Find network and information security news, reviews and analysis, covering data protection, privacy, endpoint security, and security management.
  • New malicious IM bot chats with you to spread virus

    Posted December 7, 2005 - 11:19 am

    On Monday, IMlogic first published details of a new instant messaging threat known as IM.Myspace04.AIM. Once the computer of an AOL IM user is infected by IM.Myspace04.AIM, the bot sends messages to people on the infected user's buddy list, making the messages appear to come from the infected user.
  • Ebay tricked by phony e-mail

    Posted December 6, 2005 - 11:57 am

    A sophisticated phishing attack has proven to be so successful, it has tricked eBay's own fraud investigations team into endorsing it as legitimate, according to an independent security consultant who reported the attack to eBay.
  • MCI launches security risk management service

    Posted December 6, 2005 - 11:41 am

    MCI is introducing a security risk management service to help enterprises take proactive action against systems threats and vulnerabilities. The NetSec Security Risk Management Service will correlate and calculates diverse threats across the enterprise, using a scorecard-based approach that allows users to prioritize and resolve security risks.
  • D-Link bolsters line of SMB security products

    Posted December 5, 2005 - 5:35 pm

    D-Link Monday fortified its NetDefend security product line for small and medium-sized businesses with new firewall products and a security appliance, a company spokesman said.
  • Phishing IQ Test

    Posted December 5, 2005 - 2:25 pm

    Think you can spot a phishing attempt? If so, test your expertise here with these 10 new suspect "phish" from Mail Frontier. Good luck!
  • Gmail virus scanning draws some user complaints

    Posted December 5, 2005 - 2:06 pm

    The virus-scanning feature Google Inc. added to its Gmail Web mail service this week has generated concern, bewilderment and disappointment among some users.
  • U.K. cyberfraud shuts down tax credit portal

    Posted December 5, 2005 - 11:23 am

    The U.K. tax authority shut down a tax credits Web site Thursday and a criminal investigation is underway concerning possible identity theft, a spokesman confirmed Monday.
  • IE bug lets hackers phish with Google Desktop

    Posted December 2, 2005 - 5:18 pm

    A bug in Microsoft's Internet Explorer (IE) browser gives phishers a way to scan the hard drives of Google Desktop users, according to an Israeli hacker. Because of a flaw in the way IE processes Web pages, a malicious Web site could use the attack to steal sensitive information like credit card numbers or passwords from the hard drives of its visitors.
  • Security Reading

    Posted December 2, 2005 - 5:09 pm

    Here are some infosec and related books you might consider or rule out. I've given each book a ranking - with four stars being the best.
  • E-mail, collaboration and security

    Posted December 2, 2005 - 1:45 pm

    A new all-in-one appliance from Mirapoint, dubbed the M50, is designed to help SMBs with 100 to 500 employees with email management and security; spam and virus prevention; and shared calendaring, scheduling and address books.
  • IT security turns inside out: Outbound content compliance fuels continued market growth, IDC says

    Posted December 2, 2005 - 1:45 pm

    An emerging market segment of security products -- being termed OCC or outbound content compliance products -- designed to detect and prevent outbound content that violates corporate policy or other regulations will swell to $1.9 billion by 2009, according to IT market research firm IDC.
  • Sober attack biggest virus outbreak ever

    Posted December 2, 2005 - 1:44 pm

    The recent Sober outbreak is the largest virus outbreak to date, according to email security vendor Postini, which said that over seven days in November it blocked more than 218 million messages infected with Sober. That represents a 1,500 percent increase in virus-carrying emails over a regular month, the company said.
  • Don't call it spyware

    Posted December 2, 2005 - 1:43 pm

    The company formerly known as Gator, now rechristened Claria, has in three short years transformed itself from one of the most despised "spyware" companies to a much sought-after online marketing partner -- without really changing anything at all. "The spyware wars are over -- and spyware has won," this article states.
  • Mobile anti-virus: Now or later?

    Posted December 2, 2005 - 1:42 pm

    While the current risk of mobile malware is relatively low in the United States, security architects are advised to develop a mobile device security strategy for 2006 that addresses the potential virus threat that surrounds PDAs and smartphones.
  • Hackers publish two more Windows attacks

    Posted December 2, 2005 - 10:44 am

    Hackers have given system administrators two more reasons to update users' Windows PCs. Over the past two days, they have published two more samples of software that could be used to attack an unpatched Windows system, bringing the tally of new Windows attacks released into circulation this week to four.
  • Attackers targeting unpatched IE bug, Microsoft warns

    Posted November 30, 2005 - 6:30 pm

    Microsoft is warning Internet Explorer users to be careful where they browse because attackers are now targeting a critical unpatched bug in the software. If successful, these attackers could possibly use this bug to seize control of a user's system, Microsoft says.
  • Microsoft invites consumers to test security service

    Posted November 30, 2005 - 11:16 am

    Microsoft has invited consumers to test the latest beta version of its Windows OneCare Live security service, the company announced late on Tuesday.
  • Concerns raised over Perl security flaw

    Posted November 30, 2005 - 11:11 am

    Dyad Security on Wednesday posted an advisory about a potentially serious flaw in the open-source scripting language Perl but some security experts say they find the vulnerability unlikely.
  • Second sample of Windows attack code posted

    Posted November 29, 2005 - 10:13 pm

    For the second time this week, hackers have posted a sample of code that could be used to attack a Windows machine that has not been updated with the most recent Microsoft security patches. On Tuesday the French Security Incident Response Team (FrSIRT) Web site posted a sample of a maliciously encoded image file that could be used by attackers to grind a Windows PC to a halt.
  • Employees blind to perils of risky e-mail

    Posted November 28, 2005 - 5:42 pm

    Few mortals can resist the urge to pass on juicy gossip or a good dirty joke. But mortals with corporate e-mail accounts should think twice before hitting send. Most employees who use e-mail at work have sent or received messages that could put their companies at risk. But the vast majority doesn't believe they've ever sent risky e-mails.
  • MailFrontier's phishing IQ test

    Posted November 28, 2005 - 12:38 pm

    Do you know phishing from fishing? Test your ability to identify faux emails designed to lure you into parting with private information with this quiz from email security vendor MailFrontier. Review 10 actual emails and decide whether they are legit or fraudulent, and then check your score for tips on how to distinguish the real deal from a raw deal.
  • Can you spot the phish attack?

    Posted November 28, 2005 - 12:37 pm

    Users are better this year than they were a year ago at identifying fraudulent emails, but only 4 percent can spot a phishing attack 100 percent of the time, according to email security vendor MailFrontier, which has created a Phishing IQ Test. The average test score -- 75 out of 100 -- is up from an average of 61 last year.
  • ET could hack internet

    Posted November 28, 2005 - 12:36 pm

    A particle physicist with the U.S. Fermi National Accelerator Laboratory in Batavia, Ill., has warned that computers running programs to decode space signals, such as Seti@home, could be subject to attacks from alien malware.
  • Thieves put car security system to test

    Posted November 28, 2005 - 12:36 pm

    A new car security system that uses satellite technology to track the location of a stolen vehicle, BT Trackit, was put to the test on the same day as the product launch when the project manager's Audi was taken from in front of his house and recovered later that afternoon. BT insists it did not stage the incident.
  • Browser makers band together against phishers

    Posted November 28, 2005 - 12:35 pm

    Developers representing the major Web browsers, including Internet Explorer and Mozilla Firefox, recently met to discuss how browser technology could aid users in better identifying suspicious Web sites vs. legitimate ones, as well as ways to make site spoofing more difficult for scammers.
Join us:






Join today!

See more content
Ask a Question