All the week's news and views about Security, 12/01/04 EDITOR'S NOTE: To help you stay on top of the rapid changes in the world of security, we're increasing the frequency of the Security News Alert. Starting next week, you will receive the alert three times a week, on Mondays and Fridays in addition to the current Wednesday distribution day. Thanks for reading!
_______________________________________________________________ This newsletter is sponsored by Lucent Technologies FREE EMA ANALYST REPORT Streamline VoIP Management and boost your bottom line! This Enterprise Management Associates white paper highlights strategies you can use to optimize VoIP through automated IP address management with market-leading solutions like Lucent VitalQIP(R) DNS/DHCP & IP Management software. http://www.fattail.com/redir/redirect.asp?CID=89110 _______________________________________________________________ COMPREHENSIVE ENTERPRISE STORAGE INFORMATION Go to NW Fusion's Research Center for detailed information on enterprise storage. Find the latest breaking news, case studies, white papers, commentary, reviews and more. Topics on how ILM impacts your storage strategy, how to migrate to a new tape drive, how to link SAN islands and more are all found in the Research Center. Click here: http://www.fattail.com/redir/redirect.asp?CID=89307 _______________________________________________________________ Network World's Security News Alert Microsoft investigates Windows Server flaw, 12/01/04 Microsoft said it is investigating a security flaw in Windows server software that could allow an attacker to gain complete control over systems running the software. <http://www.nwfusion.com/news/2004/1201microinves.html?nl> New strain of Skulls Trojan hits smart phones, 11/30/04 Mobile phones running Symbian's Series 60 operating system are the target of a new strain of the Skulls Trojan horse program. The new Trojan comes with the Cabir.B worm, which, unlike the first version of the virus, can spread to other phones within reach of Bluetooth broadcasting range. <http://www.nwfusion.com/news/2004/1130newstrai.html?nl> No patching panacea, 11/29/04 The recent Network World Virtual Showdown, 'How best to patch,' drew six vendors together in a weeklong debate that ultimately concluded patch management is best viewed as one facet of a larger security strategy. <http://www.nwfusion.com/news/2004/112904patch.html?nl> Universities struggling with SSL-busting spyware, 11/30/04 U.S. universities are struggling with a flare-up of dangerous spyware that can snoop on information encrypted using SSL. Experts are warning that the stealthy software, called Marketscore, could be used to intercept a wide range of sensitive information, including passwords and health and financial data. <http://www.nwfusion.com/news/2004/1130univestrug.html?nl> HP to release Virus Throttler for Windows in 2005, 11/30/04 HP is planning to build virus throttling technology into ProLiant servers and ProCurve switches starting in early 2005, an HP executive said Tuesday. <http://www.nwfusion.com/news/2004/1130hptore.html?nl> Radware sells intrusion system to KT, Chunghwa, 11/30/04 Radware hopes that recent success in two of the world's leading broadband Internet markets will lead to greater recognition and further sales for its intrusion detection systems in Asia, Europe and U.S. markets. <http://www.nwfusion.com/news/2004/1130radwasells.html?nl> Opinion: There's a need to illuminate the darknet, 11/29/04 Encompassing everything from peer-to-peer applications to instant messaging and VoIP vulnerabilities and distributed denial-of-service attacks, the darknet poses a greater threat to companies than is commonly assumed. <http://www.nwfusion.com/columnists/2004/112904johnson.html?nl> Profiling cybercrime: Networking threats and defense strategies, 11/29/04 An inside look at the real problem, who's behind it, the legal machine fighting back and what you can do. <http://www.nwfusion.com/supp/2004/cybercrime/?nl> Serious business, 11/29/04 The FBI's Dave Thomas says today's cybercrook is all about the bottom line. <http://www.nwfusion.com/supp/2004/cybercrime/112904qanda.html?nl Is the law's arm long enough? 11/29/04 Even though Congress continues to propose laws to defeat spyware and spammers, it seems law enforcement's hands are still essentially tied. http://www.nwfusion.com/supp/2004/cybercrime/112904stopit.html?nl> Profiling cybercriminals: A promising but immature science, 11/29/04 The original hacker stereotype is a smart, lonely deviant - a teenage or adult male who's long on computer smarts but short on social skills. But like most stereotypes, it doesn't begin to tell the whole story. <http://www.nwfusion.com/nlsecuritynewsal865> Cybercrime: The story behind the stats, 11/29/04 An inside look at the real problem, who's behind it, the legal machine fighting back and what you can do. <http://www.nwfusion.com/nlsecuritynewsal866> The battle against cyberterror, 11/29/04 The race is on to harden the nation's critical infrastructure before cyberterrorists gain enough skills to launch attacks. http://www.nwfusion.com/supp/2004/cybercrime/112904terror.html?nl> Victim's rights: Cybercrime retaliation, 11/29/04 How to react when you have been hit by a cyber attack. <http://www.nwfusion.com/nlsecuritynewsal867> Opinion: Talk among yourselves, 11/29/04 But there's another way to help stem cybercrime: Talk among yourselves. If companies begin sharing information with others in their industry about cybercrime attacks, they might be able to help prevent future attacks. <http://www.nwfusion.com/columnists/2004/112904edit.html?nl> U.K.'s Blair tries to allay fears over ID card database, 11/29/04 U.K. Prime Minster Tony Blair attempted to quell growing concern over the security of the country's national identity program by threatening jail time for anyone caught tampering with the project's massive database. <http://www.nwfusion.com/news/2004/1129uksblair.html?nl> U.S. denied visas for Chinese WLAN standard group, 11/29/04 U.S. officials earlier this month denied visas to four representatives of a group developing China's Wireless LAN Authentication and Privacy Infrastructure security protocol for wireless networks, raising questions in China about the U.S. government's commitment to greater Chinese involvement in setting technical standards. <http://www.nwfusion.com/news/2004/1129usdenie.html?nl> Citrix buys into better SSL VPN support, 11/29/04 Looking to provide customers with more secure remote access to corporate resources and possibly catapult it to the top echelon of SSL VPN vendors, Citrix Systems last week said it would buy SSL VPN vendor Net6. <http://www.nwfusion.com/news/2004/112904citrix.html?nl> Start-up uses software for WLAN IPS, 11/29/04 A 2-year-old wireless LAN company this week is scheduled to introduce software and radio sensors designed to offer users a full-blown intrusion-prevention system for their corporate WLANs. <http://www.nwfusion.com/news/2004/112904airtight.html?nl> SCO Web site hack mocks company's legal claims, 11/29/04 Malicious hackers have compromised The SCO Group's Web page twice in as many days, posting messages that appear to mock the company's claims to own parts of the Linux operating system. <http://www.nwfusion.com/news/2004/1129scowebs.html?nl> Thomson, VeriSign to build content security service, 11/23/04 Thomson Tuesday said that it is teaming up with VeriSign to build a digital authorization and authentication service that promises to secure delivery of content such as movies, music and games. <http://www.nwfusion.com/news/2004/1123thomsveris.html?nl> Newsletter: Ways to help prevent potential security risks of using Google Desktop Search, 11/23/04 Last week, we alerted readers to potential security problems that might arise from blending SSL VPNs with Google Desktop Search. <http://www.nwfusion.com/newsletters/vpn/2004/1122vpn1.html?nl> Google search cache spawns SSL fear, 11/22/04 It's proving tougher than anticipated to protect SSL VPNs from the voracious caching machine housed inside Google Desktop Search. <http://www.nwfusion.com/news/2004/112204google.html?nl> Euro Web sites spread Bofra worm via banner ads, 11/22/04 Web site visitors who clicked on banner ads on a number of popular European Web sites this weekend could have infected their computers with variants of the Bofra worm, experts warned on Monday. <http://www.nwfusion.com/news/2004/1122eurowebs.html?nl> IP VPNs save, but they can carry 'gotchas', 11/22/04 While IP VPNs are widely accepted as an effective remote access and WAN technology that can save money, there are hidden challenges users should be aware of to avoid costly problems. <http://www.nwfusion.com/news/2004/112204vpnhidden.html?nl> Opinion: We are not divided, 11/22/04 Despite the endless portrayals of embittered foes in politics and business, we are not divided. Despite our healthy disagreements on details, we are in agreement about the goals of computer security. <http://www.nwfusion.com/columnists/2004/112204schwartau.html?nl> Anti-spam vendors target the out-box, 11/22/04 A pair of anti-spam vendors are tweaking their products to help customers keep a closer eye on mail emanating from their networks, not just trying to enter them. <http://www.nwfusion.com/news/2004/112204outbound.html?nl> E-comm gains offset by escalating fraud, 11/22/04 Just in time for the start of the holiday shopping season, two vendors released research last week detailing a rise in e-commerce fraud. CyberSource published the results of its sixth annual e-commerce fraud survey, while VeriSign came out with its fourth Internet Security Intelligence Briefing, which details Internet usage trends as well as threat, vulnerability and fraud patterns. <http://www.nwfusion.com/news/2004/112204ecomm.html?nl> Vendors aim to tamp down spyware, 11/22/04 Spyware protection debuts in both desktop and gateway products. <http://www.nwfusion.com/news/2004/112204spy.html?nl> Skulls Trojan attacks Symbian mobile phones, 11/22/04 Users of Nokia's 7610 smart phone and possibly other phones running Symbian's Series 60 software should be aware of a new Trojan program on the Internet. <http://www.nwfusion.com/news/2004/1122skulltroja.html?nl> Opinion: Time to secure our home networks, 11/22/04 Survey finds consumers ignorant of Internet threats. <http://www.nwfusion.com/nlsecuritynewsal868> Mi2g responds to criticism over its security study, 11/22/04 U.K. research firm mi2g generated a lot of heat for itself when it released a report last month on the most-hacked operating systems on the Internet. http://www.nwfusion.com/newsletters/linux/2004/1122linux1.html?nl> Opinion: Halt! Who goes wirelessly?, 11/22/04 How do you keep tabs on authorized wireless networks and detect unauthorized access points, ad hoc networks and wireless clients? Some of the newfangled wireless LAN switches have this capability built in, but the best stand-alone tool we've found so far is from Highwall Technologies. <http://www.nwfusion.com/columnists/2004/112204gearhead.html?nl> New Sober variant spreading, 11/19/04 A new version of the Sober e-mail worm started spreading in Europe on Friday, according to anti-virus vendors, which have given the worm a midlevel threat rating. <http://www.nwfusion.com/news/2004/1119newsober.html?nl> Anti-Fraud Alliance formed to fight ID theft, phishing, 11/19/04 Five online security software and service providers have formed the Anti-Fraud Alliance to help e-commerce and financial services firms fight online fraudulent activities such as phishing and identity theft. <http://www.nwfusion.com/news/2004/1119anti-allia.html?nl> Oracle announces quarterly patching schedule, 11/18/04 Oracle plans to begin issuing cumulative software patches for Oracle Database, E-Business Suite, Application Server, Oracle Enterprise Manager and Collaboration Suite on a quarterly basis beginning Jan. 18. <http://www.nwfusion.com/news/2004/1118orpatch.html?nl> AOL upgrade packs security tools, 11/18/04 AOL subscribers Thursday will receive a raft of new and enhanced security services as part of their standard package with the launch of AOL 9.0 Security Edition, the latest upgrade of the company's fee-based, consumer-focused online service. <http://www.nwfusion.com/news/2004/1118aolupgra.html?nl> Three key 'people' technologies for IT security mgmt., 11/17/04 With all the technology focus in information security, it can be easy to overlook the fact that security is primarily a people issue. Relationships of trust and the ways people use information systems are at the heart of managing IT security. <http://www.nwfusion.com/newsletters/nsm/2004/1115nsm2.html?nl> Petco settles charge it left customer data exposed, 11/17/04 The U.S. Federal Trade Commission has reached a settlement with pet food retailer Petco Animal Supplies of charges that the company's Web site violated federal law by making deceptive security claims. <http://www.nwfusion.com/news/2004/1117petcosettl.html?nl> _______________________________________________________________ To contact: Network World Staff Senior Editor Ellen Messmer covers security for Network World. Contact her at <mailto:[EMAIL PROTECTED]>. _______________________________________________________________ This Newsletter is sponsored by Lucent Technologies FREE EMA ANALYST REPORT Streamline VoIP Management and boost your bottom line! This Enterprise Management Associates white paper highlights strategies you can use to optimize VoIP through automated IP address management with market-leading solutions like Lucent VitalQIP(R) DNS/DHCP & IP Management software. http://www.fattail.com/redir/redirect.asp?CID=89109 _______________________________________________________________ ARCHIVE LINKS Security research center Latest security news, analysis, newsletters and resource links. http://www.nwfusion.com/topics/security.html _______________________________________________________________ FEATURED READER RESOURCE DOWNLOAD INDUSTRY WHITE PAPERS NOW NW Fusion's White Paper Library is your source for the latest industry white papers. Recent additions to the library include white papers on securing remote access, VOIP and productivity, domain name system best practices, WLAN security, IT documentation and much more. Click here to download: <http://www.nwfusion.com/vendorview/whitepapers.html> _______________________________________________________________ May We Send You a Free Print Subscription? You've got the technology snapshot of your choice delivered at your fingertips each day. Now, extend your knowledge by receiving 51 FREE issues to our print publication. Apply today at http://www.subscribenw.com/nl2 International subscribers click here: http://nww1.com/go/circ_promo.html _______________________________________________________________ SUBSCRIPTION SERVICES To subscribe or unsubscribe to any Network World e-mail newsletters, go to: <http://www.nwwsubscribe.com/Changes.aspx> To unsubscribe from promotional e-mail go to: <http://www.nwwsubscribe.com/Preferences.aspx> To change your e-mail address, go to: <http://www.nwwsubscribe.com/ChangeMail.aspx> Subscription questions? Contact Customer Service by replying to this message. This message was sent to: [EMAIL PROTECTED] Please use this address when modifying your subscription. _______________________________________________________________ Have editorial comments? Write Jeff Caruso, Newsletter Editor, at: <mailto:[EMAIL PROTECTED]> Inquiries to: NL Customer Service, Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 For advertising information, write Kevin Normandeau, V.P. of Online Development, at: <mailto:[EMAIL PROTECTED]> Copyright Network World, Inc., 2004 ------------------------ This message was sent to: [EMAIL PROTECTED]
