Click here

Network Security: Archive: April 2010 

Microsoft Scrambles to Patch New SharePoint Security Hole

New zero-day flaw could enable attacks on Microsoft's SharePoint Server if a user clicks a booby-trapped link, giving new meaning to the term SharePoint collaboration.

Privacy Regulators Chide Google

A global coalition of privacy regulators takes Google to task for its lackluster approach to protecting its users' privacy.

Symantec Acquires PGP, GuardianEdge

The security software vendor adds a pair of encryption software firms to beef up its portfolio of applications for enterprises that share data in the cloud.

Cybersecurity Bill Co-Sponsor Expects Bipartisan Support

Rockefeller, co-sponsor of the cybersecurity overhaul bill, urges speedy consideration of the legislation and emphasizes its importance to business and government.

China Falls Off 'Dirty Dozen' Spam List

Asia is the hotbed for spammers, but according to the latest report from Sophos, China isn't even among the Top 12 countries responsible for relaying the irritating e-mails.

Data Breaches Cost U.S. Companies More Than Others

Legal fees are the main reason the average cost of a data breach costs American companies more than their counterparts in Australia and Europe, says Ponemon Institute.

DIY Malware Kits Growing in Number, Toxicity

Latest report from M86 Security finds that so-called exploit kits are becoming more common and affordable for hackers looking to jumpstart their malware activities.

Make Network Security Policies Successful

Three tips on how to better engage your user base in information and network security protocols.

'Strong' Passwords May Not Be All They're Cracked Up to Be

Conventional wisdom still treats passwords like a first line of defense when, in fact, in today’s security environment, passwords should really be the last line of defense.

Is Your Cloud Computing Vendor Secure?

Cloud companies pay accounting firms for SAS 70 certifications just as the financial organizations paid Moody’s for an investment-grade rating. Can that really be safe?

As Cybercrime Rises, 'Good Guys' Fight Back

In the battle against cybercrime, international bands of White Hats fight against the 'bad guys.'

Cybersecurity, Privacy Hot Topics at InfoSec World 2010

InfoSec practitioners gather in Orlando to better defend against emerging privacy, Web 2.0, and Internet security threats.

Web 2.0 Privacy and Security Issues Won't Go Away

As enterprises see rising use of Facebook, Twitter and other social networks, security and privacy safeguards remain an important concern.

Metasploit Express Debuts Next Month

A new version of the open source Metasploit Framework penetration testing tool is set to debut next month with the release of the open core Metasploit Express.

Patient Data Exposed After Laptop Theft

When will they learn? A Massachusetts-based neurosurgeon had his unencrypted laptop stolen during a lecture tour in South Korea, putting more than 3,500 patients' most sensitive data at risk.

Securely Manage Server Accounts with Key-based Authentication

Using the same password for every account is simpler, but it can prove disastrous if an attacker compromises even a single server and accesses the user accounts.

Interop 2010 Las Vegas Preview

Charlie Schluting gives us his take on what's worth your time at Interop Las Vegas this year. Security, compliance, and data security in the cloud are all covered.

Cloud Faces Security Challenges

AlwaysOn OnDemand panel participants ask, "Are private and semi-private clouds the only safe bets for the enterprise?"

New Networking Features in Windows Server 2008 R2

Security features include beefed up support for NAP--Microsoft's endpoint security solution--as well as improvements to group policies, remote access features, and firewalls.

How To Set Social Networking Policies for Employees

Establishing a clear set of social networking policies is important to both the security of your business and of your employees.

Google Password System Hacked: Report

Last year's high-profile cyber attacks emanating from China appear to have infiltrated the top-secret password service at Google, according to a new report.

Cybercrime Increases in Scale, Sophistication: Symantec

The security software vendor's annual Internet report finds that cybercrime continued to increase in complexity and volume as the year progressed.

McAfee, Adgregate Take On Malvertisers

New SECURE service provides an automated way for online advertisers and publishers to find and remove malware from digital advertising content.

Oracle Updates Java for Critical Vulnerability

Days after a major security update, Oracle issues another patch for a critical Java flaw.

Apple Fixes Pwn2own OS X Vulnerability

The company addresses a security hole first uncovered by Charlie Miller last month, and provides some details about what had been at risk.

Review: RoboForm Enterprise v7

Siber Systems RoboForm Enterprise v7 (from $59.95 per user) improves password security through ease-of-use, policy control, and safe storage.

Cyber Command Nominee Says Focus Is Security, Coordination

Lt. Gen. Keith Alexander says a new Department of Defense position is more about coordinating with other agencies in cyber attacks than waging Internet warfare.

Ford Offers In-Car Wireless Security

The automaker has announced a range of enhanced SYNC functionality--and new in-car security features--for the 2011 model year.

Symantec Unveils New Security Apps, Highlights Growing Threats

The enterprise security software maker wants companies and consumers to take a more proactive stance against emerging and increasingly targeted malware attacks.

Oracle Updates Solaris (and Everything Else) for Security

Oracle's quarterly patch update integrates Sun technology for the first time and patches 47 vulnerabilities in total.

Outlook Bleak for IT Security, Panel Says

At a recent event in California, a panel of security vendors concluded the outlook is not brilliant for network security in the enterprise in 2011.

Microsoft Issues Five 'Critical' Patches

In a busy 'Patch Tuesday', Microsoft fixed 25 security flaws--mostly in Windows--with its latest patch drop, even fixing a nasty zero-day in the Help system.

Top Ten Phishing Facts

Learn how to improve security by arming users with knowledge--and your network with tools--to diminish the impact of phishing scams.

Vietnam Protests Google Hacking Charges

A Vietnamese official defended her country against claims by both Google and McAfee that the government had been targeting dissidents protesting mining operations in that country.

Adobe Readies Security Update Service for Reader, Acrobat

Next week Adobe Systems will put its new updater service to the test when it releases the latest security updates for its popular Reader and Acrobat apps.

Microsoft's Patch Tuesday to Fix Five 'Critical' Security Holes

Microsoft prepares for another big drop of patches, but don't worry. It won't be as large as some recent Patch Tuesday events, though Microsoft is addressing a lingering bug from early March.

Laptop Data Theft Exposes Patient Info

A stolen notebook PC -- containing the unencrypted data of thousands of patients -- underlines a need for stronger laptop security measures.

Report Alleges Vast Cyber Crime Syndicate in China

Researchers detail the efforts of the Shadow network, a sophisticated group of hackers working out of China who have managed to snag troves of sensitive information through a far-ranging cyber espionage operation.

Apple Updates QuickTime for 16 Security Vulnerabilities

A big security update for QuickTime and iTunes affects both Windows and Mac users.

Facebook Data Theft Scam Targets Whole Foods Fans

The latest malware trap on the popular social networking site promises a $500 gift card to the upscale grocery store. But all you really get is your personal data exposed.

How to Choose a DLP Provider

This Buying Guide will help you to select the right Data Loss Prevention (DLP) solution for your organization.

Trends in Cybercrime: Report

Sophisticated campaign tracking and dramatically increased use of social networking technologies were two of the top trends in cybercrime in 2009.