New ConsoleWorks Thinks ‘Out Of The Box’
TECSys Development Inc (TDi), a provider of security event management (SEM) and regulatory compliance products, unveiled a preconfigured version of their ConsoleWorks software designed to work "out of the box". Directory:
> News > Security News
Date: 2006-03-31
|
Some Would Rather Fix Than Prevent
A recent report reveals that more companies would rather spend money cleaning up the aftermath of an attack on their network security than deal with it proactively. The report, from CSO Magazine Security Sensor, states that security education is now only the third most important priority for security chiefs this year, due to the costs associated. Directory:
> News > Security News
Date: 2006-03-31
|
This USB Will Self-Destruct
Authenex, provider of authentication e-security applications, announced the release of the v4 A-Key token, a driverless USB storage device can be taken anywhere and used on any PC without installation. The device is designed to "self-erase" if an unauthorized person tries to access it. Directory:
> News > Security News
Date: 2006-03-31
|
Temporary Patch Released For IE Flaw
A highly critical exploit is circulating via a flaw in Microsoft's Internet Explorer (IE) Web browser. Until Microsoft releases its own patch, eEye Digital Security has released it's own downloadable one. Directory:
> News > Security News
Date: 2006-03-29
|
YouTube Pops A Cap In Infringement
Users of the video sharing website have been gleefully posting all kinds of entertaining video content for others to see; unfortunately, quite a bit of that content has not been shared with the express consent of copyright holders for those works. Directory:
> News > Security News
Date: 2006-03-29
|
Winny The Rue: Japanese Virus Exposes File Sharers
It's no secret the Japanese take their work home with them. Many live in company apartments that further blur the boundaries between their professional and personal life. But for the past two years, a computer worm has exposed the sensitive information of every field - and the man with the skills to stop it is facing jail time. Directory:
> News > Security News
Date: 2006-03-28
|
Bots Hunting Bank Information
Verisign's security research firm iDefense thinks the Metafisher bot (aka Spy-Agent and PWS) has a presence on a million computers and could leap into millions more. Directory:
> News > Security News
Date: 2006-03-28
|
P2P Worm Identified
A new worm is catching the attention of computer security agencies. W32/Inject-H spreads via peer-to-peer networks, acting as a backdoor Internet Relay Chat (IRC) to exploit Windows-based computers. Directory:
> News > Security News
Date: 2006-03-28
|
US PC Purchase From Lenovo Prompts Paranoia
Lenovo has a deal in play to provide 15,000 PCs to the State Department, but fears that the Chinese government may have stuffed those computers with bugging equipment have prompted calls for a probe into the matter. Directory:
> News > Security News
Date: 2006-03-28
|
WAA Sets Anti-Spyware Principles
A group of companies like Google, Yahoo, and Webtrends back the Web Analytics Association, announced they have formed and adopted an anti-spyware statement of principles. Directory:
> News > Security News
Date: 2006-03-27
|
FreeFlixTix Paying FTC $900,000 For Spam
Jumpstart Technologies received a hefty civil penalty for violating the federal CAN-SPAM Act, with the Federal Trade Commission securing a permanent prohibition on the company preventing it from committing future unlawful spam practices. Directory:
> News > Security News
Date: 2006-03-27
|
Russian Site Busted Selling Pirated eBay User Info
The old iron curtain closed on a Russian website last week after it was found to be offering pirated eBay seller PayPal account information. Noticed and reported by security software company Sunbelt, eBay took measures to have the site taken down. Directory:
> News > Security News
Date: 2006-03-27
|
How To Fight a Pirate
The Russian boxer looks severely, coldly, machine-like into his opponent's eyes and says, not unlike a combine would, "I must break you." This is not Ivan Drago, though, it's a software manager with a hard lesson for a pirate. Directory:
> News > Security News
Date: 2006-03-27
|
‘Sophisticated’ Trojans Found In the Wild
Several security companies have issued warnings about two recent exploits that take advantage of weaknesses in Windows and Internet Explorer to steal user information, including passwords for access to bank accounts, email, and insurance information. Directory:
> News > Security News
Date: 2006-03-27
|
IE Exploits Hit The Web
The createTextRange() method exploit could permit the arbitrary execution of code through Internet Explorer, and malicious sites that take advantage of the as-yet-unpatched flaw have been sighted online. Directory:
> News > Security News
Date: 2006-03-27
|
Snort Acquisition Stuffed Up By Feds
The purchase of network security company Sourcefire, the makers of the Snort intrusion detection and prevention system, by Israel's Check Point has been withdrawn in the face of withering government scrutiny of the deal. Directory:
> News > Security News
Date: 2006-03-24
|
Kazaa and Others Flunk Badware Test
StopBadware.org, a consumer protection initiative developed to combat spyware, released its first Badware Watch List report since the organization's launch in January of this year. Kazaa, MediaPipe, SpyAxe, and Waterfalls 3 all flunked. Directory:
> News > Security News
Date: 2006-03-24
|
Watch Out For IRS Phishing Net
The National Crime Prevention Council (NCPC) is warning taxpayers to watch out for cyber crooks posing as the IRS to steal personal information. The IRS and Treasury Department have reported an increase in "phishing" scams this year. Directory:
> News > Security News
Date: 2006-03-23
|
VeriSign Admits To Profiling
VeriSign unveiled this week its Security Risk Profiling Service, a security package aimed at helping enterprises identify, visualize and quantify information security risks. The service provides a "holistic" view of threats, vulnerabilities, network access policies and business impacts by generating a risk score based on those factors. Directory:
> News > Security News
Date: 2006-03-23
|
Did Your SEO Just Scam You?
A nebulous job description related to search engine success that the non-technical entrepreneur needs could be what parts you from your cash and enriches her $200k/year "SEO business." Directory:
> News > Security News
Date: 2006-03-23
|
Crimeware Trojan Detected
PandaLabs has detected a new Trojan called Trj/Briz.A, whose main aim is to steal personal user data from affected computers. This code stands out because it specializes in stealing bank details and data from web forms and that its author customizes the code for hackers. Directory:
> News > Security News
Date: 2006-03-21
|
Help Take A Bite Out Of E-Crime
The pros at WebProWorld have compiled a nice list of reporting agencies and law enforcement websites where concerned Netizens can drop a dime on the punks bringing this town to its knees. Read that sentence again, but imagine I have a voice like McGruff, the Crime Dog. Directory:
> News > Security News
Date: 2006-03-21
|
DNS Attack Threat May Be Overstated
The simplicity of how attackers can turn thousands of domain name servers against a target not only boggles the mind but constitutes a tremendous threat to Internet resources; however, the vulnerability may be more a matter of poorly configured machines. Directory:
> News > Security News
Date: 2006-03-21
|
Clagger K Trojan Bucking For Amazon Users
The ever-popular world of Trojans has another horse for the stable in the form of the Troj/Clagger-K, currently being distributed as an attachment. The email claims to come from Amazon and says the recipient will be debited over $500. Directory:
> News > Security News
Date: 2006-03-20
|
Microsoft Gunning For Cybercriminals
At a technology debate hosted by EuroISPA, the European Internet Services Providers Association, and co-sponsored by Interpol in Brussels today, Neil Holloway, president of Microsoft Europe, Middle East and Africa (EMEA), unveiled a global law enforcement campaign that will target cybercriminals behind phishing attacks. Directory:
> News > Security News
Date: 2006-03-20
|
DeepSight Wins Best of the Tests
Symantec's DeepSight Alert service was chosen the "Best of the Tests" by Network World in the security management category. Symantec's early warning service came out on top in a competitive review in which Network World editors evaluated a broad range of security management technologies and vendors. Directory:
> News > Security News
Date: 2006-03-17
|
AOL Users Booted By Norton
If you are an America Online user and you were kicked off your service on Wednesday, there is a good chance it was because of a Norton AntiVirus update. Directory:
> News > Security News
Date: 2006-03-17
|
Zippo Trojan Choose Extortion For $300
A new virus called the Zippo Trojan is floating about the net and is demanding $300 to unencrypt data it claims to have stolen and encrypted. The Trojan goes through a user's files and moves them into a password protected zip file. Directory:
> News > Security News
Date: 2006-03-16
|
Microsoft’s New BlueHat Security Blog
Microsoft's just completed their third BlueHat conference and they've created a blog, called "BlueHat Security Briefings," to discuss topics from the conference as well as get thoughts and ideas from those attending. The blog will also include a lot of information from Channel 9 and other Microsoft venues for purposes of their Blue Hat conferences. Directory:
> News > Security News
Date: 2006-03-16
|
Milosevic Trojan Horse
Recently deceased Serbian strongman Slobodan Milosevic became the focus of a Trojan loaded email. The message claims evidence Milosevic was killed and instead a Trojan horse leaves some horse apples in the form of Dropper-FB. Directory:
> News > Security News
Date: 2006-03-15
|
Feds Crack Internet Child Porn Ring
Attorney General Alberto Gonzalez held a press conference in Chicago on Wednesday to announce the cracking of a child pornography ring. In all, 27 people in the United State, Canada, Australia and England were charged in connection with the ring. Directory:
> News > Security News
Date: 2006-03-15
|
Critical Vulnerabilities In Flash
Macromedia's Flash Player has been tagged with some vulnerabilities that could allow attackers to take control of an affected system. Although an SWF must be loaded into the system for someone to take it over, mistakes are made. Macromedia recommends users to upgrade immediately. Directory:
> News > Security News
Date: 2006-03-15
|
RFID Tags Vulnerable To Viruses
A new study, released in Europe shows it's possible to put viruses in the tags containing RFID chips. The little radio identification tags will soon be in more and more products and tracking all kinds of things and now, it seems they will be loaded with viruses too. Directory:
> News > Security News
Date: 2006-03-15
|
60% Of Wireless Networks Vulnerable
PandaLabs released their new report on Tuesday on the strengths and weaknesses of WiFi networks. They found about 60% of those networks are vulnerable and highlights deficiencies in WEP, one of the more common protocols in WiFi environments. Directory:
> News > Security News
Date: 2006-03-14
|
More Apple Security Updates
Apple continues improvements on OS X security with the second update in as many weeks. The new update, released today, comes as Apple has received much scrutiny recently regarding the security of the operating system and its accompanying programs. Directory:
> News > Security News
Date: 2006-03-14
|
Microsoft’s Patch Tuesday
Microsoft's monthly Patch Tuesday included an update rated critical, tied to Microsoft Office and one as important, tied to Windows itself. Users should go on and run the updates. Directory:
> News > Security News
Date: 2006-03-14
|
DirectRevenue Settles Up
Adware distributor DirectRevenue settled up with Illinois over DirectRevenue's nasty adware that is incredibly difficult to get rid. The lawsuit, filed in April, included charges like using deceptive business practices and bundling adware and spyware. Directory:
> News > Security News
Date: 2006-03-14
|
McAfee Messed Up
Security software monster McAfee distributed a new virus definition list on Friday morning. The result was pandemonium as the list tagged a number of software programs, including Microsoft's Excel and lots of other applications. Fortunately for both consumer and enterprise antivirus users, they corrected the problem quickly. Directory:
> News > Security News
Date: 2006-03-13
|
Phishing Attacks From Chinese Bank Servers
A major, state-owned bank in China runs a web server hosting phishing sites going after major U.S. banks and other institutions. These scams include both Chase Bank and eBay customers and started circulating on Saturday. Directory:
> News > Security News
Date: 2006-03-13
|
Holey Open Source Encryption
In the realm of cyber security idiocy, many companies fail to encrypt their huge swathes of consumer data. Normally encrypting is a good thing. However, an open source encryption software program appears to have a problem. There's a security hole in it. Directory:
> News > Security News
Date: 2006-03-13
|
Webroot’s New Toy
Webroot Software, Inc now offers a feature to their Premium Channel Edge partners in the form of their Webroot Enterprise SpyAudit tool. The tool can be used to evaluate customers' level of spyware risk. Directory:
> News > Security News
Date: 2006-03-13
|
Kaspersky Lends Malware Support to DeepNines
Moscow-based Kaspersky Lab hooked up with Dallas-based DeepNines as they announced a technology partnership on Thursday that will integrate Kaspersky's antivirus and anti-spyware technology into DeepNines' Security Edge Platform. Directory:
> News > Security News
Date: 2006-03-10
|
Cisco Buys IP Surveillance Company
Cisco Systems announced a definitive agreement to acquire privately-held SyPixx Networks, Inc. of Waterbury, Connecticut, for approximately $51 million in cash and options. Directory:
> News > Security News
Date: 2006-03-10
|
Online Terrorist Communities
Google's Orkut property seems to be a gathering place for sympathizers of terrorist groups like Al Qaeda. The online social community springing up to support Osama Bin Laden's efforts share videos and links to promote their cause, namely and recruit non-Arabic speaking westerners. Directory:
> News > Security News
Date: 2006-03-10
|
Idiot Watch: Porn Billing Blows Your Wad
Online payment service iBill got hit with a money shot when the company managed to get hacked, having some 17 million names stolen. The names have already been circulating around the fraudster/spammer markets. Directory:
> News > Security News
Date: 2006-03-09
|
Google Gives Firefox AntiPhishing Line
Firefox, in efforts to improve their own security, is getting a hand from the kids at Google. Google is working with Mozilla to build anti-phishing technology into the next release of Firefox, due out at the end of summer. The proposed phishing shield will be a major feature in Firefox 2. Directory:
> News > Security News
Date: 2006-03-09
|
Lipstick Causes Cancer?
A new chain letter is floating around, claiming lipstick causes cancer. The email lists certain brands, suggesting they contain high doses of lead, leading to the horrific disease. Security companies are warning their customers not get suckered into such a thing and just delete the email. Directory:
> News > Security News
Date: 2006-03-09
|
Mac Crack Contest Killed
One of the big controversies right now in security right now has been the ability to hack a Mac… or the lack thereof. A contest put together by a Mac guru to test that notion launched at the University of Wisconsin-Madison but it was pulled after 38 hours. How did Mac OS X do in those 38 hours. Directory:
> News > Security News
Date: 2006-03-09
|
Patch Tuesday Preview Thursday
Microsoft posted their advanced notification for their upcoming monthly update cycle. There are two security updates, one receiving a critical rating and affecting Microsoft Office, the other an important rating and affects Windows. They're also updating the Malicious Software Removal Tool as usual. Directory:
> News > Security News
Date: 2006-03-09
|
Rogue AntiSpyware Distributes Spyware
Rogue antispyware programs sometimes are the best products out there. They're not beholding to any other companies, they probably won't get sued, etc. Occasionally one comes along through causes as many problems as it solves. This time, it seems to be Spy-Shield. Directory:
> News > Security News
Date: 2006-03-08
|
Firefox Wins Over Internet Explorer in Vulnerability Numbers
Mozilla Firefox, the current up and coming young browser on the block is creating no end of problems for Internet Explorer (IE) regarding vulnerability numbers. While this debate will continue to rage on, Symantec put together some pretty impressive numbers and they give Firefox the edge. Directory:
> News > Security News
Date: 2006-03-08
|
Stay-At-Home Mom And Porn Spammer
A New Hampshire woman pleaded guilty in Arizona federal court and faces up to 15 years in the penitentiary for violations of the CAN SPAM Act, in the form of distributing pornographic spam. Directory:
> News > Security News
Date: 2006-03-08
|
IM Worms Get Smackdown On PCs
The worms are everywhere and right now, one place they're coming from is instant messengers. Both Microsoft's and AOL's IM needed a good wormer to fix their problems. These worms are deleting files and hijacking computers. Not good. Directory:
> News > Security News
Date: 2006-03-08
|
Symantec Tracks Rise In CyberCrime
Cupertino, California-based Symantec released its newest volume of their Internet Security Threat Report. Symantec notes in the report attacks continue to zero in on poaching personal information from PCs and that the notion of merely damaging and destroying data may be a thing of the past. Directory:
> News > Security News
Date: 2006-03-07
|
Married Couple Rides Trojan Horse
Authorities in London extradited and Israeli couple from Tel Aviv and charged them with developing, marketing and distributing a trojan horse for use in corporate espionage. They sold the spyware to various investigators for use in spying on clients' rivals. Directory:
> News > Security News
Date: 2006-03-07
|
Idiot Watch: Citibank Locks Down ATM Cards
One of the largest banking chains in the world, Citibank ran a lockdown of ATM cards for customer traveling or otherwise in Canada, Europe or Russia. Apparently, the network had been hacked. Unfortunately, Citibank seems somewhat lacking as some reported Citibank failed to notify them before they used their card to attempt to retrieve money. Yep… the idiot watch sees something new. Directory:
> News > Security News
Date: 2006-03-06
|
Symantec and Hotbar Love Fest
Mega-security software firm Symantec is tangling with marketing company Hotbar in a legal settlement defining Hotbar as "low-risk" adware. The settlement comes from a lawsuit filed by Symantec back in June to get a ruling supporting their position that Hotbar's programs that Hotbar software is adware. Directory:
> News > Security News
Date: 2006-03-06
|
Bagles Busting Chops
In another recent, yet delightful development, SophosLabs discovered a new flavor of bagle for your computer's consumption. The W32/Bagle-DO worm began making its way through computers, threatening lawsuits against everyone who gets the email. Directory:
> News > Security News
Date: 2006-03-06
|
Idiot Watch: College Loses 93,000 Names
Another "Idiot Watch" story, this time applies to an institution of higher learning. Metropolitan State College in Denver appears to have a problem hanging on vital information regarding its students. While a laptop stolen from a home couldn't necessarily be helped, the fact none of the pertinent information was encrypted could. Directory:
> News > Security News
Date: 2006-03-06
|
Chertoff Knows You Paid Your Credit Card
Most typical credit card users do not send in a large payment to cover an outstanding balance, and one customer found out that those who do make a big payment trigger an alarm at Michael Chertoff's Department of Homeland Security. Directory:
> News > Security News
Date: 2006-03-03
|
F-Secure’s World Map
Finnish security phenom F-Secure put their "view of the world" online with a map of known virus outbreaks around the world on Thursday. The F-Secure World Map will allow anyone checking in on the map to see the outbreaks real time, on a roughly one hour delay. Directory:
> News > Security News
Date: 2006-03-02
|
ProBlogger Got DoSed
The blogging guru Darren Rowse had his blog, ProBlogger, pummeled by a denial-of-service (DoS) on Tuesday. Rowse acknowledged the assault on his blog on Wednesday morning. This is just another in recent trend of attacking bloggers. Directory:
> News > Security News
Date: 2006-03-02
|
Psyciatrist Suckered By 419 Scam
The LA Times is reporting today on a prominent psychiatrist still teaching at UC-Irvine being taken in by Nigerian emails trying to set up phony business deals. Dr. Louis A. Gottschaly, 89, may have lost as much as $3 million dollars over the last 10 years according to charges from his son. Directory:
> News > Security News
Date: 2006-03-02
|
Vulnerabilities in Gmail
A lad named Anthony, 14, claimed to have found a vulnerability in Google's email service, Gmail. According to his blog he found a problem with javascript running within the preview of the message. Directory:
> News > Security News
Date: 2006-03-02
|
PayPal + Spamming+ Trojan= Clagger-H
It looks like someone else came up with another way to irritate PayPal customers. The email warns users that their PayPal account has been "temporarily limited" because of a Trojan horse spammed out. All users have to do is open the attached file and if there are any issues contact them Directory:
> News > Security News
Date: 2006-03-01
|
Italian Government Goes After Gambling
Italian ISPs railed against new restrictions on gambling sites put in place by the Italian government. The measures put in place as of February 24th imposes dimming of betting and gambling sites that aren't up-to-date with proper authorizations. Directory:
> News > Security News
Date: 2006-03-01
|
Looking For Mr. Goodmail Part 2
America Online claims they want to protect their customers from spam and other nasty things coming through the email. Everyone knows spam is a problem for sure. AOL's done a decent job of it so far. The problem is, now they're going to start charging emailers for the "privilege" of sending safe, secure emails to users who want it. But who's really going to benefit? Directory:
> News > Security News
Date: 2006-03-01
|
Hacker Defender Guru Yields
Hacker Defender wasn't just A rootkit, it was THE rootkit for the longest time. The creator, called Holy_father, of said rootkit lowered his sword and yielded the way by taking down his antidetection service. Directory:
> News > Security News
Date: 2006-03-01
|
|
|