Security Best Practices: Archive: March 2007

Document Your Way out of PCI Compliance?

Re-architecting a network to meet the Payment Card Industry's tough security standards may fail a basic cost-benefit analysis. But expecting on a piece of paper to serve as a free pass could put a serious crimp in your firm's e-commerce ambitions.

Numbers Are Out on TJX Breach

In SEC filing, TJX Companies said a record-breaking 47.5 million records were 'stolen.'

Speedy Security Exploits with Metasploit 3.0

Latest open source exploit framework promises to be faster than ever at leveraging security flaws.

CSI:IBM

The systems giant spruces up its digital video surveillance system with analytics.

Russia's Latest Export To America: Malware

They make it, they sell it, but we host it. Finjan finds America is cutting its own throat by hosting most of the malware on the Web.

One Flaw And a First For Latest Firefox Update

This time the flaws are few, as a community of hundreds of thousands offered its bullet-proofing services.

Surprise, Microsoft Listed as Most Secure OS

UPDATED: Microsoft has the fewest holes and was fastest at plugging them, according to Symantec's security report.

Feinstein Charges Again on Data Breach Notification Bill

California senator says identity theft can't be stopped without strong congressional action.

What's a New Identity Cost? Less Than a CD.

Symantec probes the identity-trading underground and finds personal IDs selling for $14.

Liberty Specs Lock Up Digital Devices

Group creates specs to manage identities across digital devices and networks.

Ready to Weather out the Rising Storms?

The forecast? Spammy, with a chance of multiprotocol attacks. But there is promising new technology that provides some needed network weatherproofing.