Click here

Security Trends: Archive: February 2010 

Editor's Pick: Deploying and Securing a Wireless LAN

Learn how to plan, deploy, secure, and manage your home or business Wi-Fi network.

Trojan Pretends to Be Microsoft Security Suite

Quick quiz: Does Microsoft charge users for its Security Essentials software? How do you tell whether software is from Microsoft or from hackers trying to hold your PC for ransom?

Four Network Security Strategies That No Longer Work

Columnist Sonny Discini takes a stand against outmoded security policies and points out flaws in the conventional wisdom.

Microsoft Takes Down Malicious 'Waledac' Botnet

But what can users do to disinfect hundreds of thousands of compromised computers worldwide, even as Microsoft suspends nearly 300 rogue Internet domains?

Phishing, SQL Injection Attacks Surged in 2009

IBM's X-Force security report finds that hackers have mastered the art of attacking Web browsers and document readers, even though application security has improved.

10 Ways to Protect Your Network from SQL Injection Attacks

SQL injection attacks pose a massive potential threat to your organization. Learn ten ways to prevent or mitigate them.

Deterring Cybercrime

A Lockton white paper offers advice on minimizing risk and maximizing security.

House Hears Testimony on Location vs. Privacy Debate

As location-based services begin to take off, privacy concerns have also been raised. Just how public should your location at any given time be?

Intel Hit By Cyber Attack

Chipmaker says it, too, was hit by a 'sophisticated' cyber attack in January, right around the same time that Google, Adobe, and a couple dozen other enterprises were hacked.

Knight Security Deploys 3,000-Camera Network

The Texas-based company is in the process of deploying a secure network of more than 3,000 video cameras covering 335 buildings throughout its home state.

Sens. Push for Government Cybersecurity Authority

Co-sponsors of controversial cybersecurity legislation press for expanded executive authority in hearing that lays out troubling concerns about U.S. digital defenses.

The State of Enterprise Security

Symantec reports that 75 percent of the organizations it surveyed experienced cyberattacks in the last 12 months.

Most Enterprises Worldwide Hit by Cyber Attack in 2009

Symantec's 'State of Enterprise Security' report finds that 100% of surveyed companies experienced "cyber losses," with an average loss of $2 million each in 2009.

3Com Announces New Network Security Products

3Com announced Monday a trio of new products including a new switching platform and a pair new security initiatives from its TippingPoint security division.

Data Security Breach at Valdosta State University

The IT department at Valdosta State University discovered that a hacker managed to breach a school server storing the personal information of more than 170,000 students and faculty.

Security Showdown: Mac vs PC

Columnist Kenneth van Wyck takes Windows 7 and Snow Leopard out for a spin to see which operating system offers the best security.

VeriSign Debuts New Online Trust Seal

The Internet's hallmark for trusted sites rolls out a new mark signifying that a site is free from malware, aimed at sites that don't require SSL.

Zeus Is King

A white paper from Symantec offers an in-depth analysis of the popular botnet package.

McAfee Updates SaaS Security Features

The security software company announced improvements to its portfolio of on-demand e-mail and Web protection applications after eclipsing the 575,000-customer threshold.

Do Geotagging and Presence Put Your Enterprise at Risk?

Sometimes knowing who, what, where, and when is not such a good thing. Security consultant Diana Kelley explores the dangers of geo-location to your business's information security.

Review: Motorola AirDefense Wireless VA Tool

Testing wireless security is critical to safeguard business data and comply with regulatory mandates. This in-depth review evaluates Motorola's new AirDefense add-on.

Examining Kneber

A NetWitness white paper provides a thorough analysis of the Kneber botnet.

Wiretapping the Internet: Legal and Dangerous?

Technology built into routers from 15 vendors could enable an attacker to wiretap anyone, but there are fixes to be had.

Mozilla Improves Browser Security with Firefox Patches

Mozilla offers Firefox 3.0.18 and 3.5.8 patches for a trio of critical security vulnerabilities that Mozilla fixed a month ago for Firefox 3.6 users.

Metasploit Gains Further Commercial Adoption

Yet another commercial tool integrates open source metasploit for security testing – is this a good thing?

Microsoft Says Rootkit Causes XP 'Blue Screens'

After a week-long investigation, Microsoft bug sleuths claim they've hunted down the cause of multiple reboots and crashes inflicted on Windows XP users.

Massive Cyber Attack Breaches 2,500 Organizations

So-called "Kneber" botnet collects log-in credentials to online financial systems, social networking sites, and e-mail systems to steal corporate and government data.

A Surge in Spam

A new report from M86 Security provides a detailed analysis of spam during the second half of 2009.

U.S. Prepares for Cyber Attack

In a cyberwar-game simulation held Tuesday in D.C., the National Security Council simulated its response to a massive cyber attack--and raised troubling questions.

How to: Set Up TrueCrypt Disk Encryption, Part 1

Eric Geier gives step-by-step instructions for improving laptop security by protecting your data with TrueCrypt disk encryption.

Cyberwar Is Already Here

A ScanSafe report says cybercriminals are now focusing on much broader targets than credit cards and other personal data.

Google Buzz Gets Second Privacy Revamp

In a second major update, Google's week-old social service gets another makeover in response to user concerns over privacy.

Brocade, McAfee Team Up on Network Security

The companies are collaborating on a set of jointly designed, interoperable applications that will be integrated into Brocade's networking equipment products.

Securing Data in Motion

A CipherOptics white paper examines the key issues surrounding network encryption.

Google Soups Up Buzz Security Policy With Privacy Controls

Responding to a torrent of criticism, Google has made its privacy controls more visible in its new social service Buzz, and pledges to keep iterating as it looks to build a social network out of e-mail.

Microsoft Pulls Crashing XP Security Update

Company confirms that update meant to fix 17-year-old security bug is causing endless reboots and the Blue Screen of Death for some Windows XP users.

Identity Theft Cost Victims $54B in 2009

Javelin Strategy & Research report finds that identity theft cases increased 12 percent last year and affected more than 11.1 million adults in the U.S.

Laptop Security: Florida Insurer Loses Subscriber Data

AvMed Health Plans is warning more than 200,000 insurance subscribers that a pair of laptops were stolen sometime in December, exposing customers' names, addresses and Social Security numbers.

Olympic Cybersecurity

A report examines key cybersecurity issues related to the Olympic Games in Vancouver.

Google Buzz Triggers Privacy Concerns

Excitement about Google's new social e-mail application has given way to concerns that the service threatens to publish sensitive information about people's social connections.

Mozilla Retracts Add-On Malware Accusation

The Firefox developer revealed it had mistakenly identified an add-on to its popular browser as malware. Version 4.0 of the Sothink Video Downloader does not contain a Trojan.

Google Chrome Updated for Six Security Flaws

Chrome 4 gets its first security fixes--three of them rated as "high" in importance. But it's not all bad news.

Improve Network Security with DNS Servers

Using an alternative DNS provider, such as OpenDNS or Google's Public DNS, can improve performance and increase security. It's worth taking the time to compare your alternatives.

Hackers Break Into Ceridian's Payroll System

More than 27,000 people had their names, Social Security numbers, and in some cases, bank account information, compromised when Ceridian's online service was breached.

China Tops in Botnets, SQL Injection Attacks

McAfee security researchers predict Internet-based cyber attacks will continue to escalate in quantity, sophistication as hackers target the most popular social networking sites, search topics in 2010.

Securing Email

A MessageLabs white paper looks at the challenges of managing and securing email as a critical business component.

Microsoft Issues 26 Bug Fixes for February

In this month’s Patch Tuesday, software giant Microsoft releases one of the largest bundles of security fixes ever, but not one for the latest zero-day.

Microsoft's 'Reliability Update' Is Not So Reliable

One of several non-security updates is causing system crashes for some Windows 7 and Windows Server 2008 R2 users. What does Microsoft have for a solution?

Top Ten Data Breaches and Blunders of 2009

As we strive to improve data security in 2010, we can learn from some of the biggest data mistakes made last year--including one single breach that compromised 130 million records (this means you Heartland).

Hackers Feast on SQL Injection Exploits

A review of major data breach incidents in the past year found that most hackers used SQL injection to infiltrate enterprise networks.

Understanding the Malware Threat

A Sophos white paper offers advice on how to stay protected.

Buying Guide: Anti-Virus Software

Good anti-virus protection is a must, but which should you choose and how much--if anything--should you pay?

IT to Tackle Post-Super Bowl Network Security

No matter who wins the game, network security firm warns that post-Super Bowl Monday could leave enterprises dealing with security issues.

Shifting Sands in Strong Authentication

A Forrester Research report looks at recent changes in the strong authentication market.

Hackers Breach Iowa Gaming Commission Database

Hackers, possibly from China, managed to infiltrate the Iowa Racing and Gaming Commission's database last month.

Microsoft Warns Users of Black Hat Zero-Day

Microsoft warns users to protect themselves from a zero-day bug in Internet Explorer (IE) after it was disclosed Wednesday at the Black Hat hacking and security conference.

13 Bug Fixes Coming on Patch Tuesday

Microsoft's February patch drop is a doozy with 13 patches planned for next week's monthly Patch Tuesday updates.

Threats for 2010

A MessageLabs white paper looks at the evolving nature of malware threats to the enterprise.

How to: Protect Your Website Using robots.txt, Part 2

In the second and final installment in this Website security tutorial, we cover some additional ways to manage Web crawlers.

Black Hat: Attack Can Turn IE Into a Public File Server

Old flaws with new attack vectors re-emerge for IE on Windows XP, but there is help for users.

The Age of Cyberwar

A McAfee report finds that 54 percent of security executives say their companies have already suffered large scale cyber attacks.

Does Social 'Insecurity' Put Enterprises at Risk?

Security software vendor Sophos' survey reveals that 72 percent of companies are concerned that employee behavior on social networking sites, including Facebook and Twitter, will put their data at risk.

Online Banking Passwords, Usernames Widely Reused

Report finds the majority of financial Web site customers reuse the same logins elsewhere, posing a potentially serious security risk.

Haiti, World Cup Emerge as Latest Malware Lures

Fake charities tied to the devastating earthquake in Haiti and 419-style scams related to the upcoming World Cup soccer tournament were common spam themes in January, according to AppRiver.

Yet Another Medical Data Security Breach

More than 4,000 patients' personal information was compromised after a laptop was stolen from an employee of the University of California, San Francisco (UCSF) medical school.

Flash Is at Risk, But It's Not All Adobe's Fault

Black Hat security researcher details flaws including XSS-like attacks -- and what Web site owners and developers can do to avoid them.

PC Security Tips for Corporate Executives

When it comes to corporate data, you can never be too careful. Security expert Michael Horowitz offers invaluable tips for securing your PCs.

Cloud Security Wunderkinds

Security is among the biggest factors that could hinder broader cloud adoption. These two startups have novel solutions that will help drive adoption in 2010 and beyond.

Software Lockdown Options

A Bit9 white paper examines various options for preventing the installation and execution of unauthorized software.

Seven Simple Wireless Security Tips

Follow these seven wireless security tips to lock down your home or small business Wi-Fi network.