Security Trends: Archive: April 2004

Countering Lack of Security in Wi-Fi Hot Spots

In a report on 'Securing the Mobile Device,' the Burton Group outlines options users tapping the 802.11 protocol have for securing their transmissions and guarding the integrity of their data.

Lawmakers Vow Tough Spyware Laws

Commerce chairman says consumers are 'outraged' and promises legislative action by end of year.

Barnes & Noble.com Fined for Customer Data Leak

The online bookseller settles with the New York AG's office and plans to establish an IT security program to protect sensitive customer information.

Symantec Sideswipes Second Patent Dispute

The Internet security firm settles with Clearswift after fixing its argument with Aladdin and reports record revenues.

Remote Worker Security Needs to Balance Cost, Connectivity, Says META

The basic toolkit to secure remote access for the mobile worker should strike a balance between ease and convenience of connectivity with the resources required from an organization to support that use, according to a META Group report.

AntiOnline Spotlight: Spyware Protection for Networks

Stopping spyware is usually just an easy (and mostly free) download away. Even ISPs are getting into the act by helping their users banish the intrusive code. But where do admins turn when they want to provide the same protection for their networks?

Feds Can Spammers Under New Act

Federal authorities use Can Spam to raid prolific Michigan spam operation, which specialized in spoofing to hawk bogus diet patches.

Security's 'Perfect Storm' Leaves IT Ragged

While there were actually fewer viruses and vulnerability announcements in April, the alerts that did come out affected more companies than usual, running administrators ragged all month.

Blaster Redux? SSL Worm Threat Rising

Security experts have spotted the first signs of a Blaster-like worm circulating underground, prompting fears that major Internet disruptions could be less than a week away.

Getting at the Root of Security Problems

IT is getting a wake-up call. Security problems are running IT managers ragged. They're wasting time and loads of money. But our Datamation columnist says security problems are merely the symptom. The root of the problem runs much deeper.

'Critical' Windows Hijack Flaw Reported

Researchers warn that the boundary error vulnerability could cause a buffer overflow and lead to system takeover.

'Osama Captured' e-Mail is Malicious Trojan

The 'Osama Bin Laden Captured' e-mail hammering your in-box today will attempt to download a Trojan if the embedded URL is clicked.

Phishing Scams Increase 1,200% in 6 Months

Beware your email. In the last six months, the number of phishing email scams has increased 1,200 percent, putting end users and major companies at an even greater risk of theft and damage, according to a new study.

AntiOnline Spotlight: TCP Doom and Gloom

A TCP flaw has the potential to bring the Internet crashing down, laying waste to e-commerce as we know it. Or does it?

China Backs Down on WAPI Deadline

Beijing agrees to commit to technology-neutral approaches, drops June 1 date to impose proprietary wireless encryption plan.

National Partnership Issues Call for Security Governance

A task force of the National Cyber Security Partnership urges industry to integrate information security governance into corporate processes.

PCs Monitored, E-mail Bugged

Research reveals an average of 28 pieces of spyware per computer, and half of spam filled with activity-tracking beacons.

FTC Urges Industry Solutions to Spyware

Officials say better tools and intense consumer education are key to protecting users from invasive programs.

Multiple Linux Flaws Reported

The more serious vulnerability could cause buffer overflows and lead to privilege escalation attacks.

New Netsky Variant -- No Attachment Needed

Users don't even need to open an attachment to be infected with the latest variant of the virulent Netsky virus. And analysts worry this means the bug could spread far and fast.

ID Theft a Taxing Question

Security worries are no match for the convenience of e-filing.

AntiOnline Spotlight: Gone Phishing

Best Buy, Symantec, Citibank, eBay... What do these companies have in common? Scammers are banking on their good name to trick users into coughing up valuable information. Protect yourself and your staff.

Stanford's Linux Supercomputers Compromised

A sophisticated password sniffing program called 'John the Ripper' is behind the attacks, but officials don't see coordinated effort.

Java's Future Secured in Microsoft Pact

Microsoft agrees to patch support of JVM until 2007. James Gosling's note to the Java community: 'Relax. Have a little faith.'

Keeping an Eye on Secure Access: Iridian Iris Scan

Passwords, PINs, smart cards... If they are causing your company more problems than they solve, it may be time to upgrade to a technology that is virtually impossible to circumvent and your employees can't misplace. Lyne Bourque takes a look at Iridian's biometric security products.

Maryland Lawmakers Pass Anti-Spam Bill

A bill that can put convicted spammers out of business and send them to jail for as long as ten years awaits the governor's signature.

Browser-based Attacks 'Surging'

Virulent viruses and worms aren't the only things to watch out for. Security analysts say browser-based attacks are escalating in frequency and damage. And now a new study backs up the warnings.

Ensuring Mobile Clients Comply with Security Policy

Mobile security products vendor Senforce updates its location-aware endpoint security technology to include more support for the government market and improved wireless connectivity control.

Hardware Today: Security, After the Breach

You've taken great care to back up your data and secure the server room. But is this always enough? We look at two products -- one to secure the rack and one to protect backup tapes -- designed for after an intruder has picked the lock.

Report: IT Security Begins at the Top

An industry task force hopes to avoid federal mandates by making IT security a corporate priority.

Q1 Labs Release Features Threat Management, Behavior Modeling

An updated, renamed version of Q1 Labs' security software includes real-time enhanced threat management, behavior modeling, alerting and reporting.

AntiOnline Spotlight: Securing Laptops

Unlike their deskbound cousins, portables regularly venture outside of the safe confines of your network. You may not be able to control where they go, but you definitely have some say in what hitches a ride back with them.

The Deadly Duo: Spam and Viruses, March 2004

The spam ratio only grew by 1 percentage point, but the economic damage from malware was staggering.

An Hour with Kevin Mitnick, Part 2

We conclude our talk with Kevin Mitnick as he provides a glimpse into the mindset of a hacker, discusses attitudes toward security spending and gives author Vince Barnes (and everyone else) a reason to think twice before taking caller ID at face value.

Security Trends: Archive: April 2004

Topic Centers

Articles by Type

Contact Us

More Security