Monday - April 28, 2008
A mass SQL injection attack has infected hundreds of thousands -- as many as 500,000, according to some accounts -- of normally trusted Web sites, including those of the United Nations and several governments. The attack, which mimics another recent malware episode, was launched with the apparent goal of stealing visitors' user information. While there is nothing new about that, there are some differences in this attack that are worrying the Internet security community.
[More...]
Thursday - April 24, 2008
For enterprises, the primary reason for adopting Voice over Internet Protocol phone service is money. Long-distance phone calls placed over the Internet typically cost a mere fraction of those placed under the business rate plans offered by traditional telephone companies.
[More...]
Tuesday - April 22, 2008
Malware creators are taking advantage of the controversy over the upcoming Olympic Games to spread their wares for illicit financial gain. Latching onto the Free Tibet political demonstrations that have spread around the world, would-be thieves have embedded a piece of rootkit malware that logs keystrokes in an executable Flash movie file called "RaceForTibet."
[More...]
Monday - April 21, 2008
Internet service providers that serve advertising when a user requests a Web page that doesn't exist are exposing their users to a giant security breach, according to security researcher Dan Kaminsky. The vulnerability resulting from the practice, which is an increasingly common way for ISPs to make money from users' typos, was identified last week on Earthlink by Kaminsky.
[More...]
Thursday - April 17, 2008
Apple issued four security updates Thursday for its Web browser Safari, one of which patches the highly publicized -- yet secret -- hole that let security expert Charlie Miller burrow his way into a MacBook Air at the CanSecWest security conference last month. The vulnerability was immediately disclosed to Apple from the conference, but today is the first time it's been widely identified.
[More...]
Friday - April 11, 2008
The face of online security will change drastically, Jim Bidzos, founder and chairman of trusted certificates vendor VeriSign, said in a keynote speech on Wednesday at the RSA Security Conference in San Francisco. "In the '70s in enterprises, there were mainly mainframes." When local area networks came along in the '80s, tokens were introduced and "they were good enough for this kind of access," Bidzos said.
[More...]
Thursday - April 10, 2008
How do you respond when hit by a cyber attack tsunami? That's the question Cyber Storm II, the most comprehensive cyber exercise ever held in the U.S., was designed to answer. Forty private sector companies, 11 Cabinet-level agencies, 10 states and five countries were involved in the March exercise.
[More...]
Wednesday - April 9, 2008
Microsoft has unveiled the public beta of its Forefront enterprise security product, known as "Stirling." This is a single product that delivers coordinated protection across desktop and server applications and the network edge. It comes with a single dashboard that shows all the systems protected by Stirling.
[More...]
Tuesday - April 8, 2008
The federal government should step in and pass laws to ensure computer security, the CEO of Symantec told a security conference Tuesday. In the last six months of 2007, nearly 50 million people worldwide were the victims of identity theft, and 70 percent of the most common malicious code used in attacks on computers targeted confidential files.
[More...]
Tuesday - April 8, 2008
IBM unveiled a new research initiative intended to solve problems associated with virtualization and security Tuesday in San Francisco at RSA 2008. Code-named "Phantom," the project will be run jointly by IBM X-Force threat analysis team and IBM Research. The project seeks to create virtualization security technology to efficiently monitor and disrupt malicious communications between virtual machines, the company said.
[More...]
Tuesday - April 8, 2008
Project Concordia -- formed last year by vendors offering electronic identity products to create a harmonized standard and ensure identity initiatives and protocols can interoperate -- held a series of demonstrations by seven vendors: FuGen Solutions, Internet2, Microsoft, Oracle, Ping Identity, Sun Microsystems and Symlabs.
[More...]
See More Articles in Exploits & Vulnerabilities Section >>
Sign Up for Business and Technology News Alerts
Headline Feeds
