UK Spammer's Appeal Rejected
Peter Francis-Macrae has been described as "the UK's worst spammer." It seems likely that he will lose that title at some point in the next few years, though - Francis-Macrae's appeal was dismissed in court this week, and he now faces a six-year prison sentence. Directory:
> News > Security News
Date: 2006-09-29
|
Microsoft Forefront Security Beta Steps Up
Yesterday morning, Microsoft launched a public beta called Forefront Security for Sharepoint. According to a press release, this product will provide "protection against the latest threats," "integration to help optimize server performance," and "simplified management control." Directory:
> News > Security News
Date: 2006-09-29
|
Security Consultant Finds Flaws – Without Permission
A self-declared security consultant recently went to unusual (and perhaps illegal) lengths to gain a new customer. Gerasimos Macridis, a New Zealander, examined the security measures of the nation's Reserve Bank - without its permission - and then asked for payment when he reported his findings. Directory:
> News > Security News
Date: 2006-09-28
|
Microsoft Rushes To Get IE Patch Ready
Microsoft is prepared to break with tradition in order to patch the latest flaw in Internet Explorer. That's right - the company will release the patch before Patch Tuesday - assuming it can get a patch ready in time. Directory:
> News > Security News
Date: 2006-09-26
|
RSS Feeds and Security
The growth rate of RSS is amazingly fast. RSS when first made its appearance was recognized as a techie device but nowadays it has become so popular that the general mass is using this tool. Directory:
> News > Security News
Date: 2006-09-26
|
Everybody Failed The Spam Quiz
McAfee says that though consumers may be more Internet-savvy than ever, they're still highly susceptible to spam. The security company unveiled the results of its first-ever "spam quiz," showing that consumers misjudge whether a Website will keep email addresses private. Directory:
> News > Security News
Date: 2006-09-26
|
Microsoft Releases VML Patch
A rare out-of-band patch release began hitting Windows PCs last night and today, as Microsoft responded to reports of widening attacks against the Internet Explorer VML flaw and the arrival of an unofficial patch by third-party security researchers at ZERT for the problem. Directory:
> News > Security News
Date: 2006-09-26
|
New Internet Security Threat Report From Symantec
Symantec has released another Internet Security Threat Report, and the news isn't good. Attacks and vulnerabilities are up almost across the board, with one notable exception - the number of vulnerabilities discovered in the Opera Web Browser is down. Directory:
> News > Security News
Date: 2006-09-25
|
Flaw in Internet Explorer Rings Security Alarm
A critical vulnerability is identified in Internet Explorer versions 5+ and above. Security experts at MicroWorld Technologies say a malicious code named 'Exploit.HTML.VML' is being employed by Pornographic and other shady websites to install Spyware and Trojans into user computers without their knowledge. Directory:
> News > Security News
Date: 2006-09-22
|
Symantec, Adobe Object To Microsoft's Plans
Symantec and Adobe have made what one source called their first "official complaints" about Microsoft's plans to provide its own security for Vista. Adobe reportedly "told the European Commission that Microsoft should be barred from building into Vista competing software for reading and creating electronic documents." Directory:
> News > Security News
Date: 2006-09-22
|
Emails May Exploit VML Flaw
The Internet Explorer vulnerability in its Vector Markup Language rendering ActiveX control may be just as exploitable through email as it is from a malicious website. Directory:
> News > Security News
Date: 2006-09-21
|
Visa, Chamber of Commerce Identify Vulnerabilites
A recent report from Visa - available on the U.S. Chamber of Commerce's website - identified the "top five data security vulnerabilities leading to compromises." In addition to giving a brief description of each threat, the report weighed "risk impact," and offered "risk mitigation strategies." Directory:
> News > Security News
Date: 2006-09-19
|
Let Us Spam You, Please
One of the e-commerce buzz phrases is "permission based marketing," and spammers are latching on to the concept in a sneaky way. In a ploy to collect email addresses, this band of spammers offers a Steve Irwin video tribute. Price of admission: your email address and an agreement to let them spam you. Directory:
> News > Security News
Date: 2006-09-19
|
SonicWALL Goes European
SonicWALL is taking it's security solutions to Europe. The company just launched European-language versions of its Continuous Data Protection (CDP) backup and recovery solutions. Directory:
> News > Security News
Date: 2006-09-19
|
ID Theft Task Force Nearer To Resolution
President Bush's Identity Theft Task Force, formed by Executive Order in May of this year, announced the unit's interim recommendations for cracking down on the problem. The final plan will be presented to the President in November. Directory:
> News > Security News
Date: 2006-09-19
|
VML Flaw Threatens IE
Microsoft's implementation of the Vector Markup Language rendering engine has a vulnerability that could lead to a buffer overflow and execution of arbitrary code. Directory:
> News > Security News
Date: 2006-09-19
|
The Bigger Threat: Surfing Or Spam?
E-mail attachments may not be that dangerous, at least in comparison to surfing the Web, according to a recent study conducted in Denmark. IDC Denmark found that company networks were more likely to be infected by malicious software through surfing, not spam. Directory:
> News > Security News
Date: 2006-09-18
|
Cybercrime Grows Up
According to Christopher Painter, cybercrime is no longer the result of a few teenagers with some time on their hands. It is becoming the domain of serious criminals, and they often belong to organized syndicates. Directory:
> News > Security News
Date: 2006-09-15
|
Elite Torrents Pirate Convicted
A Pennsylvania man pleaded guilty in federal court to copyright infringement charges for his involvement with the peer-to-peer site Elite Torrent, a service that made Star Wars Episode III: Revenge of the Sith available for download six hours before its theatrical release. Directory:
> News > Security News
Date: 2006-09-14
|
Phishers Target Barclays Clients
Panda Software has issued an "orange alert" warning against a large scale phishing attack targeting clients of Barclays Bank's online services, with at least 61 variants of a spoof email. The company estimates that the number of emails in circulation is several million. Directory:
> News > Security News
Date: 2006-09-14
|
Security Of Your Bluetooth Devices
These days, all forms of communication technology face the problem of security and theft of personal details , and 'bluetooth' is no exception to these concerns, nor should it be. Directory:
> News > Security News
Date: 2006-09-13
|
Security Scrutinized In The Phone Industry
Due to several recent security issues, phone companies are coming under the magnifying glass. In particular, the issue of "pretexting" - "a scam where unauthorized individuals pretend to be someone they're not to obtain personal information" - has gotten a lot of attention. Directory:
> News > Security News
Date: 2006-09-11
|
Spammers Promise Nude Gambling
It's not that it's not interesting, it's just illegal. Australian security firm Sophos is sending out the warning of online casinos spamming inboxes with promises of live nude dealers. Directory:
> News > Security News
Date: 2006-09-08
|
Dozens of Vulnerabilities in Firefox?
Security software company Klocwork's Adam Harrison claims to have uncovered 655 defects and 71 potential security vulnerabilities in Mozilla's Firefox web browser. A Mozilla developer fired back, calling the analysis bogus. Directory:
> News > Security News
Date: 2006-09-08
|
Lawsuit Against Zango Dismissed; Gloating Ensues
Zango is an adware firm; there is some evidence that the company's products tend more towards the "spyware" side of things. A class-action lawsuit against the entity (and on that subject) was dismissed yesterday. Zango issued a press release about it, and handled the matter in a not-exactly-polite way. Directory:
> News > Security News
Date: 2006-09-08
|
Trojan Horse Discovered On Samsung Site
People generally expect to enjoy a degree of safety when they visit the website of a major corporation. There's an implicit guarantee that these brand names won't have any malware on their pages. That trust may have been broken, though, with the recent revelation that the Samsung site is home to a Trojan horse. Directory:
> News > Security News
Date: 2006-09-08
|
London Leads In CNP Fraud
London sounds like a great place -home to Buckingham Palace, the National Gallery, and the All England Lawn Tennis and Croquet Club, it is often simply referred to as "the City." London recently earned a title that is somewhat less admirable, though - Early Warning designated it the UK's "no. 1 credit card fraud hotspot." Directory:
> News > Security News
Date: 2006-09-07
|
Spammer's Appeal Is Junked
The first person in the U.S. to face an actual prison sentence for spamming may, in fact, begin serving that prison sentence in the near future. Jeremy Jaynes, who was first convicted in 2004, lost his petition before the Virginia Court of Appeals. Directory:
> News > Security News
Date: 2006-09-07
|
Microsoft Speeds Up DRM Patch
Cryptography and security expert Bruce Schneier observed that Microsoft's reaction to having its digital rights management scheme cracked was a far cry from its IE or Windows patch efforts. Directory:
> News > Security News
Date: 2006-09-07
|
Symantec Opens Vault Of Compliance Services
Symantec unveiled its Enterprise Vault Discovery Accelerator 6.0 (EVDA), an extension of the company's Vault e-mail and file archiving software. The company says the product was updated for compliance with e-discovery requirements as dictated by the Federal Rules of Civil Procedure (FRCP). The new rules are scheduled to take effect in December. Directory:
> News > Security News
Date: 2006-09-06
|
Spammers Enlist Subliminal Messaging
The spam includes an embedded multi-framed GIF graphic, which is new technique used to bypass spam filters, recommending recipients buy stock in a company called Trimax. Every 15 seconds, the word BUY!!! flashes briefly (but not really briefly enough to be intended for the subconscious level). Directory:
> News > Security News
Date: 2006-09-06
|
McCarty Admits to Hacking USC
You may recall a story about a man who hacked into the University of Southern California's student application system to steal personal data related to the university's applicants. Directory:
> News > Security News
Date: 2006-09-06
|
Microsoft's BrowserShield Shows Promise
Microsoft wants to "save people," and a research project called BrowserShield is designed to do just that. Helen Wang and John Dunagan are in charge of the project, which offers "vulnerability-driven filtering of network data." Directory:
> News > Security News
Date: 2006-09-05
|
Wells Fargo Data Lost By Auditor
A two-page letter obtained by SecurityProNews claimed a notebook computer containing personal information about Wells Fargo employees has been stolen from an auditor's vehicle. Directory:
> News > Security News
Date: 2006-09-01
|
Kaspersky Online Scanner Is "Most Unusual"
The latest online scanner Top Twenty from Kaspersky Lab showed several surprising trends - Alexander Kostev described it as "the most unusual we have seen since we started keeping records." Thirteen of the entries were brand new to the list. Directory:
> News > Security News
Date: 2006-09-01
|
AT&T Crack One Part Of Attack
The breach in the AT&T online store that exposed details of customers who purchased DSL equipment through the site was just the first step in a much deeper criminal scheme. Directory:
> News > Security News
Date: 2006-09-01
|
Biometrics Comes To Disney World
Visitors to the Orlando theme park will eventually see the finger geometry readers replaced with fingerprint scanners, as The Walt Disney Company fights illegally resold park passes with biometrics. Directory:
> News > Security News
Date: 2006-09-01
|
|
|