the way vulnerability warnings are issued, particularly for non-technical end-users and cut down on the use of 'critical' bulletins.

    ISPs Downplay Privacy Concerns of Court Ruling

    A secret federal court has granted law enforcement expanded surveillance authority but a leading Internet trade group says don't sound the alarms just yet.

    Senate Passes Homeland Security Bill

    Bush expected to sign legislation in a matter of days creating agency earmarking more than $2B for IT spending.

    Deadline Nears for White House IT Security Plan

    After two months of town hall meetings, White House's draft National Strategy for Securing Cyber Security will soon hit President Bush's desk.

    Enterprise IM Spurs Privacy Concerns

    The growing interest in enterprise-level instant messaging systems means good things for vendors -- but also has serious ramifications for workplace privacy.

    Apache Flaws Being Exploited

    Several security holes in the Apache source are being actively exploited on the Internet; IT managers should upgrade to version 1.3.27 or 2.0.43 or higher.

    FTC Charges Three Spammers, Settles With Four Others

    Agency claims one defendant offered spam filters that actually increased junk mail.

  • Consumer Groups Rally to Can Spam
  • House Passes Homeland Security Bill

    UPDATE: Compromise version of Homeland Security legislation is expected to pass Senate within week; IT spending by new department predicted to reach more than $2 billion.

  • Microsoft Appoints Director of Its Homeland Security Team
  • Feds Want to Extradite British Hacker

    U.S. authorities are seeking trials in both Virginia and New Jersey for unemployed computer administrator who allegedly broke into nearly 100 military networks.

  • U.S. Indicts British Hacker
  • The Guts of WLAN Security Policy

    Because of the use of radio waves, a wireless LAN will not be secure unless you take special precautions. Follow these recommendations when defining the wireless LAN security policy for your company.

    Protecting Proprietary Property from Espionage

    Espionage may seem a plot line seen only in James Bond movies, but U.S. companies are learning, or need to learn, that foreign governments and competitors are after critical information.

    U.S. Indicts British Hacker

    Computer administrator accused of $1M in damages after hacking into military and NASA networks.

    Lame Duck Congress Returns to Work

    Homeland security, cyber security research bill and budget legislation holds promise of billions of dollars for IT industry. But will it get done?

    House OKs $903M for Cyber Security Research

    Legislation creating grants, scholarships and research centers for improved online security moves to White House for Bush signature.

  • Lame Duck Congress Returns to Work

  • Beware of Electronic Greeting Scam

    Beware of the next electronic greeting card you receive. It may not be quite so friendly. An e-card scam is circulating, conning people into clicking onto a phony Web site where they can infect their system with a virus or have their address book stolen.

    Serious BIND Server Flaws Detected

    Exploitation of the vulnerabilities could lead to compromise and DoS attacks against vulnerable DNS servers.

    OASIS Ratifies SAML 1.0

    The standards organization pushes forward a key security specification for Web services as a standard.

    Six Mozilla Security Bugs Posted

    Pre-version 1.0 rollouts of the alternative browser project contain about a half-dozen vulnerabilities, some potentially dangerous.

    Reinvigorated GOP Eyes National Security Network

    White House's CIO of Office of Homeland Security calls for national network of federal, state and local governments within 2-3 years.

    As the Bridex Worm Turns

    The Bridex e-mail worm targets a known vulnerability in Microsoft Windows: it's capable of spreading a variant of the active Funlove virus.

    Security to Drive $8B in State and Local IT Spending

    New report says federal government will largely finance public safety and criminal justice initiatives.

    Is The New Outlook a Threat to E-Mail Marketers?

    The upcoming version of Microsoft's popular e-mail program boasts anti-spam features that could give legitimate e-mail marketers headaches.

    SBC Creates Anti-Hacker Lab

    With online security fears at an all-time high, the ISP launches the Internet Assurance and Security Center (IASC) to detect and neutralize hacker attacks.