IT management

How can a company set retention policies with such a glut of unstructured data?

It depends; there are no easy answers to this. There are a number of initiatives that a company should undertake, including disaster recovery, business continuity planning, Sarbanes-Oxley compliance and data security... Continue Reading

How is unstructured data affecting storage administrators and other staff?

There is absolutely an effect. Additional data volume translates into... Continue Reading

Are there regulatory compliance issues related to unstructured data?

The most important issue is legal discovery. You may not know what you have or how to find it, so it can be very difficult to find the files that may be required by a court of law... Continue Reading

What are some of the hidden costs of managing unstructured data?

 Continue Reading

Microsoft investigates Windows Vista Mail flaw

Attackers could exploit a flaw in Windows Vista Mail to compromise PCs by tricking the user into opening a malicious email attachment. Microsoft is investigating. Continue Reading

By

• Bill Brenner

Midrange storage array purchase considerations

A Buying Guide focusing on specific considerations for midrange disk array systems. Also find a series of specifications to help make on-the-spot product comparisons between v Continue Reading

Flaws haunt protocol tied to national infrastructure

Also: A weakness is found in Windows settings, Microsoft investigates a new Vista flaw, and flaws are addressed in OpenOffice.org and Firefox. Continue Reading

By

• SearchSecurity.com Staff

Mozilla releases Firefox fix

One newly-discovered flaw and several glitches introduced in the last update have been fixed with Mozilla's release of Firefox 2.0.0.3 and 1.5.0.11. Continue Reading

By

• Bill Brenner

Midrange storage array specifications

Product snapshots highlighting key specifications for a cross section of midrange storage array products. Continue Reading

Storage Security FAQ audiocast

Don't have time to dig into the FAQ text now? Download the audiocast in MP3 format and listen in the car, at the gym -- wherever you want. You can download the entire presentation or the individual questions that you are most interested in. Continue Reading

Symantec threat report under the microscope

This week in Security Blog Log: Infosec professionals dissect Symantec's latest threat report and express a range of views in the blogosphere. Continue Reading

Hackers broaden reach of cross-site scripting attacks

An explosion of AJAX-based applications has increased the damage that cross-site scripting (XSS) attacks can inflict on machines. A new tool uses XSS flaws to create a botnet. Continue Reading

By

• Dennis Fisher

Measuring Vista's true security muscle will take time

Researchers are digging through the Windows Vista code right now, and when they find flaws we'll hear about it. But it's the ones we don't hear about that should keep us up at night. Continue Reading

NAC panel says technology may not add up

A panel discussing the potential of using network access control (NAC) says the technology may not be worth the price of deploying and maintaining it. Continue Reading

By

• Robert Westervelt, TechTarget

Internet complexity, insecurity could stifle innovation, expert says

Security threats are driving vendors to produce software and devices that automatically update and run only proprietary software with no effort from the end user. The result could be less flexibility and innovation, one expert says. Continue Reading

By

• Robert Westervelt, TechTarget

Mobile data services development trends in 2007

Darrell Jordan-Smith takes a look at new data services architectures and development tools emerging in 2007 and the ongoing development efforts of the Java Community and others. Continue Reading

By

• Darrell Jordan-Smith

Symantec: Data thieves thrive on zero-day flaws

According to Symantec's threat report for the second half of 2006, attackers exploited misplaced USB drives and zero-day flaws to steal vast amounts of data. Expect more of the same in 2007. Continue Reading

By

• Bill Brenner

Hacker techniques use Google to unearth sensitive data

Those who know where to look could use Google to dig up all sorts of sensitive company information, including intellectual property and passwords, one security expert warns. Continue Reading

By

• Bill Brenner

Cisco stamps on Brocade in Q4, Dell'Oro says

For the second quarter in a row Cisco is gaining SAN switch market share on Brocade, according to the latest report by the Dell'Oro Group. But the numbers are causing a firestorm. Continue Reading

By

• Jo Maitland, TechTarget

Cisco buys WebEx for $3.2 billion

Cisco plans to buy WebEx, maker of hosted, on-demand collaboration applications. Continue Reading

By

• Andrew R. Hickey, Senior News Writer

LexisNexis fights crime with storage

The document search company is offering a new data forensics service staffed by former federal agents and powered by commodity NAS. Continue Reading

By

• Beth Pariseau, Senior News Writer

NEC reveals HydraStor grid storage

NEC announces its HydraStor array for secondary storage, touting its grid storage architecture, automated policies for data management and scalable deduplication. Continue Reading

By

• Jo Maitland, TechTarget

What are some best practices for retaining data in a highly regulated business environment?

Have a good information retention policy. I see a lot of organizations where they retain backups or copies of databases, but they don't know why they're retaining it or for how long... Continue Reading

Review: eGuardPost a B+ overall

eGuardPost is a well-designed and highly capable product that meets an important need. It has strong security and great forensics capabilities. Continue Reading

By

• Steven Weil, Point B

Review: Sun Java System Identity Manager 7.0 'impressive'

Hot Pick: Sun Java System Identity Manager 7.0 excels with agentless connectors, scalability and amazing auditing. Continue Reading

By

• Brad Causey

Symantec acquires automated risk assessment firm

Symantec has acquired Reston, Va.-based 4FrontSecurity, a maker of automated risk analysis and security management tools. An expert says it's the latest sign that the security risk assessment market is heating up. Continue Reading

By

• Robert Westervelt, TechTarget

WordPress upgrade fixes 'dangerous' flaw

Developers of the open source blogging platform WordPress say users should upgrade to version 2.1.2 immediately to address a "dangerous" security hole that was recently attacked. Continue Reading

By

• Bill Brenner

Buzz builds around data reduction for primary storage

Analysts predict that in-band compression offerings from StoreWiz, newly updated this week, are the first step toward a new wave of primary storage deduplication products. Continue Reading

By

• Beth Pariseau, Senior News Writer

Expert: NAC not a network security cure-all

According to an expert at Black Hat DC, NAC success demands careful planning and a good understanding of the company network; otherwise, implementations can quickly go awry. Continue Reading

By

• Robert Westervelt, TechTarget

Police force secures data with biometrics

Humberside Police has issued biometric USB drives among staff to maintain data security. Continue Reading

By

• John-Paul Kamath

Linksys, Gateway launch low-end NAS

Cisco subsidiary Linksys and PC maker Gateway launch new NAS products for small businesses and consumers. Continue Reading

By

• SearchStorage.com

PING with Mark Odiorne

Mark Odiorne, CISO at Scottish Re, provides insights on pen testing procedures, prioritising security for senior management and keeping compliant. Continue Reading

RFID cloning presentation moves forward despite legal threats

Chris Paget, director of research and development at IOActive spoke mainly about the science behind RFID tags and readers and the inherent security issues of the technology. Continue Reading

By

• Dennis Fisher

RFID dispute: Vendors still hostile toward full disclosure

Many vendors still believe that security by obscurity is still the best policy and make it a priority to silence vulnerability researchers. Continue Reading

McAfee fixes flaw in Mac antivirus software

Attackers could exploit the hole in McAfee's Virex 7.7 antivirus program for Mac OS X to bypass the malware scanner, but a fix is available. Continue Reading

By

• SearchSecurity.com Staff

'Worm' targets Sun Solaris Telnet flaw

Security researchers have found evidence that a worm is trying to exploit the recently patched Telnet flaw in Sun Solaris. Experts say it's another reason to stay away from Telnet. Continue Reading

By

• Bill Brenner

Wireless security: IT pros warily watching mobile phone threats

Security experts have warned repeatedly that mobile phone attacks will grow as the devices become more sophisticated. IT administrators are starting to believe them. Continue Reading

By

• Bill Brenner

Black Hat presenter nixes RFID cloning demo under pressure

A demonstration of a device that could easily clone radio frequency identification (RFID) badges, was pulled from a conference presentation under pressure from a chip maker. Continue Reading

By

• Robert Westervelt, TechTarget

Outsourced VoIP helps devastated company recover

Outsourced VoIP helped a Berkeley company keep up business as usual after a fire destroyed its offices. Continue Reading

By

• Andrew R. Hickey, Senior News Writer

Sun scraps 6920 array, offloads support to HDS

The long-rumored deal that Sun will sell its 6920 virtualization array to HDS is done. But rather than developing the product, HDS will upgrade users to its TagmaStore instead. Continue Reading

By

• Beth Pariseau, Senior News Writer

RFID privacy, security should start with design

Companies planning to deploy radio frequency identification technology (RFID) must demand that privacy and security issues are addressed early. Continue Reading

By

• Robert Westervelt, TechTarget

Storm rages again: Self-morphing Trojan uses blogs to spread rootkits

A new variant of the Storm Trojan that changes with each download is infecting blog sites with malicious URLs, intercepting traffic when visitors try to post comments. Continue Reading

By

• Bill Brenner

Storage switch startup burns out, turns to security

The company formerly known as Maxxan has been rechristened CipherMax and is now marketing a storage switch/encryption appliance with one point of management. Continue Reading

By

• Beth Pariseau, Senior News Writer

HP announces iSCSI VTL for SMBs

HP's new iSCSI VTL devices include automated backup capabilities for users with fewer than four servers. Continue Reading

By

• Beth Pariseau, Senior News Writer

PatchLink acquires STAT Guardian tool

PatchLink says it will add more muscle to its vulnerability management portfolio by acquiring the STAT Guardian tool from IT vendor Harris Corp. Continue Reading

By

• Bill Brenner

Microsoft takes a blogosphere beating over Vista UAC

This week in Security Blog Log: Industry experts take Microsoft to task over a "very severe hole" in the design of Vista's User Account Controls (UAC) feature. Continue Reading

Google offers 10 GB inbox

The search engine giant is offering an email application on a subscription basis with five times the storage capacity of the free version. Continue Reading

By

• SearchStorage.com Staff

Cisco warns of IP phone flaws

Attackers could circumvent security restrictions by exploiting flaws in certain Cisco IP phones, the networking giant warned Wednesday. Continue Reading

By

• Bill Brenner

Data breach: If customers don't act, data will remain at risk

To make enterprises take data security seriously, customers must take control of their personally identifiable information and stop handing it out to businesses. Continue Reading

Cisco routers threatened by drive-by pharming

Millions of Cisco routers in circulation could be compromised by a newly-discovered attack technique Symantec calls drive-by pharming, the networking giant warned in an advisory. Continue Reading

By

• Bill Brenner

Microsoft confirms new IE flaw

Attackers could exploit a new flaw in Internet Explorer (IE) to access local files on targeted systems, Microsoft confirmed Tuesday. Continue Reading

By

• Bill Brenner

TJX data breach worse than initially feared

Hackers had access to a larger amount of customer data, TJX executives said in a statement. Continue Reading

By

• Dennis Fisher

Sourcefire fixes Snort flaw

Attackers could exploit a flaw in the popular open source Snort IDS tool to cause a denial of service or launch malicious code. Continue Reading

By

• Bill Brenner

When security firms merge, some users are losers

Some users see their services improve when IT security vendors merge with other companies or get acquired. Others say they've been left out in the cold. Continue Reading

By

• Bill Brenner

Quiz: Compliance improvement -- Get better as you go forward

A five-question multiple-choice quiz to test your understanding of the content presented by expert Richard Mackey in this lesson of SearchSecurity.com's Compliance School. Continue Reading

Questions fly as EMC Retrospect fades

All signs point to the end of life for EMC's Retrospect backup software for small businesses. Sources say the company cannot support an SMB software channel. Continue Reading

VoIP complexities stall implementation for SMBs

VoIP sales in the SMB market are predicted to lead revenue in the next several years, but most SMBs are confused by the number of different solutions. Continue Reading

By

• Kate Dostart, Associate Editor

New attack technique threatens broadband users

Millions of broadband users across the globe are threatened by a new attack technique called drive-by pharming Continue Reading

By

• Bill Brenner

Mobile carriers admit to malware attacks

Eighty-three percent of mobile operators surveyed by McAfee Inc. say they've suffered malware infections, but two competing security vendors say the overall threat is still small. Continue Reading

By

• Bill Brenner

Microsoft fixes zero-day flaws in Word, Office

Twelve security updates from Microsoft fix a range of problems, including a flaw in the Malware Protection Engine and previously-exploited zero-days glitches in Word and Office. Continue Reading

By

• Bill Brenner

Skype makes more enterprise inroads

Skype has teamed with FaceTime Communications to give companies more control over Skype use within the enterprise. Continue Reading

By

• Andrew R. Hickey, Senior News Writer

Cybersecurity czar signals government cooperation at RSA Conference

Cybersecurity chief, Greg Garcia told RSA Conference attendees that government, enterprises and academia need to work together to fight growing Internet threats. Continue Reading

By

• Marcia Savage, Features Editor, Information Security Magazine

Solaris 10 has zero-day Telnet flaw

Attackers could exploit a zero-day flaw in Solaris 10's Telnet daemon to bypass authentication and gain unauthorized system access, security experts warn. Continue Reading

By

• Bill Brenner

Cisco VoIP managment guide: Required management tasks

Comprehensive VoIP management includes the basic network management tasks, but also includes monitoring services such as dial tone delivery, call success rates, telephony delays and impairments, as well as call quality. VoIP telephony management is categorized here. Continue Reading

Roundup: Vista security, breakability touted at RSA Conference

At RSA Conference 2007, Microsoft extolled the security virtues of its new operating system, but others weren't afraid to demonstrate how Vista security is lacking. Continue Reading

By

• SearchSecurity.com Staff

New storage IPOs report losses

Of the 2006 "graduating class" of storage IPOs, two reported losses this week in their first quarter as public companies. Continue Reading

By

• SearchStorage.com Staff

Briefs: Vulnerabilities found in Trend Micro, Firefox browser

This week, Trend Micro released a fix for a flaw in its antivirus engine, while no fixes are available for two newly discovered Mozilla Firefox browser flaws. Continue Reading

By

• Edmund X. DeJesus, Contributor

EMC plans array-based encryption via PowerPath

EMC's next security move will be array-based encryption through PowerPath by 2008, according to internal documents obtained by SearchStorage. Continue Reading

By

• Beth Pariseau, Senior News Writer

CA backup bug exploitable on Vista

In what appears to be the first exploit for a third-party app running on Vista, a previously patched buffer overflow vulnerability in CA BrightStor ARCserve Backup has been exploited. One security firm says ISVs aren't taking advantage of Vista's new security features. Continue Reading

By

• Michael Mimoso, TechTarget

Acopia hypes heterogeneous snapshot

The file virtualisation startup is blustering about a demonstration of heterogeneous snapshot technology, but is being coy about releasing a product. Continue Reading

By

• SearchStorage.com Staff

Symantec chief: Consumer confidence in data protection is key to online growth

In his keynote at RSA Conference 2007, Symantec CEO John W. Thompson said Big Yellow is ready for the shifting dynamics in the information security market, and implied that Microsoft's growing presence in security is a conflict of interest for its customers. Continue Reading

By

• Rob Westervelt, News Editor

Rootkit dangers at an 'all-time high'

Industry experts at RSA Conference 2007 say not only have rootkits become the weapon of choice for malicious hackers, but they've also emerged as useful tools for legitimate businesses trying to exert control over users. Continue Reading

By

• Dennis Fisher

VoIP security, unified communications need questioned

VoIP security issues and questions about the business need for unified communications have stalled adoption of both technologies, according to CompTIA's recent survey. Continue Reading

By

• Kate Dostart, Associate Editor

Gates touts secure access anywhere

Microsoft's chairman tells RSA Conference 2007 attendees that a combination of authentication and access management strategies is what it takes to protect corporate data, but information security pros are willing to wait for the proof. Continue Reading

By

• Michael Mimoso, TechTarget

Are there any differences in operations between unified storage and my existing storage systems?

Normally, a block storage system is handled by a storage professional or storage administrator... Continue Reading

Vista exploitable, researcher says

Marc Maiffret, CTO and chief hacking officer of eEye Digital Security, said he has found a way to elevate system privileges by exploiting a flaw in Windows Vista. Continue Reading

By

• Bill Brenner

CISOs mastering 'softer' skills

Why CISOs can no longer rely on technology skills alone and what businesses are looking for when recruiting their next information security leader. Continue Reading

By

• Amber Plante, Assistant Managing Editor, Information Security magazine

Email security buying decisions

Email security can be a daunting task for SMBs -- how do you go about finding the right product? This tip delves into three approaches to email security and the products available. Continue Reading

By

• Joel Dubin, CISSP, Contributor

Dozens of Web sites spread malicious Trojan

Update: The same malicious JavaScript keylogger that compromised the Dolphin Stadium Web site last week was found over the weekend on dozens of other high-profile Web sites. Continue Reading

By

• Eric Parizo, Senior Analyst

New zero-day attack targets Microsoft Excel

Microsoft says maliciously crafted Excel files may permit the execution of arbitrary code. Other Microsoft Office applications may be at risk. Continue Reading

By

• Edmond X. DeJesus, Contributor

HDS to acquire Archivas for up to $120M

HDS will acquire archiving software partner, Archivas for close to $120 million stepping up its effort to compete with EMC in this market. Continue Reading

By

• Jo Maitland, TechTarget

HP fills in gaps with product updates

HP announced updates to several of its products, but analysts are wondering what its ultimate strategy will be for storage virtualisation. Continue Reading

By

• Beth Pariseau, Senior News Writer

Intrusion detection systems are alive and kicking

IPS hasn't overtaken intrusion detection systems just yet. Senior News Writer Bill Brenner reveals what customers want when they're shopping for IDS products. Continue Reading

By

• Bill Brenner

New security vendors take on sophisticated attackers

IT Security vendors are developing technologies that show promise in preventing unknown attacks and protecting machines with zero-day vulnerabilities. Continue Reading

Microsoft disputes Word zero-day report

Symantec is warning of a new zero-day vulnerability in Microsoft Word. But Microsoft doesn't believe the flaw is new. Continue Reading

By

• Bill Brenner

Lawyers discuss e-discovery gotchas

During panel sessions at Legal Tech, lawyers provided their insights into the e-discovery process, retention policies and helping judges get up to speed. Continue Reading

By

• Jo Maitland, TechTarget

Symantec unveils 'universal ID system'

Symantec said the goal is to create a universally accepted identity system across all Web sites -- from online financial institutions to retailers -- for millions of consumers. Continue Reading

By

• SearchSecurity.com Staff

Using IAM tools to improve compliance

Provisioning and password management tools can ease complexity, reduce help desk calls and save money. But they also have an added benefit: they can help with your compliance woes. Continue Reading

Hybrid drives hit NAS boxes

DNF will be making hybrid drives available in all of its storage products, but it doesn't recommend them for IP SANs. Continue Reading

By

• Beth Pariseau, Senior News Writer

Managed VoIP -- 10 tips for a smooth migration

Migrating to managed VoIP doesn't have to be a headache. Here, Verizon Business offers 10 top tips to ensure you get what you need. Continue Reading

By

• Andrew R. Hickey, Senior News Writer

Entrust to sell cheaper hardware tokens

Security vendor Entrust Inc. will enter the hardware token market selling a $5 one-time password device. Experts say the move could reduce prices across the industry. Continue Reading

By

• Robert Westervelt, TechTarget

TJX faces lawsuit over data breach

A class action lawsuit against TJX accuses the retailer of negligence for not doing enough to secure customer data and for keeping quiet about the breach for a month. Continue Reading

By

• Bill Brenner

IBM improves data recovery process for TSM users

Tivoli Storage Manager 5.4, released this week, establishes a disk cache for most recently backed-up files, improving the slow restore times associated with the product. Continue Reading

By

• Jo Maitland, TechTarget

IBM to acquire Softek, looks to pump up services biz

IBM says it intends to use Softek's Transparent Data Migration Facility within its Global Services business. Continue Reading

By

• Beth Pariseau, Senior News Writer

Balancing the cost and benefits of countermeasures

The final tip in our series, "How to assess and mitigate information security threats." Continue Reading

How to assess and mitigate information security threats

Learn how to assess and mitigate information security threats, like rootkits, worms and Trojans in the tip series created in collaboration with Realtimepublishers and Dan Sullivan, author of The Shortcut Guide to Protecting Business Internet Usage. Continue Reading

Malware: The ever-evolving threat

The first tip in our series, "How to assess and mitigate information security threats" Continue Reading

Network-based attacks

The second tip in our series, "How to assess and mitigate information security threats." Continue Reading

Information theft and cryptographic attacks

The third tip in our series, "How to assess and mitigate information security threats." Continue Reading

IBM tool makes online purchases anonymous

A new tool makes online purchases anonymous by using artificial identity information. Experts say enterprises need to adopt the technology before it can become a viable option. Continue Reading

By

• Robert Westervelt, TechTarget