Click here

Network Security: Archive: November 2002 

Open Source: The New Security Problem Child?

Move over Microsoft, there's a new security punching bag in town: open source software.

Healthy Revenue Picture for VPN/Firewall, IDS Markets

While uncertainty reigns in terms of overall enterprise IT spending, a pair of recent studies from Infonetics Research suggests that the VPN/firewall and intrusion detection markets are experiencing at least modest growth.

CERT Warns of Solaris Font Flaw

Sun confirms the security flaw in its X Window Font System offered a workaround until a comprehensive patch can be issued.

A Holey Reality

RealNetworks issues a patch for potentially serious security flaws in its flagship RealOne media player.

Homeland Defense IT Spending Expected to Spike

Studies point to increased federal IT spending in 2003 as a result of the new department.

  • DARPA Looks to Quantum Future
  • Sept. 11 Lessons: Better Prepare For Direct Attacks

    While the Internet proved itself resilient and an important communications resource on Sept. 11, a new report warns that ISPs and companies need to further prepare themselves to handle future emergencies.

    Wireless LAN Security Assessments Steps

    Ensure your wireless LAN complies with the latest security mechanisms. Learn the steps necessary for conducting a wireless LAN security assessment.

    Microsoft Fixes 'Critical' Flaw in MDAC

    In rare strong language, Microsoft warns that the MDAC buffer overrun flaw 'is very serious' and urged the immediate application of patches.

    ISPs Downplay Privacy Concerns of Court Ruling

    A secret federal court has granted law enforcement expanded surveillance authority but a leading Internet trade group says don't sound the alarms just yet.

    Microsoft to Limit 'Critical' Security Warnings

    The software giant will change the way vulnerability warnings are issued, particularly for non-technical end-users and cut down on the use of 'critical' bulletins.

    Deadline Nears for White House IT Security Plan

    After two months of town hall meetings, White House's draft National Strategy for Securing Cyber Security will soon hit President Bush's desk.

    Enterprise IM Spurs Privacy Concerns

    The growing interest in enterprise-level instant messaging systems means good things for vendors -- but also has serious ramifications for workplace privacy.

    Apache Flaws Being Exploited

    Several security holes in the Apache source are being actively exploited on the Internet; IT managers should upgrade to version 1.3.27 or 2.0.43 or higher.

    Security Threat Correlation: The Next Battlefield

    IT security professionals are figuring out the next battlefield against the bad guys: threat correlation. Akin to placing sentries on your network battlements, threat correlation solutions monitor sensor data and then identify important threats from across your global network.

    Feds Want to Extradite British Hacker

    U.S. authorities are seeking trials in both Virginia and New Jersey for unemployed computer administrator who allegedly broke into nearly 100 military networks.

  • U.S. Indicts British Hacker
  • The Guts of WLAN Security Policy

    Because of the use of radio waves, a wireless LAN will not be secure unless you take special precautions. Follow these recommendations when defining the wireless LAN security policy for your company.

    U.S. Indicts British Hacker

    Computer administrator accused of $1M in damages after hacking into military and NASA networks.

    Serious BIND Server Flaws Detected

    Exploitation of the vulnerabilities could lead to compromise and DoS attacks against vulnerable DNS servers.

    SAML Just The Start For Web Services Security

    While the recent ratification of the Security Assertion Markup Language v1.0 as a standard is an important step, the remainder of the Web services security chain remains rather tangled.

    OASIS Ratifies SAML 1.0

    The standards organization pushes forward a key security specification for Web services as a standard.

    Reinvigorated GOP Eyes National Security Network

    White House's CIO of Office of Homeland Security calls for national network of federal, state and local governments within 2-3 years.

    Six Mozilla Security Bugs Posted

    Pre-version 1.0 rollouts of the alternative browser project contain about a half-dozen vulnerabilities, some potentially dangerous.

    As the Bridex Worm Turns

    The Bridex e-mail worm targets a known vulnerability in Microsoft Windows: it's capable of spreading a variant of the active Funlove virus.

    Security to Drive $8B in State and Local IT Spending

    New report says federal government will largely finance public safety and criminal justice initiatives.

    SBC Creates Anti-Hacker Lab

    With online security fears at an all-time high, the ISP launches the Internet Assurance and Security Center (IASC) to detect and neutralize hacker attacks.