Antivirus, firewall and IDS products

Critical flaws found in Excel, Flash Player

FrSIRT says holes in Microsoft's spreadsheet program and Adobe's media player could allow attackers to take control of affected machines and initiate malicious commands. Continue Reading

By

• Bill Brenner

Security Bytes: Data breach affects 100,000 military personnel

Meanwhile: Phishers use a phone trick to dupe PayPal users; the PCI security standard will get more teeth and a survey illustrates an increase in security breaches Continue Reading

By

• SearchSecurity.com Staff

Dundee to teach ethical hacking BSc

A degree in ethical hacking will be on offer at a Scottish university from the new academic year. Continue Reading

By

• Tash Shifrin

Fifa ready for cyber attack on World Cup

 Continue Reading

BlueCat appliance offers rock-solid security

Hot Pick: The Adonis 1000 appliance bundles DNS and DHCP into an enterprise-class appliance for the centralized secure operation of network addressing. Continue Reading

By

• Sandra Kay Miller, Contributing Writer

Networks news in brief

Short takes from this week's network news Continue Reading

Industry chiefs to declare war on for-profit cyber criminals

IT industry leaders reaffirm the importance of security to a digital economy beset by money-driven cyber criminals. Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Voicing concerns on Skype

Skype has blazed a trail in the Voice over IP arena; its popularity hasn’t gone unnoticed by the hacker community however Continue Reading

By

• Joe O’Halloran, Computer Weekly

Roundup: 2005's 'curious malicious code'

These viruses, worms and Trojans sometimes escaped our notice. But it didn't get past one antivirus vendor, who rounded up some of the year's stranger offerings from the underground. Continue Reading

By

• Anne Saita, TechTarget

Two Windows patches coming, IE fix uncertain

It remains to be seen whether the software giant on Dec. 13 will address an outstanding Internet Explorer issue that is currently the target of a malicious Trojan. Continue Reading

By

• Eric Parizo, Senior Analyst

Sony rootkit uninstaller causes bigger threat

Princeton researchers say a security hole that appears when users try to remove Sony's copy protection software presents an even greater risk than the original rootkit. Continue Reading

By

• Bill Brenner

Hacking Windows: MSRPC vulnerabilities

In this excerpt from "Hacking Exposed, Fifth Edition: Network Security Secrets & Solutions," authors Stuart McClure, Joel Scambray and George Kurtz introduce MSRPC vulnerabilities and countermeasures. Continue Reading

Reporter's Notebook: NYC 'controls the software industry'

At Information Security Decisions: a security "rock star" rages against the Microsoft machine; banging the drum for enterprise security; a sour note on zero-day exploits. Continue Reading

By

• Michael S. Mimoso, Senior Editor and Anne Saita, News Director

Author delves into novel attack methodologies

Review of Silence on the Wire, a book about security attack methodologies such as passive fingerprinting. Continue Reading

Secure your extended enterprise

How do you achieve the fine balance between ensuring that there is truly free access to sensitive information, without sacrificing security? Continue Reading

Secure the interests of your extended enterprise

How do you achieve the fine balance between ensuring that there is truly free access to sensitive information and applications from both inside and outside the firewall, without sacrificing security? Continue Reading

CCSP courses, exam changing next month

Those seeking Cisco's security credential and specialization in VPN, firewall and IDS will soon follow different curricula that better reflect the vendor's current product lines. Continue Reading

By

• Anne Saita, TechTarget

VoIP turns up the heat on firewalls

New research shows that many organizations are increasingly concerned about VoIP security and plan to augment their firewalls within the next year, changing the landscape of the firewall market. Continue Reading

By

• Eric Parizo, Senior Analyst

Firewalls can help or hurt, so plan carefully

 Continue Reading

By

• Laura E. Hunter, Contributor

Extending perimeters

The news that, up until 2006, 70% of successful wireless local area network (WLAN) attacks will be because of the misconfiguration of WLAN access points and client software is disquieting on a number of levels. Continue Reading

Symantec glitch could expose user names, passwords

Symantec announced a fix for a flaw in AntiVirus Corporate Edition Friday afternoon. The security hole could be exploited to view user names and passwords. Continue Reading

By

• Bill Brenner

High profile breach brings security to top of agenda

There’s nothing like an apparent breach at a global company to concentrate the mind when it comes to information and data security. Continue Reading

By

• Joe O’Halloran, Computer Weekly

Trusted Computing Group releases server specs

The Trusted Computing Group released a new set of trusted server specifications it hopes will help vendors protect their platforms against security breaches. Continue Reading

By

• Luke Meredith, News Writer

Lost at sea: securing the channel

As attacks seem to proliferate almost unabated, it’s worrying to think that of the three interested parties in the security technology market — the technology makers, the technology sellers and the technology users—not everyone shares a common view on the importance of the technology. Continue Reading

Sarbox compliance costing companies

Companies’ required investments to attain compliance with the Sarbanes-Oxley data security legislation has come at the expense of dealing with other security threats, according to the Information Security Forum (ISF). Continue Reading

Authentication takes a bite out of spam

Network and messaging experts offer helpful ammunition for network managers waving the white flag in the battle against spam. Continue Reading

By

• Amy Storer, News Writer

Sarbox draining corporate security budgets

Corporate investment to comply with the Sarbanes-Oxley data security legislation has come at the expense of dealing with other security threats, according to the Information Security Forum (ISF). Continue Reading

Pop quiz: E-mail security

Find out how much you know about securing your organization's e-mail. Continue Reading

Sarbox challenge drains security budgets

International corporate spending on compliance with the Sarbanes-Oxley data security legislation has come at the expense of dealing with other security threats, according to the Information Security Forum. Continue Reading

By

• Antony Savvas

five star reception

 Continue Reading

By

• helen beckett

Quiz: Secure Web directories and development, answer No. 1

Quiz: Secure Web directories and development, answer No. 1 Continue Reading

Quiz: Secure Web directories and development, answer No. 2

Quiz: Secure Web directories and development, answer No. 2 Continue Reading

Life at the edge part 2: Divide and conquer with DMZs

Learn how a DMZ works and how it can protect Web servers. Continue Reading

Quiz: Identify and analyze Web server attacks

Test your knowledge of the material covered in the "Identify and analyze Web server attacks" section of Intrusion Defense School. Continue Reading

Quiz: Web attack prevention and defense

Test your knowledge of the material covered in Web attack prevention and defense, including the fundamentals of securing a Web server. Continue Reading

Network configuration: IIS SMTP mail relay service and Microsoft Exchange Server

Learn how to use the IIS SMTP mail relay service to prevent spammers from directly interacting with your Microsoft Exchange Server. Continue Reading

RootkitRevealer turns root kits' tactics back at them

A contributor reviews freeware RootkitRevealer from Sysinternals. Continue Reading

New solutions for the zero hour

IT vendors are looking to fill the gap between when a virus first hits and when its remedy is released. Continue Reading

By

• Jennifer Lawinski, News Writer

Fixes, workaround for Kerberos 5 vulnerability

A security hole could be exploited to launch malicious code. But there are fixes and a workaround. Continue Reading

By

• Bill Brenner

Botnets target the enterprise warn experts

Versatile and increasingly vicious bots will cause enterprises a lot of grief in 2005, security experts say. Continue Reading

By

• Bill Brenner

NTFS permissions

This excerpt from Chapter 5 of "The definitive guide to Windows 2000 security" discusses the advantages of using NTFS for access control. Continue Reading

By

• Paul Cooke

Spamming the universe

 Continue Reading

By

• Douglas Schweitzer, Contributing Writer

Symantec offers bare metal restore software

 Continue Reading

By

• Shane O'Neill

Over-specify when buying low cost replacement for Frame Relay

A project manager reveals how a VPN saved £275,000 a year Continue Reading

By

• Peter Skipwith

Know Your Enemy -- Learning about Security Threats: Chapter 8, Legal Issues

Find out more about the legal issues swirling around the use of Honeypots. Continue Reading

Users at risk after web host attack

Users have been warned to brace themselves for attacks on sites which provide patch downloads and web hosting services. Continue Reading

By

• Arif Mohamed

From exposition to exploit: One security book's story

A new manual that discloses vulnerabilities may have had a hand in compromises at supercomputing centers this spring. Continue Reading

By

• Anne Saita, News Writer

Bacs launches online billing service

UK clearing house Bacs has embarked on a joint venture with a US software company to provide an online bill presentation and... Continue Reading

By

• Nick Huber

Users warned as number of software holes soars

IT departments were put on alert this week after it emerged that the number of security vulnerabilities discovered in commercial... Continue Reading

By

• Bill Goodwin, Computer Weekly

Victory! Lords confirm CW stand - software flaw could have caused Chinook crash

An historic House of Lords report has this week vindicated a five-year campaign by Computer Weekly for justice after the crash of... Continue Reading

By

• Tony Collins

CBI warns on cybercrime

A new survey warns that UK e-commerce is being stifled by rising crime and consumer caution about buying goods on the Internet Continue Reading

By

• Bill Goodwin, Computer Weekly

Government picks pathfinder councils

 Continue Reading

By

• Chris Mugan

Government makes grants to council IT schemes

 Continue Reading

By

• Chris Mugan

Government trials digital signatures on mobile phones

 Continue Reading

By

• Arlene Martin

Why PKI?

Public Key Infrastructure could revolutionise the way companies do business online - if only anyone would use it, says Danny... Continue Reading

By

• Danny Bradbury

Government Gateway due to launch today

Ministers were today (25 January) hoping to officially launch the Government Gateway, the middleware project that will allow... Continue Reading

By

• James Rogers

MoD did not tell the whole truth on Chinook software

Letters from software experts to Computer Weekly show the Ministry of Defence omitted to mention it sanctioned the very testing... Continue Reading

Leaked RAF memo scathing of safety software evaluation

Computer Weekly's Tony Collins uncovers evidence that the MoD has consistently undermined the authority of its software assessors... Continue Reading

By

• Computer Weekly's Tony Collins

Chinook software probe due

MPs are next week expected to investigate the air-worthiness of the engine control software on the type of Chinook helicopter involved in the crash Continue Reading

By

• Tony Collins

NAO report puts software at the heart of Chinook debate

Tony Collins

Government auditors will report tomorrow (Friday) that defence staff put into operational service a fleet of Chinook...

 Continue Reading

By

• Tony Collins