Network Security: Archive: August 2003

'Blaster' Teen Suspect Arrested

UPDATE: The FBI has arrested Minnesota teenager Jeffrey Lee Parson on suspicion he created a destructive variant of the 'Blaster' worm.

IRS Inoculates Against Blaster Using Electronic Distribution

The Internal Revenue Service successfully protected thousands of servers and desktop PCs from the Blaster worm that exploited a Microsoft Windows vulnerability discovered in July by using software distribution software from Tivoli Systems.

Partnership Aims to Accelerate Homeland Security Tech Adoption

Recently launched in Oregon, the Regional Alliances for Infrastructure and Network Security is linking 911 emergency response centers with local public safety stakeholders such as schools, hospitals and office buildings.

Security: The Elephant in the Storage Management Room

Storage security -- it's the two-ton elephant in the corner of the room that no one wants to mention, much less clean up after. But acknowledging the elephant's presence, and thereby taking the necessary steps to secure your enterprise's critical data, is imperative if your business is to survive, let alone thrive.

Sobig.F Weekend Attack Thwarted; Feds Hunt Source

Despite claiming a minor victory over a second wave of the fast-spreading worm, experts warn that open ports on infected machines continue to pose a major threat.

'Critical' Security Hole in Real's Helix Server

Workarounds are recommended for the root exploit vulnerability which carries a 'highly critical' rating.

New Phase of Sobig.F Set for Fridays

Security experts are warning of a new phase of attack from the Sobig.f worm that continues to bedevil computer networks around the globe.

Sobig 'Carpet Bombs' the Internet

One in Three Companies Lack Disaster Recovery Strategy

A recent survey finds nearly 30% of companies lack formal disaster recovery strategies, and 64% of companies admit to having significant vulnerabilities in their data backup and disaster recovery plans.

Network Security for Mid-Size Businesses

Check Point Software Technologies debuts Check Point Express, a comprehensive VPN/security solution especially designed to meet the unique Internet security needs of mid-sized businesses.

Microsoft Issues Cumulative Patch for IE

The software giant publishes a cumulative patch that combines all previous Internet Explorer patches and also addresses several newly discovered flaws. Microsoft also issues patches for Microsoft Data Access Components and Microsoft DirectX.

AntiOnline Security Spotlight: Firewalls and Honeypots

This week we spotlight firewalls and honeypots -- tools that savvy network admins use to help build impenetrable defenses.

Sobig 'Carpet Bombs' the Internet

Sobig-F, which has been causing chaos on corporate networks the past three days, is now being called the fastest spreading virus in the industry's history.

Sobig-F Overruns Networks, Email Traffic

The latest variant of the Sobig worm is hammering corporate networks, crashing email servers, staggering Internet traffic and accounting for 70 percent of all email today.

Sobig.F Targets Jupitermedia

Microsoft Takes Security Steps with Messenger

After a series of embarrassing Windows vulnerabilities, Redmond moves to safeguard its consumer instant messaging clients -- spotlighting one of the chief risks associated with free, public IM.

It's Back -- New Variant of Sobig Hits the Net

The Sobig worm has a new addition to its malicious family. Sobig-F is the latest variant of the Sobig worm to be detected spreading rapid throughout the wild.

'Friendly' Welchia Worm Wreaking Havoc

Blaster 'Fixer' Worm Sprouts New Versions

The Blaster virus may be under control but copycat variants are beginning to squirm.

Warning Goes Out about Blaster Email Hoax

Security analysts are warning IT managers and users about an email hoax that is playing off people's concerns about the Blaster worm.

Bogus E-mail Targets Citibank Customers

The latest variation on the 'phishing' fraud alert scam warned that the recipient's checking account could be suspended. Its muddy language makes it easier to spot.

WS Security and Adoption

Without security standards, the promise of Web services as a firewall-crossing business tool will remain elusive at best. The good news is the first steps along this road have already been taken.

AntiOnline Security Spotlight: Blaster Worm

Despite some headline-grabbing security bulletins, systems are falling victim to this worm. Read up on what AO community members have to say about it, including some interesting tidbits from those that have 'dissected' it.

GNU Project Server Hacked by Intruder

The potential exists for an intruder to have inserted back doors, Trojan horses or other malicious code into free software source code distributions.

Spam and Viruses: Unholy Matrimony, Part 2

Make no mistake about it -- spam and viruses are deliberate, malicious assaults on our systems that often work together to penetrate and compromise our networks. In the second article of a two-part series, Carla Schroder takes a look at client-side defenses for defeating the two-headed monster.

Warning: MSBlaster May be Just the Beginning

Security analysts are warning IT managers that the MSBlaster worm may just be the beginning of malicious code that will take advantage of what some are calling the most widespread Windows flaw in history.

Feared Windows Worm Starts Attack

Exploiting what may be the most widespread Windows vulnerability ever, a new worm is on the loose, setting up a distributed denial-of-service attack against Microsoft Corp. and fulfilling security experts' ominous predictions.

The Pros and Cons of Automatic Updates

Ask any administrator and they'll tell you that maintaining a secure network is a continual juggling act. If you're considering letting your Windows server automatically download and install security updates, there are a few things you should know in order to avoid accidentally dropping any balls.

The Deadly Duo: Spam and Viruses, July 2003

Good news, bad news, and worse news found in the month's figures.

Acxiom Hacked, Customer Information Exposed

Consumer database firm says a hacker was able to download sensitive information about some of the customers of its clients, though the alleged hacker is now in custody and the information recovered.

False Positives: Spam's Casualty of War Costing Billions

Money is being lost, customers are being lost and key opportunities are being missed because our weapons to battle spam are mistakenly blocking legitimate email. And that's costing U.S. businesses roughly $3.5 billion this year alone.

AntiOnline Security Spotlight: Hacking Culture

We're kicking off our AO coverage by taking a look at one of the most popular AntiOnline tutorials called 'Hacking Culture: Ethics' authored by Ennis, one of AO's intrepid moderators.

New WLAN Attacks Identified

WLAN security vendor AirDefense says monitoring at the DefCon convention revealed a new type of Denial-of-Service attack as well as possible firmware bugs that could leave NICs and access points vulnerable.

Securing Data Across SANs, WANs, and Shared File Systems

The end-to-end security of corporate data is becoming an issue of increasing importance, yet the ideal of being able to secure data through every aspect of all systems within a heterogeneous environment remains years away. Henry Newman explores what currently works and what doesn't in the world of data security.

Corp America Not Fully Prepared For Biz Interruptions

Fortune 1000 executives believe it would take their organizations longer than an average business day to restore critical information systems.

Getting Past the Secrecy Surrounding Network Break-ins

Corporate IT managers, security experts and the FBI are teaming up with a novel proposal to notify each other when networks are attacked — without breaching confidentiality.

Spam Goes Off the Charts in July

July was a bad month for spam, with more junk email littering corporate inboxes on 31 days than in all of 2002.

Mimail Worm Hits Companies Already on High Alert

As U.S. workers opened their email Monday morning, they unleashed a new mass-mailing worm. Mimail, which temporarily shut down several government agencies last Friday, has raised concerns in an industry already on high alert for a coming large-scale hacker attack.

Security Begins From Within

When it comes to weighing the needs of corporate security against the rights of employees to privacy in the workplace, IT managers find there's really no contest.

Spam and Viruses: Unholy Matrimony, Part 1

Make no mistake about it -- spam and viruses are deliberate, malicious assaults on our systems that often work together to penetrate and compromise our networks. Carla Schroder's new series takes a look at server-level and client-side defenses for defeating the two-headed monster.

Wyden Introduces Personal Data Disclosure Bill

Bill would force government agencies to disclose use or access to public and private databases.

Secure Your ASP.NET Application from a SQL Injection Attack

Does your ASP.NET application access a database? Does it use SQL? Does it have forms for users to enter information? Learn what someone may be able to do to your application, and how you can prevent it.

Sobig and Klez Continue Notorious Reign

Even though no new major viruses were introduced last month, a few steadfast problems continued to plague networks around the world. The Sobig family of viruses teamed up with Klez and Bugbear to wreak havoc on the Internet, and retain their notorious spots as the most troublesome viruses in the wild.

Network Security: Archive: August 2003

Topic Centers

Articles by Type

Contact Us

More Security