Click here

Security Trends: Archive: August 2002 

Getting Past WLAN 'Apathy'

FEATURE: Despite the dangers, some legitimate and some media-inspired, corporate wireless networks around the country are still at risk to hackers and wardriving enthusiasts.

New Active-X Vulnerability Discovered

A newly discovered vulnerability in many versions of Microsoft OS could leave you vulnerable to DoS.

RIAA Site Defaced by Hackers

UPDATE: So-called crackers deface the site that has long sparked controversy within their secretive community replacing legitimate content with links to interviews with 'South Park's' Eric Cartman and 'Adult Entertainment.'

Task Force Stresses Cooperation In Fighting Cyber Crime

In order to effectively combat cyber crime, it is imperative that law enforcement and security experts in the private sector and academia work together, according to a Secret Service task force.

Network Security Risks Of Mergers Too Often Ignored

Corporate acquisitions and mergers, while good for the bottom line, often end up being a security nightmare, according to industry analysts.

New Flaws Discovered on IE, Office

Six new flaws were discovered in Microsoft Internet Explorer that could leave your computer vulnerable.

Bush Security Plan Would Target E-Mail

Under the terms of a proposed draft, government would centralize e-mail and threat data, including calling on private sector to share IT security information.

Security Warning For Microsoft Office Web Components

Microsoft warns there are three security vulnerabilities in Office Web Components -- software used to give users limited Office functionality in a Web browser -- the most serious of which could enable an attacker to execute commands on a user's system.

Microsoft Exterminates More Bugs on Office XP

The software giant releases SP2 to fix many flaws plaguing its latest version of the Office software suite.

Network Associates Sells PGP Line

New startup PGP Corp. buys the encryption products as part of its bid to become a player in providing security for data and network storage products.

IBM Manager: IM Muscles Up for Corporate Users

Jeremy Dies, an IBM manager, talks about assertions that instant messaging will replace email as the corporate communication tool of choice, coming innovations and the security risks that go along with the convenience.

Rainfinity Works on Reliability for ISA Server

Rainfinity this week announced a new version of its RainConnect load balancing software that now works with Microsoft Corp.'s Internet Security and Acceleration (ISA) Server 2000 firewall and Web cache server.

Flaw Found in Popular Unix, Linux GUI

The CERT Coordination Center (CERT/CC) this week issued an advisory regarding a buffer overflow vulnerability in the Common Desktop Environment (CDE), a graphical user interface employed in numerous Unix and Linux systems. The vulnerability could enable attackers to execute code or cause a denial of service.

Norton Antivirus Tackles Instant Messaging

Symantec Corp. is answering the latest wave of online messaging attacks by gearing up to battle viruses coming through instant messaging.

nCircle Offers Automated Response to Vulnerabilities

nCircle Network Security, Inc. this week announced a new feature for its IP360 Network Exposure Management System designed to detect security vulnerabilities on a network before attackers do.

Latest IE Flaw an E-Commerce Threat?

Another in a long string of loopholes is reported in the browser, this one allowing hackers to spoof a site and obtain personal data from consumers.

DEF CON Jam

Security specialists at the worlds largest hacker convention saw attack after attack on the show's wireless LAN, and consider it a harbinger of things to come.

Email Migration Knocks Out Viruses and Spam

One company has battled back against the influx of spam and a plague of viruses by simply switching its email software.

Email Migration Knocks Out Viruses and Spam

One company has battled back against the influx of spam and a plague of viruses by simply switching its email software.

PGP Flaw Leaves E-mails Vulnerable

A flaw within the popular PGP encryption tool that could allow snoopers to decode sensitive e-mails.

Serious Vulnerability Uncovered in Apache 2.0

The flaw, which could allow an attacker to damage a server and reveal sensitive data, appears to affect all non-Unix platforms.

IM Users Being Duped into Security Laxes

Instant messaging users are being duped into downloading viruses and opening the door to intruders who use their systems to launch distributed attacks across the Net.

Don't Get Googled by Hackers!

The popular search engine houses a flaw in its toolbar that hackers can use to execute multiple tasks; Google responds with fix.

Microsoft Patches 'Critical' Vulnerability

Microsoft Corp. today called a newly discovered vulnerability in its Content Management Server 2001 'critical' and issued a patch that will correct it and two other vulnerabilities in the Web site building and maintenance product.

Security Flaw Found In Symantec Firewalls

A number of Symantec firewalls, including popular Raptor models, have a security flaw that renders networks protected by the systems vulnerable to intrusion.

SunRPC-Derived XDR Library Contains Bug

Exploitation could lead to denial of service, execution of arbitrary code, or the disclosure of sensitive information.

Shaky Telecoms Create Network Insecurity

With financial and legal turmoil rocking the telecommunications industry and cyber terrorist threats looming, security analysts say companies need a backup for their telephone and Internet connections.

ISPs Apparently Thwart Attempted Attack

NIPC issues alert warning Web sites of possible wide-scale assaults beginning on East coast and sweeping across country.

Microsoft Ships Security Fixes for Windows 2000

Microsoft Corp. released a bundle of fixes for Windows 2000 today, including security patches and a new middleware control.

Government Against Full Disclosure of Vulnerabilities

The President's special advisor for cyber space security tells security professionals that only software vendors and the government should be notified of security flaws in software before a patch is released.