Click here

Security Best Practices: Archive: January 2004 

FTC Launches International Anti-Spam Campaign

New effort focuses on convincing business and organizations worldwide to close open proxies and relays.

IE Patch Could Disrupt E-Commerce

A planned fix for URL spoofing browser flaws could return error messages on Web sites that use clear text to authenticate user names and passwords.

Microsoft to Strike IE URL Passwords

The browser will be modified to fix a known URL-spoofing flaw used by Web scammers.

  • New IE Download Spoof Found
  • MyDoom-B Continues Rampage, Takes on Microsoft

    The variant of the fast-spreading MyDoom worm is setting up an attack against Microsoft and, in a sneaky twist, interferes with the compromised machines' ability to update its anti-virus protection.

    AntiOnline Spotlight: MyDoom Testing Your Patience?

    MyDoom is quickly making the days of SoBig and Blaster seem like a walk in the park.

    'MyDoom' Variant Blocking Ad Servers

    Virus could result in under-delivery of online campaigns.

    Top 10 Most Critical Web Application Security Flaws

    The Open Web Application Security Project announces its second annual list of the top 10 most critical Web application security vulnerabilities.

    New IE Download Spoof Found

    Malicious Web sites could spoof the file extension of downloadable files.

    Prelude to a Secure Enterprise

    Intrusion detection systems have come a long way since their humble beginnings in the mid-1990s. A new player on open source IDS scene offers the potential to be an enterprise-class gatekeeper that could become a security administrator's new best friend.

    Costs of Blocking Legit E-Mail To Soar

    Erroneously blocked e-mail will cost marketers about $419 million in 2008.

    Bounty Set as MyDoom Builds Zombie Army

    As the virulent MyDoom worm races across the Internet, building an army of computer zombies potentially 500,000 strong, The SCO Group is setting a $250,000 bounty on the virus author's head.

    Gov't Rolls Out Cyber Alert System

    The federal government's cyber security division unveils a new unit to serve as a clearinghouse of data on malicious hacking and virus threats against computer systems.

    Gates Predicts Death of Spam

    Microsoft's founder challenged the only extant entity seemingly bigger than Microsoft: unsolicited e-mail.

    MyDoom Worm Sweeps Across Internet

    MyDoom, by many accounts, is swiftly becoming the fastest spreading virus ever, even surpassing Sobig-F, which carpet bombed the Internet late last summer.

    The Pros & Cons of Ethical Hacking

    The use of ethical hackers to test for security vulnerabilities is as old as the IT hills. But, unless there are clear goals outlining why and to what extent your organization is engaging them, the outcome could be useless information -- or worse.

    'Bagle' Virus Threat Upgraded

    New e-mail virus includes a backdoor component which could allow an attacker to execute malicious code on infected systems.

    Case Study: The Stocks Must Go On

    Despite blackouts, disasters, and human error, financial systems must keep running. NYFIX met this challenge by migrating to enterprise-class backup systems.

    Windows Patch Management, Introduction

    Advancements in patch management have made it easier to keep Windows environments secure. We kick off our Windows Patch Management series with some recent history about patch-related technologies and an overview of general patch management concepts.

    AntiOnline Security Spotlight: IDS with an Open Source Twist

    An introduction to intrustion detection systems and basics on protecting your network with Snort.

    California Police Use Wireless Fingerprinting on Patrol

    Police in Ontario, Calif., are using a wireless mobile device to match fingerprints from individuals encountered on patrol to a fingerprint database of 250,000 people.

    Last Year's Security Problems May Balloon in 2004

    If 2003 was the worst year in history for viruses and spam, hold onto your hat. This year, according to security experts, is setting up to see the malicious problems that appeared last year grow and fester into major security problems for 2004.

    ISPs Unite Against Spam

    A new group, led by Openwave, aims to develop practices and technology to slow the flow of network-choking spam.

    Protocol Flaw Puts VoIP Users at Risk

    Security vulnerability in a common data transmission protocol is labeled 'moderately critical.'

    Is the Tide Turning in Battle Against Hackers?

    How are we really doing in terms of computer security? Scanning the news, it looks like we are under constant attack. Our eSecurityPlanet reporter takes a look at changes in offenses, and defenses, and figures out where we stand.

    Moonv6 Project Testing Next-Gen IP Protocol for Security, Interoperability

    The U.S. Department of Defense has launched a project to test the security, performance and interoperability of the Ipv6 network hardware and software it is switching to by 2008.

    Understanding and Preventing DDoS Attacks

    Bad as they ever were ... and getting worse. Is your network safeguarded against the threat of a DDoS?

    Exploring Windows 2003 Security: IP Security

    Tutorial: Discover the improvements made to IPSec on Windows Server 2003 and get caught up with a general overview of the technology.

    Sobig's Birthday -- Tracking Most Damaging Virus Ever

    A year to the day after the virulent Sobig virus hit the wild, spawning a family of malicious attacks that would span the next nine months, anti-virus experts are on daily watch for the next vicious attack.

    Fake Microsoft Service Pack is Xombe Trojan

    A trojan resembling the Swen virus has started spreading via e-mail.

    From Anti-Spam to Anti-Spyware

    The nation's largest ISPs jockey for position with the latest round of home safety and security tools.

    AntiOnline Security Spotlight: The Evils of Default Security

    Are 'hardened by default' systems lulling computer users into a false sense of security?

    DOJ: We Want VoIP Wiretap Powers

    Justice says terrorists, spies and criminals will use emerging telephone technology to dodge electronic surveillance.

    Graceful UPS Shutdowns on Linux

    There's nothing pleasant about the data corruption or even hardware damage that can result from a power failure. Carla Schroder explores how UPS units and a couple of Linux UPS tools can help safeguard your mission-critical computers.

    Blaster Worm Still Active; Removal Tool Released

    Tardy home users with unpatched systems are the main culprits.

    The Deadly Duo: Spam and Viruses, December 2003

    High growth rates and record-breakers are usually celebrated, but not when it comes to spam and viruses. The spam volume rose from 42 percent of e-mail to 58 percent during 2003, and the year fell just short of being the worst on record for malware variants.

    AOL Offers Top 10 Spam List to Aid in Battle

    Offers for Viagra and get-out-of-debt schemes topped AOL's list of most prevalent spam in 2003 -- a year that saw spam increasingly hammer corporate servers and users' inboxes.

    Making Sense of Evolving WLAN Standards, Part 1: Security

    As the move to better security becomes bogged down in bureaucracy, its time to address the issue of whether WLAN security is still as bad as some perceive, or if the gap between wired and wireless security is starting to close.

    Going the Distance for Disaster Recovery

    Tom Clark reveals how the combination of a hard new reality and emerging IP storage technologies is forcing a fundamental reexamination of disaster recovery strategies.

    Report: Web Services, ID Management Key to Apps Security

    Federated identity management will become a core of the application and network platform, according to a new report.

    California Debuts New Online Privacy Laws

    New California laws mandate privacy policies and information sharing disclosure.

    Microsoft Responds to Latest IM Worm

    Following the latest public instant messaging security woe, Redmond cautions continued vigilance.

    MSN Messenger Worm Making Rounds

    Jitux.A worm uses the popular IM network to spread itself.

    Companies Alter Privacy Policies

    Many online companies have been tweaking their privacy policies.