Endpoint Security

RSS

Endpoint security news, solutions, and analysis for IT professionals

Flaw in web app frameworks pushes Microsoft to patch ASP.net promptly

Posted December 29, 2011 - 9:37 am

Many web app frameworks are vulnerable to a denial-of-service attack targeting the way they handle hash tables, researchers revealed Wednesday, prompting Microsoft to announce an "out-of-band" patch for its ASP.NET platform just hours later.
- Quick Read
Wi-Fi Protected Setup flaws make wireless network brute-force attacks feasible

Posted December 29, 2011 - 7:02 am

Design flaws in the Wi-Fi Protected Setup (WPS) wireless standard can make it easier for attackers to obtain access codes for secured wireless networks by brute force.
- Quick Read
Ten IT news stories we'll read in 2012

Posted December 27, 2011 - 12:33 pm

Well, we erred in our 2011 predictions in not repeating a 2010 forecast that Carol Bartz would be ousted as Yahoo CEO -- it was bound to happen, we just called that one too early. Then again, we also predicted last year that Oracle would buy Salesforce.com and have decided not to repeat ourselves this year, so we'll see if we were just ahead on that one, too. Meanwhile, these are our predictions for the next 12 months:
- Quick Read
Naval researchers pioneer TCP-based spam detection

Posted December 23, 2011 - 5:39 pm

A group of researchers from the U.S. Naval Academy has developed a technique for analyzing email traffic in real-time to identify spam messages as they come across the wire, simply using information from the TCP (Transmission Control Protocol) packets that carry the messages.
- Quick Read
CoreIT RSS

GoDaddy responds to boycotters by ending support of SOPA, muzzling founder

Posted December 23, 2011 - 4:38 pm

GoDaddy founder Bob Parsons made GoDaddy the one well known name among domain registrars with commercials full of jiggle and blogs filled with items chosen to attract more attention through outrage than wisdom. New investors may have changed all that.
- Quick Read
CoreIT RSS

In denying content piracy charge, RIAA steals worst excuses from every episode of 'Cops'

Posted December 22, 2011 - 6:57 pm

To try to explain why six IP addresses assigned to its offices had been linked to illegal downloads, an RIAA spokesperson offered a technically infeasible, logically doubtful excuse involving partial IP addresses, outside contractors and homework-eating dogs.
- Quick Read
Windows 8 picture password is 'Fisher-Price toy' says father of 2-factor authentication

Posted December 22, 2011 - 4:29 pm

The Windows 8 feature that logs users in if they touch certain points in a photo in the right order might be fun, but it's not very good security, according to the inventor of RSA's SecurID token.
- Quick Read
CoreIT RSS

Years-old security flaw gives attacker full remote control of Android devices

Posted December 22, 2011 - 2:39 pm

In July, 2010 researchers presented details of an outrageous flaw in Android security and how it could be used to take over a user's device. Yesterday a viaForensics researcher posted video showing how to make even better use of the flaw, which has not been fixed.
- Quick Read
CoreIT RSS

Blue screen of death hits 64-bit Windows 7 machines running Safari; culprit is HTML tag

Posted December 21, 2011 - 4:04 pm

The 64-bit versions of Windows 7 are vulnerable to a surprisingly simple error that causes a disastrous blue-screen-of-death crash, but only when running Apple's Safari browser. An IFRAME tag with the wrong value taps the blue screen and might let malware run with root privileges.
- Quick Read
CoreIT RSS

Security researcher blows whistle on gaping Siemens' security flaw 'coverup'

Posted December 21, 2011 - 3:44 pm

Researcher Billy Rios, who has done security at Verisign, E&Y, the Dept. of Defense and other big organizations, blogged about a series of blatanly obvious security holes in Siemens' SIMATIC industrial control system, flaws Siemens claims do not exist.
- Quick Read
CoreIT RSS

'Hysteria-busting' FAQ shows no-trial terrorist detention rules just as bad as you thought

Posted December 21, 2011 - 2:19 pm

One non-partisan analyst tries do defuse tension over detention-without-trial rules in 2012 military budget. Instead, the facts support most of the worst fears about the new law, but highlight a weakness: bad laws can be challenged and overturned; bad policy can't.
- Quick Read
Sophos updates mobile device management platform

Posted December 21, 2011 - 1:53 pm

Latest version of Sophos Mobile Control includes reporting dashboard for compliance enforcement
- Quick Read
Mozilla launches Firefox 9, speeds up JavaScript

Posted December 21, 2011 - 1:30 pm

Mozilla on Tuesday shipped Firefox 9, claiming that the new browser processes JavaScript up to 36% faster than its predecessor.
- Quick Read
LibreOffice backers want community to join 'bug hunt'

Posted December 21, 2011 - 1:19 pm

The organization behind LibreOffice is hoping community members will help it uncover problems with an upcoming release of the open-source office suite via an international "bug hunt" next week.
- Quick Read
UK gov't concerned about BlackBerry porn

Posted December 21, 2011 - 10:26 am

BlackBerry maker Research in Motion (RIM) was summoned to a meeting with the UK communications regulator Ofcom yesterday, after it emerged that children are able to view pornography on its smartphones.
- Quick Read
Security minefield: 'Bring your own device' will bedevil IT security in 2012

Posted December 21, 2011 - 7:27 am

The rapid adoption of the newest mobile devices -- especially the Apple iPhone and iPad and the Google Android-based equivalents -- will be a huge disruptive force in enterprise security next year. Not only will there be pressure to decide how to protect and manage these devices, which are growing as malware targets, the complexity of this task is magnified many times over because companies are allowing employees to use their own personal smartphones and tablets for business purposes -- what's sometime called "bring your own device" (BYOD).
- Quick Read
CoreIT RSS

Best idea of 2011: Give control of Internet content to group that sued a dead grandmother

Posted December 20, 2011 - 6:12 pm

The RIAA, the source of much of the intent of SOPA, is a source of reason and justice online the way hyenas are on the African plain. Its intent is selfish, its methods are ugly, its goals are indefensible, and its results are undetectable. Who better to write censorship laws for the web?
- Quick Read
CoreIT RSS

Here are a few ways to get around SOPA restrictions

Posted December 20, 2011 - 5:51 pm

Want to know how to keep the impending SOPA Internet-censorship rules from cramping your style (and 3 of 10 major inalienable rights)? Tell your Congressperson to vote it down. Then use these proxies and Firefox add-ons to keep censors in the dark about what you're doing.
- Quick Read
2011 Women of Influence award winners named

Posted December 19, 2011 - 9:49 pm

The 2011 Executive Women's Forum "Women of Influence" Awards were celebrated recently at the annual EWF event in Scottsdale, Arizona.
- Quick Read
CoreIT RSS

Could hypocrisy at RIAA, DHS derail draconian rules against free downloads?

Posted December 19, 2011 - 5:33 pm

YouHaveDownloaded crawls BitTorrent sites, recording IP addresses of those downloading files and the files they're downloading. It turns out, if the record is correct, that two of the most energetic persecutors of downloaders are illegal downloaders themselves.
- Quick Read
CoreIT RSS

Hey, IBM, can you read what I think of these 5 predictions for the future?: 'No Jetpack'

Posted December 19, 2011 - 4:15 pm

Predicting the future, technologically provocative terms, will always stir up criticism. IBM takes a swing, but mostly misses. Predicting EEG-controlled mouse drivers will lead to mind reading is a stretch; to assume it's a good idea shows ignorance of how badly other people think.
- Quick Read
Japanese game maker Square Enix to reopen hacked site, says no private data lost

Posted December 19, 2011 - 7:23 am

Japanese game developer Square Enix said Monday that no private data was stolen when a server for a fan site was hacked last week, and it plans to reopen the site to users by the end of the year.
- Quick Read
CoreIT RSS

Light saber defeats Tasers, but not cops

Posted December 16, 2011 - 7:07 pm

A Portland, Ore. man was arrested after allegedly assaulting passersby and police with light sabers. No one was dismembered during the attacks.
- Quick Read
ITwhirled RSS

Security in 2012: Let's start at the endpoint

Posted December 15, 2011 - 10:34 pm

There are two key trends that we all should seriously consider next year. The first is social engineering and targeted attacks. The second is smartphone (in)security, not just for Android, but for iPhones too.
- Quick Read
Microsoft gets silent upgrade religion, will push IE auto-updates

Posted December 15, 2011 - 9:08 am

Microsoft will silently upgrade Internet Explorer starting next month, arguing that taking the responsibility out of the hands of users will keep the Web safer.
- Quick Read

Join us:

May is...
Cloud Month

BY THE NUMBERS: Cloud computing

CAREER: Top cloud jobs

MANAGEMENT: Cost battle: Cloud computing vs. in-house IT

REVIEW: 4 killer cloud IDEs

DEVELOPMENT: When to use cloud platforms vs. dedicated servers

SLIDESHOW: Top 10 cloud tools for IT pros

Learn more

Endpoint SecurityWhite Papers & Webcasts

White Paper

Key Drivers: Why CIOs Believe Empowered Users Set the Agenda for Enterprise Security

See more White Papers | Webcasts

Join today!

Get FREE access to premium content, in-depth reviews, practical tips

6 IT hiring tips to weed out the duds
Rule #1: Don't hire out of desperation.
4 free tools to simulate a cloud connection
Linux-based WAN emulation tools worth a look.
15 common IT resume mistakes (and how to avoid them)
Learn how to build a better resume.

content

Ask a Question

Endpoint Security

Endpoint SecurityWhite Papers & Webcasts

Join today!

Review

Marketplace

Sponsored Links

The IDG Network