Security Trends: Archive: September 2010

FBI Busts 37 in $3 Million Zeus Trojan Scam

The FBI and the U.S. Attorney's office in Southern New York filed charges against 37 people suspected of orchestrating a sophisticated international malware scam that stole more than $3 million from victims' bank accounts.

Image Spam, Old Tricks Top September Malware Threats

The destructive and fast-spreading "Here You Have" worm was one of a handful of security threats to plague enterprise IT departments this month.

Homeland Security Hosts Cyberwar Simulation

Department of Homeland Security convening officials from half a dozen other agencies and departments as well as a gaggle of foreign countries to test readiness and coordination mechanisms in response to a major cyberattack.

Microsoft Delivers Out-of-Band ASP.NET Patch

A security flaw in an important Microsoft Web technology triggered rapid development and testing of a patch to block further hack attacks on ASP.NET.

Microsoft Rushes Out 'Important' ASP.NET Patch

Microsoft can move pretty quickly to block zero-day holes when it wants to. The ASP.NET hole got the company's attention and it is rolling out a patch Tuesday, just ten days after it surfaced.

Protecting Your Business: Cyber Liability Insurance

Your general liability insurance may not cover the costs associated with a data breach. And the quality of your security controls can affect the cost of cyber liability insurance. Learn what you need to know before disaster strikes.

Stuxnet Worm Tags Iranian Nuclear Plant

Iran's official news agency said the worm had managed to infect computers operating at its first nuclear power plant, but had thus far only caused minor damage.

Spam Scam Targets LinkedIn Community

Security researchers at Cisco say the social network for professionals has been hit with a massive malware campaign designed to steal users' online banking credentials.

ChoicePoint Data Breach Victims Await Their Pittance

Two years after the data warehousing company admitted it once again failed to secure consumer data, its victims are starting to receive their compensation -- all $18.17 of it.

White House Leads Review of Federal Cyber Authorities

Pentagon cyber boss Gen. Keith Alexander outlines the daunting challenges ahead for military and civilian cybersecurity. Meanwhile, congressional efforts to overhaul the federal policy framework appear to have stalled.

New Email Solution Protects Privacy

VaporStream's software is designed to combine the ease of use of e-mail with the privacy and security of an in-person chat.

Remote Workers Put Enterprise Data at Security Risk

Symantec report finds that remote workers' surfing habits put corporate data at risk unless proper usage rules are defined and enforced.

Study: Data Loss Affects Nearly One-Third of Enterprises

Data loss events are continuing at a "fairly alarming rate" according to Keith Crosley of cloud-focused security firm Proofpoint, which recently released its seventh annual study of data loss in the enterprise.

Mouseover Hack Ravages Twitter Site

A piece of malicious JavaScript code embedded in the URLs of tweets is sending thousands of users to porn sites and other potentially dangerous locales.

Microsoft Scrambles to Patch Encryption Hole

Hole in server encryption could leave many systems open to attack, researchers and Microsoft officials say.

Google Improves Its Cloud Application Security

Free two-factor authentication feature is designed to add an extra layer of protection to Google's cloud applications.

Adobe Hustles to Release Flash Player Fix

Adobe Systems pushed out a fix designed to address a critical security vulnerability in its Flash Player a week earlier than it previously promised.

Google Updates Chrome Ahead of Adobe Fix

Yet another update for the Chrome browser and this time Google is getting the drop on a Flash fix ahead of other browsers.

McAfee Warns: In PC Security, 'Free' Is a Four-Letter Word

New study by McAfee finds that simply adding 'free' to any search for music, ringtones or porn triples the likelihood of being directed to a malicious website.

Rice University Exposes Student, Employee Data

Officials at Rice University are warning 7,000-plus staffers and students that their personal information was exposed after a portable storage device was stolen.

Security Vulnerabilities on the Decline?

JavaScript issues continue to mount, but according to new report, we’re better off than we were in 2006.

Top 10 Email Malware Threats

Despite spam and malware filters, email-borne Trojans and exploits continue to thrive, propagated by file attachments and embedded URLs. We rank the worst offenders and offer tips for protecting your network.

Google Chrome 6 Gets Updated for 9 New Flaws

Google patches Chrome 6 for security as development on Chrome 7 continues and the next generation browser race accelerates against Firefox and IE9.

Another Busy Patch Tuesday for Security Admins

Microsoft serves up a fresh batch of vulnerability fixes for September.

Why Facebook Is a Growing Concern for Your Business

Social networks should not be taken lightly --n ot by your employees and not by you. Chris Null asks, "What impact might Facebook activity have on corporate endeavors?"

HP Acquiring ArcSight for $1.5 Billion

Computing giant HP expands its security lineup with the acquisition of ArcSight's risk management and compliance offerings.

'Here You Have' Spam Outbreak Leaves Enterprises Reeling

IT administrators are still cleaning up their email servers after last week's potent 'Here You Have' virus inundated corporate servers with billions of spam messages.

CCNY Students Feel Sting of Data Security Mishap

More than 7,000 students attending City College of New York this week are receiving the bad news that their most sensitive personal information is up for grabs.

Malicious Website Tally Grows to 57,000 Per Week: Report

A three-month survey of the malware landscape finds that hackers are putting up thousands of bogus sites to steal users' banking and other personal information.

Four Hidden WLAN Security Threats

You may think your Wi-Fi network is secure, but unless you've addressed these four security threats, you may have left your corporate wireless network vulnerable to hackers.

Microsoft Cooking Up Baker's Dozen of Fixes for Patch Tuesday

Security administrators are put on notice that they have another busy week of applying vulnerability patches to Microsoft products.

Is Microsoft Looking to Buy Symantec?

Rumors and speculation over the possible takeover of Symantec, a valuable IT security acquisition, appear to have started a small buying spree for Symantec's stock.

Security Woes Don't Deter Smartphone Users

A new study from Pew Internet shows that smartphone usage is up--and so are spam and malware.

Mozilla Firefox 3.6.9 Security Updates Follow Microsoft's Lead

Mozilla is taking a page from Microsoft IE's security features as it updates the Firefox browser for 10 critical flaws.

Apple Hustles to Rid Ping of Spam

New social network on iTunes attracts more than one million users and more than its fair share of spam.

Pentagon Cybersecurity Boss Vows Privacy Protections

At O'Reilly Gov 2.0 Summit, Gen. Keith Alexander, head of U.S. Cyber Command pledges that national security and individual privacy are not working at cross purposes.

Four Great Open Source Firewall/Router Projects

The open source community offers many different firewall/router projects, including Linux-based and FreeBSD-based security stand-outs.

Google Researcher Finds New MSFT Zero-Day Exploit

Microsoft was caught off guard by public disclosure of a new zero-day hole in Internet Explorer 8. But the hacker who published the exploit says he notified Microsoft in advance and only acted after the company ignored him.

Microsoft Looks to 'Mitigate' Security Flaws With Updated Tool

Microsoft says it is shipping the newest version of an administrator's tool that helps manage key mitigation parameters in order to help corporate customers stay safer.

Why SCADA Security Matters--And What You Should Know About It

Worst case scenarios of distributed SCADA attacks include bringing down the power grid to a major metropolitan city, yet most SCADA experts are not security experts--and vice versa.

Twitter Retools App, Link Policies, Sparks Privacy Worries

Microblogging service alerts users to two changes to how third-party applications integrate with the site, raising privacy concerns in the process.

Microsoft Releases 'Fix It' for DLL Hole

The company moves to help thwart attacks that can seize control of users' systems by taking advantage of shoddy programming practices.

The Best Security for Wireless Email

Sending email over a wireless network, either Wi-Fi or your mobile carrier's data network, is a risky proposition. Learn how to protect your corporate and personal communication.

Security Trends: Archive: September 2010

Topic Centers

Articles by Type

Contact Us

More Security