Click here

Hackers: Archive: June 2004 

CEO Warns Threats are Coming from the Inside

The CEO of a security start-up says IT administrators aren't paying enough attention to the threats that are coming from within their own networks.

Single Sign-On Gains Liberty Support

Customers can now purchase products from nine vendors that comply with group's identity management standard for single sign-on services.

US-CERT: Beware of IE

The U.S. government's cybersecurity unit recommends ditching Internet Explorer in favor of other, safer browsers.

Casino Stacks the Deck with New IDS System

The Riviera Hotel & Casino in Las Vegas has to deal with more than its share of hacker attacks. To fight off these threats, IT administrators there recently went shopping for an IDS system.

Banks Say, 'Phishing Season Is Over'

A little-known organization of 55 of the world's largest banks has finally become fed up enough with the online thieves known as 'phishers' that the banks are doing something about it.

Predictability Can Be Fatal

eSecurityPlanet Columnist George Bakos says that in computing, as in life and love, being predictable can be a fatal flaw. Hackers and worm authors thrive on default settings. Bakos talks about how to get around that.

Soft on the Inside

While external security threats abound, most serious risks still emanate from lax policies and procedures and a lack of ongoing employee training.

A Spec to Spike Spam?

The latest anti-spam effort by the four largest U.S. ISPs is a joint specification to eliminate spoofed e-mail addresses.

Sigaba: Secure E-mail Unshackled

Lyne Bourque does some hard time with secure e-mail technologies but ultimately wants to find the freedom of 'eyes only' e-mails -- and doing so without bewildering users.

IM -- a Threat to Network Security

Employees using instant messaging could be opening up gaping holes in their companies' network security.

AOL Employee Arrested in Spam Sting

Millions of screen names were used to illegally promote an Internet gambling operation.

Rise and Fall of the Privacy Officer

The Chief Privacy Officer was brought on board to mind the store for all things privacy related, says eSecurityPlanet's new columnist Ray Everett-Church. But now with new tools, technologies and CSOs in place, is the future of the CPO in doubt?

Keeping Score of Identity Risks

Until identities can be verified with reasonable assurance, all the fingerprint scans, holograms, and Java cards in the world won't stop the host of crimes that can be committed with a false identity. Enter ID Analytics.

Keeping Score of Identity Risks

Until identities can be verified with reasonable assurance, all the fingerprint scans, holograms and Java cards in the world won't stop the host of crimes committed with a false identity. One company says it has a solution.

Twilight for the Phishermen

The FTC puts two Internet scamsters out of business.

Symbol Buys Trio Security

Three-factor encryption technology comes to Symbol handheld devices.

ID Theft Costs Victims $2.4B in One Year

New Gartner research says millions are duped by online fraudsters through scams such as phishing.

Honeypots Let You Spy on Your Enemy

What's one of the first tenets of warfare? Know your enemy. Well, one of the authors of a new book tells eSecurityPlanet that using honeypots is one of the best ways to do just that.

Windows SP2 Comes Closer with RC 2

Microsoft reveals code for its oft-delayed second release candidate to developers ahead of the summer deadline for the finished product.

The Real Threats to Security are Changing

Today, the threats to our online activities are shifting. eSecurityPlanet's new columnist, Bob Hillery, takes a look at the changing threats and what we should be doing about them.

Buffer Overflows Patched in RealPlayer

A buffer overflow vulnerability in RealNetworks' flagship RealPlayer software could put millions of users at risk of PC takeover.

Humans Still Weakest Security Link

Social engineering reaching epidemic stage and undermining best laid security efforts.

Exec Talks about Growing Security Pressures

IT administrators and security officers are under a lot more pressure than ever before. Ken Xie, president of Fortinet Inc., talks to eSecurityPlanet about the added workload and what can be done to make the job a little easier.

MS Patches 'Moderate' DirectX Flaw

Microsoft issues security fixes for a pair of 'moderate' vulnerabilities.

Reacting to Attacks Dooms Us to Failure

eSecurityPlanet's new columnist Ken van Wyk talks about the way we defend ourselves from attack. Reacting to a situation isn't working, and it hasn't been working for some time. Van Wyk says it's time we get proactive.

Immunize Your Servers Against Attack

A security company is shipping today new software it claims will better protect your servers against hacker attacks -- whether or not you've installed the latest patches from Microsoft.

Broadcom Makes Storage Security Standard

Broadcom has unveiled storage management software that puts the company at the forefront of vendors addressing storage security concerns.

Could Arrests Slow Torrent of Virus Attacks?

After weathering a storm of viruses last month, security analysts are hoping that June isn't hit nearly as hard. But they're not getting their hopes too high.

Learn the Basics of Handheld Security

While PDA and smartphone security is often a forgotten piece of the security infrastructure, these devices have the ability to transmit and receive viruses, and can be exploited in numerous ways. In this article, the first in a series on the subject, we provide a general overview of PDA security and discuss vulnerabilities, products, security issues, and policies.

Opera Patches URL-Spoofing Flaw

Alternative Web browser firm Opera Software has rushed out a fix for a security vulnerability that could allow an attacker to fool the Opera browser into showing a fake address in its address bar.

We've Made Some Changes to eSecurityPlanet

We have added a few things to eSecurityPlanet -- changes designed to give you more information, faster.

AT&T on DoS: Early Detection Equals Prevention

The carrier introduces a new service to thwart denial-of-service attacks in corporate systems.

Financial Firms in Hackers' Crosshairs

IT security attacks on some of the world's leading financial institutions more than doubled from last year, according to a new survey from Deloite & Touche.

'Critical' CVS Heap Overflow Flaw Patched

Security researchers have discovered a heap overflow vulnerability in Concurrent Versions System (CVS), the source code maintenance system used to power open-source software development projects.