Click here

Security Trends: Archive: July 2002 

CERT Warns of Multiple SQL Flaws

A CERT advisory issued Monday evening warns of several vulnerabilities in Microsoft SQL Server.

Honeypots Turn The Tables On Hackers

Honeypots are positioned to become a key tool to defend the corporate enterprise from hacker attacks, but some security watchers worry they could bring a new set of security worries with them.

CERT Airs Serious Flaws in OpenSSL Protocol

The software engineering watchdog discloses some nasty holes in the OpenSSL security software.

More Vulnerabilities for Microsoft

Security experts discover new flaws in SQL Server, Exchange Server and Metadirectory Services.

IT Leaders Predict Government Cyber Attack

Business Software Alliance says more resources, secure information sharing needed.

Coming Soon: Attack Of The Super Worms

New strains of sophisticated super worms -- worms capable of hiding themselves and launching multiple attacks -- soon will be unleashed on computer networks around the globe, security experts warn.

Security Expert: U.S. Companies Unprepared For Cyber Terror

The man heading up the nation's top research institute on counterterrorism and cyber security says corporate America is vulnerable to attack, and he wants to create a team reminiscent of the Manhattan Project to tackle the problem.

Single Network Identity: Holy Grail or Nightmare?

Network managers are well familiar with the chaos multiple passwords and identities can cause with harried user communities. When is a single identity across the network more menace than refuge?

Symantec Lands 3 Firms for $355M

UPDATE: The Norton anti-virus maker said it is acquiring Recourse, Riptech and SecurityFocus for its security portfolio.

Internal Security Breaches More Damaging

While external attacks are serious enough, the threat posed by one's own employees -- whether intentional or inadvertent -- can often be much worse. But a number of software management tools can help overburdened IT staffs reduce network vulnerabilities.

Security Wars: Can Intrusion Detection Even The Score?

Intrusion detection systems provide reams of raw data, and plenty of false alarms. How do you assess an IDS, where do you use one, and when does a human need to step in and make sense of what it's telling you?

Report Highlights Growing Threat Of Identity Theft

A research group expects identity theft to rise dramatically in coming years as various online credit and payment systems make it easier to conduct 'faceless transactions.' And the costs of this fraud hit businesses even harder than they do the victimized consumers.

Windows Worm, Multiple Bugs Haunt MS Users

On a day when security experts are exposing multiple flaws in various software applications (see bulleted items below), Microsoft takes the bug crown.

  • CERT Reports Flaws in Compaq GUI
  • PGP Plug-in Flaw Leaves Encryption Vulnerable
  • Top 10 Enterprise Security Risks

    The number of security threats facing IT managers is multiplying too rapidly for most budgets or staffs to keep pace. Here's a list of 10 risk factors security administrators should be on guard for.

    Sun Issues Fix for iPlanet Server Bug

    Users of versions 4.1 and 6.0 of iPlanet are urged to install service packs to plug a potentially serious vulnerability in the software's search function.

    Spam-Fighting Strategies From The Pros

    Sidebar: Anti-spam gurus offer companies several weapons in the battle to stem the growing tide. (See main story here.)

    Enterprise Spam Diet Heavy On Porn

    The amount of spam hitting company networks in the past several months has exploded and those fighting the spam battle say it's also smuttier than ever. (See sidebar here.)

    Riptech Releases Elite Hacker Profile

    New security report also warns of smoke screen code red attacks.

    Worm Exploits Apache Flaw

    Two weeks after a warning that a flaw on the popular Apache Web server application could leave servers vulnerable, security experts are trying to decode a worm exploiting the flaw.

    Biometric Security - From Fingers To Faces

    Gummy fingerprints aside, biometric security has its share of potential issues, including end-user resistance to potential privacy threats and methods that seem invasive.