iEntry 10th Anniversary RSS Archive

IT Management Begins With Security
SecurityProNews > Insider Reports > Insider > Corporations Slow To Install SP2
Search:
[ insider_reports_insider ]

Corporations Slow To Install SP2



Chris Richardson
Contributing Writer
2005-04-05

SecurityProNews: Insider Reports Insider Reports RSS Feed


A study conducted by AssetMetrix determined a large number of corporate PCs have been slow to install Microsoft's Windows XP Service Pack 2.

Snail's Pace
Corporations Can Be Slow To Install SP2

AssetMetrix Research Labs surveyed 251 North American corporations, which employ over 136,000 PCs. The analysis found less than 25 percent of these computers have the service pack installed.

When Microsoft released SP2, as a response to customer requests, they issued an 8-month window where delivery of the update was not mandatory. This window closes on April 12, 2005. Those who do not have SP2 installed will have Windows XP Service Pack 2 delivered to them via the Windows Update tool.

Most of the companies who do not have SP2 installed are doing so in order to further test the update with current computers and networks.

Steve O'Halloran, managing director of AssetMetrix Research Labs, had these thoughts, "Microsoft allowed a significant period of time to accommodate companies' demand to test and validate Windows XP SP2 within their IT infrastructure. Based on our research, a substantial number of companies have yet to decide whether to accept or embargo Windows XP SP2. To date, we have observed that 40% of companies using Windows XP have actively avoided upgrading to SP2, and only 7% have actively accepted it. The other 52% of the companies showed no direction or policy towards SP2, and may find themselves having support issues by allowing multiple editions of Windows XP to exist in their infrastructure."

After the suspension date, those who do not have SP2 installed will undoubtedly face a number of upcoming incompatibilities with future Windows support and upcoming software updates.

"In general, we at AssetMetrix Research Labs recommend that companies deploy Service Pack 2, and we recommend proper testing and verification before the April 12 deadline," O'Halloran said.


New Bugs Found In Microsoft Outlook, Internet Explorer

Once again, it appears the security vulnerability bug has bitten Microsoft's two popular Internet-related tools, Outlook and Internet Explorer.

The findings were made by eEye Digital Security, who categorizes the newly discovered security flaws as high risk. A report by Boost Marketing reveals:

The flaws allow malicious code to be executed on both programs with minimal user interaction, according to the eEye security bulletin. Hackers could gain complete control of users computer systems.

eEye Digital Security indicated all versions of Windows XP, NT and 2000 are vulnerable to being exploited. According to Microsoft, there have been no reported attacks making use of these vulnerabilities. There has been no word from Redmond concerning the release of a fix or patch addressing these new security issues.


Man Detained For Using Trojan To Defraud European Banks'

A report by Sophos.com revealed Estonian police detained a 24-year old man because he was suspected of using a Trojan horse to defraud a number of European banks. Apparently, the individual used the malicious program to steal money from a large number of European Internet bank accounts.

The Sophos report indicates:

The man, who has not been named, lives in Tallinn and is alleged to have sent a Trojan horse which could steal banking usernames and passwords from computer users to thousands of internet users. The suspect has been detained following a year-long investigation by computer crime authorities across Europe into what police believe could be the theft of millions of euros from accounts in Britain, Estonia, Germany, Latvia, Lithuania and Spain.

According to Aivar Pau, a spokesman for Estonia's central criminal police, it was the biggest case of online bank theft in Estonian history. If the man is charged and found guilty he could face up to five years in prison.


Evidently, the man in question distributed the Trojan through a spam campaign, which offered recipients information about job offerings. Once the link within the email was clicked, users were taken to a webpage that infected their computers with the Trojan in question.

Graham Cluley, senior technology consultant for Sophos, had these thoughts concerning these types of attacks, "The last 12 months have seen a dramatic rise in the number of new viruses, worms and Trojan horses designed to steal the keystrokes of innocent computer users. Sophos's labs analyse approximately 15 new pieces of malware, which include this sinister payload every day, compared to 5 a day a year ago. The information stolen by this kind of phishing attack can be equivalent to someone watching over your shoulder as you type your password into the computer. Hacking gangs are actively hunting for vulnerable computers in order to steal information and empty bank accounts."



About the Author:
Chris Richardson is a search engine writer for WebProNews. Visit WebProNews for the latest search news.

More insider_reports_insider Articles

SecurityProNews: Insider Reports Insider Reports RSS Feed


Get Your Site Submitted for Free in the World's Largest B2B Directory!

Email Address:
* URL:
*
*Indicates Mandatory Field

Terms & Conditions

iEntry Featured Services: Jayde Member Services | Forums | Freeware | Advertise with Us

Virus Warnings

Subscribe to
SecurityProNews FREE!



[ more newsletters ]

article resources
Search Articles:
[advanced search]

WebProWorld.com
Get in-touch with industry experts and leaders
Post your site for review by expert and peers
Ask Security, IT, Development and Design questions

Free Membership: Join Now!

Visit WebProWorld.com

Titan Quest Forum
The #1 Titan Quest forum
Halo 3 Forum
The best Halo, Halo 2, Halo 3 forum
Nintendo Wii
Nintendo Wii news and views
Mac Software
The best in OS X freeware
Graphics Forum
Your source for graphic tutorials
SecurityProNews.com | Breaking eBusiness News Get Your IT Questions Answered - Click Here SecurityProNews News Feeds