Click here

Network Security: Archive: December 2009 

Net Privacy 2010: How Far Will the Needle Move?

Are privacy advocates' hopes for a new set of rules and laws in the coming year misplaced?

Lawsuit Says Facebook, MySpace App Failed to Protect User Data

An Indiana man has filed a class action lawsuit against RockYou, alleging it failed to protect the personal data of more than 32 million customers.

Twitter's 370 Passwords You Can't Use on the Internet

No stranger to hacking attacks, the social networking site has banned new users from selecting 370 passwords that it says are too easy for hacking scripts to unlock.

New Malware Tactics, Targets Expected in 2010

Security software vendor predicts Adobe apps will eclipse Microsoft as most prominent targets for hacking.

Microsoft: No Hole in IIS 6

After testing claims by a hacker who claims IIS 6 is vulnerable to a zero-day attack, Microsoft says it's a wild goose chase.

2010: A Malware Odyssey

Socially engineered scams, poorly protected databases and the arrival of Windows 7 will keep security software vendors and their clients busy in the new year.

Penn State Latest University Plagued by Data Breaches

More than 30,000 students are now receiving notifications that a hacker or hackers had breached three separate computers, exposing their personal information.

Simple Data Security Solutions

If you prioritize data security--and who doesn't?--the Aegis Padlock portable hard drive offers a secure, affordable solution for Windows, Mac, and Linux that's simple enough for even non-IT pros to manage.

Intel Patches Trusted Execution

Intel patches for a critical flaw that could have made trusted execution less than trustworthy.

Obama Taps Former Microsoft Exec to Head Cybersecurity

Prolonged search for White House cybersecurity coordinator leads to a former Bush official.

AirTight Simplifies Wireless Security and Performance Analysis

SpectraGuard Enterprise 6.0 adds new forensics and troubleshooting modules to improve Wireless IPS signal-to-noise ratio and cut TCO.

Top Ten Security Tips for the Holidays

Unfortunately, the weather outside isn't the only thing that's frightful this time of year. Use our PC security tips to protect yourself from spyware, hackers, and other Grinchy things.

Adobe Delays Patch Release for PDF Vulnerability

Company officials acknowledge serious security problem in its PDF viewing and editing applications but won't provide the patch for almost a month.

Tips and Tricks for Using 802.1X in Windows

Securely set 802.1X settings to prevent man-in-the-middle attacks; get a review of the new advanced settings for 802.1X in Windows 7; and learn tips for enabling 802.1X for wired networks and for removing cached login credentials.

Mozilla Updates Firefox 3.5.6 for Three Critical Flaws

New version of open source browser tackles memory corruption and spoofing issues.

Adobe PDF at Risk From Zero-Day Vulnerability

New attack on Adobe products is out in the wild and there is no patch.

CA Predicts More Malvertising, Mac Attacks in 2010

The software developer's security team also thinks another big computer worm outbreak like Conficker is possible.

Akamai Brings Web App Firewall to Its Cloud

Thought that just an IPS was enough? Nope -- Akamai says you need a WAF, and the CDN giant thinks it has just the solution.

Hackers Break Into University's Admissions Server

More than nine years worth of student data was exposed last month when hackers managed to access the admissions server at Eastern Illinois University.

Understanding the Wi-Fi Security Guidelines of PCI DSS

Even organizations that don’t maintain WLANs must still satisfy some wireless-specific requirements. Learn the rules here.

Microsoft Opts to Block, Not Patch, Vulnerable Codec

A move to limit the execution of a 17-year-old video codec aims to protect users from hack attacks.

125,000-Plus Sites Tagged by SQL Injection Attack

Security researchers say the sophisticated malware is likely being used for credit card or other banking-related thefts.

Facebook Privacy Fracas Just Won't Die

Advocates warn that new privacy controls will lead to inadvertent sharing of information.

Bah Humbug: Koobface Worm Hits Facebook, Again

Latest version of the Koobface worm is being spread through a bogus Christmas greeting card video on the social networking site.

Facebook Begins Site-Wide Privacy Revamp

Social networking giant to require all 350 million-plus users to edit and confirm privacy controls.

Symantec Offers Security Through Amazon's Cloud

Symantec is now offering endpoint security and storage foundation apps through Amazon's cloud.

5 Advanced Wi-Fi Network Security Tips

Get enterprise-level protection for your SMB or SOHO Wi-Fi network.

Cisco: U.S. No Longer the Spam Leader

State of Internet Security 2009 report finds zero days are down, but social networking threats are up.

Microsoft Patch Tuesday Fixes Two Zero-Day Vulnerabilities

Update to Internet Explorer addresses threat to older versions.

Yahoo! Offers Ad-Targeting Privacy Controls

Web giant is the latest to roll out more transparent privacy tools as regulators examine the sector.

FTC Considers Privacy Rules for Online Ads

Head of consumer protection agency hints at action to protect users online.

Adobe to Release Critical Patches for Flash Player and Adobe AIR

The updates will address multiple vulnerabilities.

Software Lobby Keeping Tabs on U.S. Cybersecurity

BSA offers a mixed report card evaluating federal cybersecurity efforts.

Security Hole Could Affect All iPhones

The good news is a white-hat hacker uncovered the vulnerability and has passed on information about the problem. But how soon will it be fixed?

Privacy Advocates Aim to Shape Upcoming Legislation

Center for Democracy and Technology launches grassroots campaign as policymakers mull action on Internet privacy.

US-CERT Warns of Flaw in SSL-VPNs

US-CERT is now warning against a potentially dangerous flaw in the SSL-VPN implementations from over two dozen vendors, including industry giant Cisco.

Microsoft to Target 12 Flaws, IE Zero-Day in Patch Tuesday

Redmond clamps down on a problem that surfaced last month in older editions of Internet Explorer.

Facebook Revamps Privacy Approach Yet Again

Social networking leader moves away from network-based approach to privacy, gives users more precise control over what's shared.

Group Finds Privacy Holes in Digital Health Records

Patient Privacy Rights group issues report card showing wide variations in privacy safeguards in electronic health offerings.

Metasploit, NeXpose Integrate for Enterprise Security Testing

Rapid 7 is now integrating popular open source exploit framework into a more enterprise-friendly suite for vulnerability scanning.

McAfee Locks Down Removable Devices

Security software-maker serves up unified, end-to-end security options for the enterprise.