Security

RSS
Find network and information security news, reviews and analysis, covering data protection, privacy, endpoint security, and security management.
  • 'Super-DMCA' fears suppress security research

    Posted August 15, 2003 - 2:35 pm

    Sweeping new laws passed in several states are aimed at stopping cyber-terrorists - but they run the real risk of putting legitimate cryptography researchers in prison. Some are going so far as to put their academic papers on overseas servers. Has the law become too much of a blunt instrument?
  • Watch out for Bluetooth sniffers

    Posted August 15, 2003 - 2:31 pm

    A British security researcher has unveiled a demonstration program that sniffs out unsecure wireless Bluetooth-capable devises and grabs potentially sensitive data from them. The problem is particularly worrisome because many users don't even realize that the mobile devices they use have Bluetooth capabilities.
  • Microsoft.com falls to DoS attack

    Posted August 15, 2003 - 11:55 am

    Microsoft Corp.'s main Web site was inaccessible for two hours Thursday evening, the victim of an Internet-borne denial of service attack, the company said.
  • More spam in July than during all of last year

    Posted August 15, 2003 - 10:51 am

    Did you ever consider just how much spam is being sent and received each day? According to MessageLabs, spam accounted for 50 percent of all e-mail sent during July. To determine this, MessageLabs scanned more than 156.6 million e-mails during July, of which 79.7 million were identified as spam and intercepted.
  • US spammers are top contributors to global spam problem

    Posted August 15, 2003 - 10:33 am

    messagecare, a company that provides a spam filtering service, used spam data collected through its global spam trap network over a 10 day period to determine the origination of spam. The U.S. ranked number one, contributing 33% of the spam. See how other countries fared.
  • Current spam laws

    Posted August 15, 2003 - 8:57 am

    This site is a compilation of laws related to unsolicited bulk and commercial e-mail for educational and informational purposes only. Its steward is David E. Sorkin who serves on the faculty of John Marshall's Center for Information Technology and Privacy Law. You'll find laws by country and state, articles, case studies, etc.
  • Microsoft, under attack, releases Blaster security advice

    Posted August 15, 2003 - 8:39 am

    With a new version of the W32.Blaster worm on the loose and set to spawn a massive DoS (denial of service) attack on a Microsoft Corp. Web site Saturday, the software maker released a set of security guidelines for users Friday in an effort to minimize the damage.
  • Microsoft site down day before Blaster set to attack

    Posted August 15, 2003 - 8:20 am

    Microsoft Corp.'s Windowsupdate.com Web site was inaccessible early Friday, one day before a new variant of the W32.Blaster worm was set to spawn a massive denial of service (DoS) attack on the site.
  • Spam goes through Capitol mincer

    Posted August 14, 2003 - 11:17 pm

    The Burns-Wyden CAN-SPAM Act passed the Senate Commerce Committee today. Major ISPs such as Microsoft and Yahoo have announced their support for CAN-SPAM, although anti-spam groups argue it is likely to do more harm than good.
  • Experts ponder coming Blaster attack

    Posted August 14, 2003 - 5:48 pm

    While Internet users and corporations dig out from the havoc caused by the new W32.Blaster Internet worm, security experts are questioning whether a massive denial of service attack from infected machines, scheduled for Saturday, will succeed.
  • Proximity, perimeter, and physical security audit guide

    Posted August 14, 2003 - 1:10 pm

    If you're planning a physical security audit, this guide can help you. It includes a detailed list of what weaknesses to look for.
  • Physical penetrations: The art of advanced social engineering

    Posted August 14, 2003 - 1:06 pm

    This older article is still relevant because most of what it covers isn't technical at all. Instead, it goes into "social engineering" - how attackers can gain physical access to your facilities - and thus your networks.
  • Physical access policy

    Posted August 14, 2003 - 1:02 pm

    Trying to write a policy to dictate physical access rules for your IT assets? You may want to use this policy, from the University of Texas, to guide you. (Policy is in PDF format.)
  • Security issues and solutions: Physical security and auditing

    Posted August 14, 2003 - 12:59 pm

    This article reviews two ways in which you can better secure your networks. The first is by better protecting access to the physical components of your network, and the second is by careful auditing to determine the nature of any compromises.
  • Physical computer security tips

    Posted August 14, 2003 - 12:54 pm

    Even if an attacker manages to enter your facilities surreptitiously, he should still run in to inner lines of defense when trying to access your protected data. The following list offers some tips on what you can do to physically protect your network.
  • Planning physical security strategies

    Posted August 14, 2003 - 12:42 pm

    For too long, physical and IT security were considered different problems - and that meant that computer systems were vulnerable to intruders who gained physical entrance to a facility. But that's starting to change. Read on to find out how the security convergence can help your company.
  • Protect yourself from physical intrusion

    Posted August 14, 2003 - 12:38 pm

    This research paper goes into a good bit of detail on designing a facility that can resist physical intruders. It describes an ideal situation and also helps you make the best of the facility you're already in. (Paper is in PDF format.)
  • Physical security audit checklist

    Posted August 14, 2003 - 12:33 pm

    One of the best ways to check the physical security of your network infrastructure is to conduct an audit. This extensive checklist will help you and your staff in formulating your own audit plan.
  • At a Boston hospital, lessons learned from Slammer

    Posted August 14, 2003 - 11:27 am

    While organizations around the world scrambled this week to disinfect and patch systems that had been hit by the dangerous new W32.Blaster Internet worm, the CIO of Beth Israel Deaconess Medical Center could sit back and relax. Having been slammed by Slammer in January, the hospital got vigilent about patching.
  • Microsoft slip ups may have helped new worm

    Posted August 14, 2003 - 9:02 am

    With the spread of the dangerous new W32/Blaster Windows worm slowing, attention is shifting to Microsoft Corp.'s efforts to help its customers patch vulnerable systems, with some accusing the company of providing inadequate protection and unreliable information about protecting their computers.
  • Protect the wiring closet

    Posted August 13, 2003 - 8:42 pm

    The lowly wiring closet, the backbone of your organization, is probably the last place you think needs protecting. Yet, our penetration tests reveal this couldn't be further from the truth.
  • New Blaster worm variant on the loose

    Posted August 13, 2003 - 5:45 pm

    Fewer than two days after it first appeared on the Internet, the W32.Blaster worm already spawned a new variation that is also spreading, according to warnings from antivirus vendors.
  • Feared RPC worm starts to spread

    Posted August 12, 2003 - 7:41 am

    Security experts on Monday warned of the first self-propagating virus to take advantage of a widespread vulnerability reported last month in Microsoft Corp.'s Windows operating systems.
  • Windows worm starts its spread

    Posted August 11, 2003 - 6:29 pm

    A worm called MBlast has been spotted in the wild today, exploiting what many researchers are calling "the most widespread Windows flaw ever." There's a patch available - find out if your system is vulnerable.
  • Zone Labs moves to secure instant messaging

    Posted August 11, 2003 - 10:36 am

    Zone Labs Inc. is jumping into the instant messaging (IM) security fray, but unlike most vendors Zone Labs will first target consumers and wants to secure IM on the desktop instead of the server.

Join today!

See more content
Ask a Question