Network Security: Archive: September 2010

FBI Busts 37 in $3 Million Zeus Trojan Scam

The FBI and the U.S. Attorney's office in Southern New York filed charges against 37 people suspected of orchestrating a sophisticated international malware scam that stole more than $3 million from victims' bank accounts.

Microsoft Rushes Out 'Important' ASP.NET Patch

Microsoft can move pretty quickly to block zero-day holes when it wants to. The ASP.NET hole got the company's attention and it is rolling out a patch Tuesday, just ten days after it surfaced.

Microsoft Delivers Out-of-Band ASP.NET Patch

A security flaw in an important Microsoft Web technology triggered rapid development and testing of a patch to block further hack attacks on ASP.NET.

Spam Scam Targets LinkedIn Community

Security researchers at Cisco say the social network for professionals has been hit with a massive malware campaign designed to steal users' online banking credentials.

White House Leads Review of Federal Cyber Authorities

Pentagon cyber boss Gen. Keith Alexander outlines the daunting challenges ahead for military and civilian cybersecurity. Meanwhile, congressional efforts to overhaul the federal policy framework appear to have stalled.

New Mobile Security Option for iPhone

Enterprises concerned about iPhone security have a new option courtesy of Cisco.

New Email Solution Protects Privacy

VaporStream's software is designed to combine the ease of use of e-mail with the privacy and security of an in-person chat.

Study: Data Loss Affects Nearly One-Third of Enterprises

Data loss events are continuing at a "fairly alarming rate" according to Keith Crosley of cloud-focused security firm Proofpoint, which recently released its seventh annual study of data loss in the enterprise.

Microsoft Scrambles to Patch Encryption Hole

Hole in server encryption could leave many systems open to attack, researchers and Microsoft officials say.

Google Updates Chrome Ahead of Adobe Fix

Yet another update for the Chrome browser and this time Google is getting the drop on a Flash fix ahead of other browsers.

Google Improves Its Cloud Application Security

Free two-factor authentication feature is designed to add an extra layer of protection to Google's cloud applications.

Adobe Hustles to Release Flash Player Fix

Adobe Systems pushed out a fix designed to address a critical security vulnerability in its Flash Player a week earlier than it previously promised.

Security Vulnerabilities on the Decline?

JavaScript issues continue to mount, but according to new report, we’re better off than we were in 2006.

Top 10 Email Malware Threats

Despite spam and malware filters, email-borne Trojans and exploits continue to thrive, propagated by file attachments and embedded URLs. We rank the worst offenders and offer tips for protecting your network.

Google Chrome 6 Gets Updated for 9 New Flaws

Google patches Chrome 6 for security as development on Chrome 7 continues and the next generation browser race accelerates against Firefox and IE9.

Why Facebook Is a Growing Concern for Your Business

Social networks should not be taken lightly --n ot by your employees and not by you. Chris Null asks, "What impact might Facebook activity have on corporate endeavors?"

Another Busy Patch Tuesday for Security Admins

Microsoft serves up a fresh batch of vulnerability fixes for September.

CCNY Students Feel Sting of Data Security Mishap

More than 7,000 students attending City College of New York this week are receiving the bad news that their most sensitive personal information is up for grabs.

Malicious Website Tally Grows to 57,000 Per Week: Report

A three-month survey of the malware landscape finds that hackers are putting up thousands of bogus sites to steal users' banking and other personal information.

Four Hidden WLAN Security Threats

You may think your Wi-Fi network is secure, but unless you've addressed these four security threats, you may have left your corporate wireless network vulnerable to hackers.

Microsoft Cooking Up Baker's Dozen of Fixes for Patch Tuesday

Security administrators are put on notice that they have another busy week of applying vulnerability patches to Microsoft products.

Mozilla Firefox 3.6.9 Security Updates Follow Microsoft's Lead

Mozilla is taking a page from Microsoft IE's security features as it updates the Firefox browser for 10 critical flaws.

Apple Hustles to Rid Ping of Spam

New social network on iTunes attracts more than one million users and more than its fair share of spam.

Four Great Open Source Firewall/Router Projects

The open source community offers many different firewall/router projects, including Linux-based and FreeBSD-based security stand-outs.

Google Researcher Finds New MSFT Zero-Day Exploit

Microsoft was caught off guard by public disclosure of a new zero-day hole in Internet Explorer 8. But the hacker who published the exploit says he notified Microsoft in advance and only acted after the company ignored him.

Pentagon Cybersecurity Boss Vows Privacy Protections

At O'Reilly Gov 2.0 Summit, Gen. Keith Alexander, head of U.S. Cyber Command pledges that national security and individual privacy are not working at cross purposes.

Microsoft Looks to 'Mitigate' Security Flaws With Updated Tool

Microsoft says it is shipping the newest version of an administrator's tool that helps manage key mitigation parameters in order to help corporate customers stay safer.

Why SCADA Security Matters--And What You Should Know About It

Worst case scenarios of distributed SCADA attacks include bringing down the power grid to a major metropolitan city, yet most SCADA experts are not security experts--and vice versa.

Twitter Retools App, Link Policies, Sparks Privacy Worries

Microblogging service alerts users to two changes to how third-party applications integrate with the site, raising privacy concerns in the process.

Microsoft Releases 'Fix It' for DLL Hole

The company moves to help thwart attacks that can seize control of users' systems by taking advantage of shoddy programming practices.

The Best Security for Wireless Email

Sending email over a wireless network, either Wi-Fi or your mobile carrier's data network, is a risky proposition. Learn how to protect your corporate and personal communication.