Hackers: Archive: February 2004

Worms Continue to Wriggle, Wreak Havoc

'Zero-day' exploits and new styles of viruses send security firms scrambling to patch the latest holes in the network.

The Net Has An 'Insecurity' Complex

RSA's second annual assessment of online security leaves little doubt that corporations have a long way to go.

Microsoft Proposes Caller ID for E-Mail

Bill Gates says the 'scourge' of the inbox can be thwarted with a combination of software, hardware and industry participation.

Storage Security: Getting Beyond M&M SANs

Like the candy-coated treats, SANs are an irresistible lure to criminals that can't wait to get to the soft, sweet center.

A Bio Approach to Network Security

HP uses the human immune system as the model for a new security offering.

Will Lax Security Trip IP Telephony?

A new research report from META Group suggests that it could.

Gates Makes a Show of Security

UPDATE: At the RSA security conference, Microsoft's chief software architect stands and delivers an update on the company's software security efforts.

Security Forces to Show Unified Front

Homeland Security officials will join experts from Microsoft and other IT firms in San Francisco next week to address the onslaught of malicious attacks.

It's Time to Talk Mobile Phone Security

As bugs and digital attacks move into the realm of mobile phones, at least two security gurus say it's time for the industry to step up to the security plate and start swinging. In this Op/Ed piece, Ken van Wyk and Mark Graff do just that.

AntiOnline Spotlight: Footprinting with Host

Learn how the venerable host command can reveal more about your network than you think, not to mention what hackers probably already know.

Linux Kernel Flaws Uncovered

Malicious attackers could gain full super-user privileges, according to a security research firm.

Flurry of Worms Hits Companies Already on Guard

A handful of smaller worms are loose in the wild, causing a flurry of problems as security and IT managers gear up for what could be a major virus attack.

Microsoft's Do Not Open Letter

The world's largest software company moves to defend its copyright on leaked Windows code.

AOL, EarthLink File Lawsuits Against Spammers

With the federal Can Spam Act so far proving ineffective, ISPs are pursuing aggressive civil actions.

Deflecting Assaults on Privacy

Source code exposed, customer records set free... Browser hijackers and spyware are responsible for these headlines and more. Discover the tools that help keep users, and the networks they reside on, from leaking confidential data.

Blaster Type Virus Attack Called 'Imminent'

Exploit code for 'critical' Windows ASN.1 flaw could lead to major network disruption.

Microsoft Patches 'Critical' ASN.1 Flaw

MyDoom Ends but Open Ports Attracting Mutants

Microsoft releases virus removal tool but unpatched drone machines are still a major threat.

Microsoft Patches 'Critical' ASN.1 Vulnerability

Buffer overflows could give malicious hackers complete control of unpatched machines.

Stripped-Down MyDoom Hits Microsoft.... Again

A new variant of the virulent MyDoom worm has been found in the wild, launching what one analyst fears may be a vicious attack against Microsoft Corp.'s Web site.

Could National Security Concerns Slow VoIP?

FEATURE The FBI's concern about wiretap capability of Internet telephony is complicating the FCC's desire to limit regulation of the technology.

'Critical' RealPlayer Holes Patched

RealNetworks patches its flagship media player to fix cross site scripting and system access security vulnerabilities.

AntiOnline Spotlight: Held Hostage

What if your Web business were held at virtual gunpoint? AO members discuss coping with demands of payment under the threat of getting DDoSed into oblivion.

MyDoom Leads Damaging January Attacks

Racking up approximately $38.5 million in economic damages around the world, the virulent MyDoom worm easily took the top spot in January's list of worst viruses.

The Pros & Cons of Ethical Hacking

The use of ethical hackers to test for security vulnerabilities is as old as the IT hills. But, unless there are clear goals outlining why and to what extent your organization is engaging them, the outcome could be useless information -- or worse.

SCO Shifts, Microsoft Braces for Next MyDoom

UPDATE: Microsoft warns its users how to remove MyDoom.B from computers as the first DDoS attacks begin.

Learning to Deal with Change and the Unknowns

As companies push in new intrusion detection systems and patch-management policies, there's something that often gets overlooked. Change. And change can lead to the unknown. And if you're not thinking it through, it can lead to lots of problems.