SecurityProNews
This is an iEntry publication
advertising, headines, sign up
Free Newsletters
Part of the iEntry Network
over 4 million subscribers
SecurityProNews
CRMProductReview
CTOUpdate

Send me relevant info on products and services.






Newsletter Archive: 2004
SecurityProNews: Software Edition
VMware Workstation enables software developers to develop and test the most complex networked server-class applications running on Microsoft Windows, Linux or NetWare all on a single desktop. Essential features such as virtual networking, live snapshots, drag and drop and shared folders, and PXE support make VMware Workstation the most powerful and indispensable tool for enterprise IT developers and system administrators.

http://www.securitypronews.com/2004/1209.html
12.09.04
Google Corks Gmail Hole
Google has put a stop to a security flaw that threatened to allow cyber attackers full control over members email accounts. Gmail was having problems in the way it authenticated users. The attacker could steal a cookie file that identifies the user by making a harmless link to Google’s own website. "Google was recently alerted to a potential security vulnerability affecting the Gmail service. We have since fixed this vulnerability, and all current and future Gmail users are protected," Google spokesman Nathan Tyler said.

http://www.securitypronews.com/2004/1101.html
11.01.04
Google Used In Phishing Scheme
A new phishing scam is redirecting users three times through Google to fake registration website so it can beat antispam technology. The email says it’s from Yahoo administrators and tries to get people to sign up for new email accounts. The hackers are using a clever combination of Yahoo and their own sites to claim the accounts for themselves.

http://www.securitypronews.com/2004/1027.html
10.27.04
Automatically Back Up Your Data Offsite Every Night
WebWorks FinalDraft is the next-generation document review solution, giving content authors the power to generate and distribute browser-based drafts directly from their MS Word or Adobe FrameMaker documents, and providing every reviewer with a full-featured and intuitive online viewing and commenting environment, with no training or added cost.

http://www.securitypronews.com/2004/1023.html
10.23.04
MyDoom Targets AntiVirus Firms
Fake Jacko Movie Trying To Recruit Zombie Computers. In a hoax which tries to get users to download a Trojan horse, hackers are exploiting the name of Michael Jackson. Computer users are pointed to a phony video trying to coax them to download the unsuspected virus...

http://www.securitypronews.com/2004/1018.html
10.18.04
Global Cooperation Equals Better Email
At a conference called to debate anti-spam measures, US & UK governments discussed working more closely finally stop spammers.

http://www.securitypronews.com/2004/1012.html
10.12.04
Opting-Out Could Be Opting-In For Trouble
MessageLabs has issued a warning to Internet users informing them not to click on the “opt-out” link in spam emails. They had discovered a number of messages turning PC’s into a spam distribution point...

http://www.securitypronews.com/2004/1008.html
10.08.04
Is Lightning Scarier Than Hackers?
According to a poll performed by the National Cyber Security Alliance (NCSA) Americans fear lightning more than being hijacked by hackers.

http://www.securitypronews.com/2004/1004.html
10.04.04
Putting A Stop To Phishing
Making an effort to fight against the rise of phishing attacks on consumers, McAfee has released an update to their spam prevention software and personal firewall services...

http://www.securitypronews.com/2004/1001.html
10.01.04
White Paper: Moving from Implicit to Explicit Permissions
Optimizing network access in terms of connectivity and security is a classic case of balancing what are essentially opposing goals. Security is optimized by lack of access; connectivity is optimized by complete access. Read how Adaptive Network Security changes everything.

http://www.securitypronews.com/2004/0928.html
09.28.04
Hackers Googling To Access Photocopiers
The latest networked item being watched by hackers are photocopiers. Hackers have learned how to use search engines, most notably being Google, to watch what they are photocopying...

http://www.securitypronews.com/2004/0927.html
09.27.04
Hole In The Google Toolbar?
A new security flaw has been discovered in the Google toolbar. This flaw could ultimately allow the execution of malicious scripts…

http://www.securitypronews.com/2004/0922.html
09.22.04
Writing Viruses, Good For Your Career?
The 18-year-old author of the Sasser virus, and possibly the Netsky virus, has been offered a job by the German firewall company Securepoint. Does this seem like a reward to anyone else?...

http://www.securitypronews.com/2004/0920.html
09.20.04
Virus Authors Seek Anti-Virus Work
The latest MyDoom worm variant comes with a secret message from the authors; they are asking antivirus vendors for a job. No, I can’t think of a better way to search for jobs in the antivirus industry…

http://www.securitypronews.com/2004/0913.html
09.13.04
Could Math Equation = eDisaster?
In a story that sounds like a combination of Indiana Jones and Good Will Hunting, one of the seven “holy grail” math equations are on the verge of being solved, most notably being the Riemann hypothesis...

http://www.securitypronews.com/2004/0908.html
09.08.04
New Worm Takes Over Users' Web Cams
Ever get the feeling you are being watched? That may no longer just be paranoia. A variant of the Rbot worm is able to take over users’ web cams and use them to spy on unsuspecting computer owners.

http://www.securitypronews.com/2004/0825.html
08.25.04
Winamp Exploit Could Lead to Security Risk
A recently discovered flaw in the popular Winamp multimedia player by AOL subsidiary, Nullsoft is sure to hit a sour note with unfortunate victims. Spyware authors are exploiting the way Winamp loads its graphical themes (skins) for the distribution and infection of PCs.

http://www.securitypronews.com/2004/0831.html
08.31.04
New Worm Takes Over Users' Web Cams
Ever get the feeling you are being watched? That may no longer just be paranoia. A variant of the Rbot worm is able to take over users’ web cams and use them to spy on unsuspecting computer owners.

http://www.securitypronews.com/2004/0825.html
08.25.04
Microsoft's XP Security Update Gets Mixed Reviews
Microsoft Release of Service Pack 2 Doesn't Go As Planned. Only a few hours after home users started securing their computers with an update for Windows XP, security experts found ways around it. Discoveries made by two security firms show that some holes have been left open.

http://www.securitypronews.com/2004/0823.html
08.23.04
New MyDoom Worm Variant Poses For Pictures
For the moment, the newest member of the rapid growing MyDoom family goes by the name "MyDoom-S". This edition spreads through an e-mail claiming to contain funny pictures. California based McAfee, Inc. rated the new worm as a medium risk. For the worm to strike, a computer user must open the infected email attachment.

http://www.securitypronews.com/2004/0819.html
08.19.04
You've been selected for complimentary membership- no strings attached
You’ve been selected for complimentary membership to SearchSecurity.com, the largest community of security-focused enterprise IT pros anywhere on the Web. Take 30 seconds to complete your personal member profile and gain access to free infosecurity white papers, live security-focused webcasts, interactive discussion forums with your peers, free e-newsletters including breaking virus alerts as they occur, and much more.

http://www.securitypronews.com/2004/0713.html
07.13.04
How to Spoof-proof Your Logins
Depending on which side of the consumer-business equation you are on, you might either expect to perform a transaction with another machine or you might expect a person to be on the other end of the transaction. When you run a business that requires legitimate user-accounts, you may be surprised to find that some of your accounts may belong to a single person—one using a skillfully-crafted script running on his machine to create many "virtual" accounts with your business. These accounts tie up your resources, bandwidth, and other time and materials.

http://www.securitypronews.com/2004/0622.html
06.22.04
Microsoft Launches New Security Program
Microsoft Corporation India today announced the 'Protect Your Business' aimed at IT administrators in small, medium and large enterprises. Under this campaign, Microsoft will roll out various initiatives to help enterprises secure their IT environment by providing information, tools, guidelines, and updates on a regular basis.

http://www.securitypronews.com/2004/0602.html
06.02.04
Counting the cost of forgotten passwords
FORGOTTEN or lost passwords can cost companies big bucks. Technology researcher Gartner estimates it costs $US14-$US28 ($20-$40) for companies to reset a password.

http://www.securitypronews.com/2004/0525.html
05.25.04
What is security without bandwidth control?
Internet security is a sizzler, a visit to the most recent international IT conferences confirms that an increasing number of security and network optimisation products are now available to those that want to keep their private data, well, private.

http://www.securitypronews.com/2004/0519.html
05.19.04
Businesses Ignore Mobile PDA Threat
When it comes to mobile devices, why do so many companies avoid dealing with the security issues such devices pose?

http://www.securitypronews.com/2004/0421.html
04.21.04
NEW Step-by-Step SSL Guide for MSIIS from Thawte
thawte 's new guide will show you how to test, purchase, install and use a thawte Digital Certificate on your MS IIS web server

http://www.securitypronews.com/2004/0415.html
04.15.04
Incidence Response Teams
A major part of any organisations IRP is the team that is responsible for handling the incidents using the process and method outlined in section 1.2.1. Whilst it is strongly recommended that every organisation should have an IRP in place, this is not necessarily the case with an incidence response team. However, each organisation should have an individual such as the corporate security officer who is responsible for the IRP of the organisation.

http://www.securitypronews.com/2004/0407.html
04.07.04
Complimentary magazine on integrated security // for you on behalf of Cisco
With the continuous evolution, increasing speed, and damage of threats from inside and outside your network, security must be integrated into everything and everywhere. Cisco integrated security offers easy collaboration between network and security technologies – keeping your data safe and people productive. Even with limited resources.

http://www.securitypronews.com/2004/0325.html
03.25.04
Controlled Network Attack Simulation
Setec Security's Penetration Test is a controlled network attack simulation that employs the same tools and techniques used by malicious hackers to identify and isolate exploitable security vulnerabilities and to expose potential entryways to vital or sensitive data. Our highly experienced and trusted ethical hackers follow a robust methodology that focuses on the entire

http://www.securitypronews.com/2004/0309.html
03.09.04
Incidence Response Programme
As the reliance of businesses on their information assets continue to grow so will the number of computer/security incidents. In the protection of their informational assets, most business’s will perform the following functions:

http://www.securitypronews.com/2004/0303.html
03.03.04
Security Spotlight
Although it is still early in 2004, significant developments and events continue to advance the information security industry, aiding organization's in reducing their risk, safeguarding assets, and assuring protection from the threat of a security breach.

http://www.securitypronews.com/2004/0226.html
02.26.04
Random Numbers
Until fairly recently, cpu's had no direct way to generate random numbers. Intel's Pentium III introduced a hardware random number generator that uses thermal noise "to generate high-quality random and nondeterministic numbers" , but prior to that systems that needed good random numbers had to relay on add-on boards or other external input.

http://www.securitypronews.com/2004/0218.html
02.18.04
Understanding Microsoft Internet Security And Acceleration Server
Planning decisions are critical for a successful firewall implementation. Missing some of the most important points when designing a firewall implementation can jeopardize our information integrity and the overall network security.

http://www.securitypronews.com/2004/0204.html

02.04.04
Secure Network Integrity: Free Yankee Group Special Report
No matter what industry you're in, your business depends on your network. Without fast, efficient, and reliable network connectivity, even the most advanced business applications become so much silo-ware—warming your data center, but doing nothing to enhance your bottom line.

http://www.securitypronews.com/2004/0127.html
01.27.04
Strong Authentication Alternatives Report For Customer X
Customer X has a requirement for remote users to use strong authentication when accessing Customer X networks and systems. The use of username and passwords does not constitute strong authentication.

The requirement extends to allowing users to access the Customer X internal network from any computer around the world irrespective of whether it is a Customer X owned computer or not.

http://www.securitypronews.com/2004/0121.html

01.21.04
Windows XP Internet Security For Advanced Users
You can't afford to have a computer without any protection. Windows XP shipped with several advanced security tools to help users resolve these common problems. Internet security and protecting internet connections is critical. Fast connections and wireless access make users even more vulnerable. Nowadays, everyone has a wireless router in their home. If you want to protect your financial data and personal files, this article will help secure your desktop computer and share the security configuration with other computers.

http://www.securitypronews.com/2004/0107.html

01.07.04