Alerts: Linux Vulnerabilities, Security Spending, Symantec's List of Top Threats in November
From Linux synchronization and denial of service attacks to some good news about spending on security—a quick look at this week's other security news. (12/17/2003)

Q&A: Protecting Web Applications from Unknown Attacks
Protect against the vulnerabilities in Web applications or risk the consequences. (12/10/2003)

Security Budgets Will Rise Rapidly, Researchers Predict
Good news for security managers' budgets: thanks to the threat of hacking, more companies are getting on the security bandwagon. (12/10/2003)

Alerts:
Oracle Patch; Top Viruses for November; Yahoo Messenger Vulnerability. (12/10/2003)

Case in Point: Law Firm Battles Spam
Installing a spam filter helped one Atlanta firm eliminate 95% of unsolicited e-mail. (12/3/2003)

Best Practices: Avoiding Computer Worms
F-Secure releases a dozen tips to help users avoid common worm problems (12/3/2003)

Security Attacks More Varied and Aggressive, ISS Report Shows
Security incidents are up 15 percent, and the gap between vulnerability disclosure and exploit shrinks (12/3/2003)

Quantum Cryptography Offers Uncrackable Keys
Using the laws of physics, not mathematical difficulty, to secure data, MagiQ Technologies' Navajo Security Gateway offers "future-proof, unbreakable" security devices. (11/19/2003)

How to Stop Bluetooth Insecurities
Bluetooth can be found in newer versions of everything from PDAs to cell phones, laptops to computer peripherals, but the technology is far from secure. Companies can, however, employ a number of def (11/19/2003)

Alert: Microsoft Issues "Critical" Patches
Vulnerabilities found in IE, Word, Excel, FrontPage Server Extensions, and Windows Workstation Service. (11/19/2003)

Best Practices: Audit Without Getting Overwhelmed
How to create and maintain an effective security program through auditing. (11/12/2003)

Tips for Gramm-Leach-Bliley Compliance
Security vendor Symantec offers best practices for staying in compliance with the Gramm-Leach-Bliley Act. (11/12/2003)

Alert: WPA Vulnerable to Dictionary Attack
Wireless networking has a new weakness, according to a new research paper. The problem is with Wi-Fi Protected Access (part of the 802.11i standard) and the way it uses pre-shared keys. (11/12/2003)

Case Study: Hurricane Stress Tests Firewall at Weather.com
The company's VP of technology weighs in on integrating security able to scale rapidly and fail well. (11/05/2003)

Management's Holy Grail: Integrating Identity and Access Control
Six modules in Computer Associates' new eTrust Identity and Access Management Suite, used in any combination, provide an integrated solution to managing identities, from provisioning to enforcement. (11/05/2003)

Alert: British Security Suffers; Macintosh Patches 14 Vulnerabilities
A new report from McAfee examines European companies' vulnerabilities. (11/05/2003)

XML: A Growing Security Threat?
The data-swapping standard, now incorporated into Microsoft's Office 2003, may be the next big route for malicious attacks. (10/29/2003)

Security Managers Fear Next Generation of Attacks Says Survey
NetScreen survey also reports a widespread belief that current security set-ups are inadequate to defend against these threats (10/29/2003)

Alert: Novell Patches Multiple iChain
Novell beta support pack fixes multiple “highly critical” vulnerabilities. We explain the problem and what you can do about it. (10/29/2003)

Companies Miss Strategic Security Focus, PricewaterhouseCoopers Says
The problem: how to support an "always on" environment. (10/22/2003)

Sharing Hardware Cryptography No Longer Enough
It's no longer enough just to use encryption. Now what's important is how well you've used encryption, how well you administer it, and how well you can prove to auditors what you're doing. (10/22/2003)

Alert: Windows Messenger Service Vulnerability
Buffer overflow attack could give the attacker administrative privileges (10/22/2003)

Q&A: Mitigating the Denial of Service Threat
Security consultant details ways to protect yourself (10/15/2003)

Dangerous Blended Attacks Increase, Symantec Says
Payload and speed make them especially dangerous; eight best practices for resisting their impact (10/15/2003)

Best Practices: Five Tips for Managed Security Outsourcing
Yankee Group’s recommendations for getting the most from managed security outsourcing (10/15/2003)

Q&A: Securing the Door as Important as Securing the Data
Organizations regard the intersection of physical and electronic security—holistic security, if you will—as the end goal (10/8/2003)

Best Practices: Minimizing the Risk of Forgotten Modems
Nearly one-fourth of all organizations have unauthorized modems connected to their network, providing easy network access for computer attackers that firewalls won't stop. (10/8/2003)

Alerts: New IE Exploit Hacks DNS; Kaspersky Labs' Top Ten Viruses for September
Anti-virus vendors report MS patch does not protect against Trojan Qhosts; September's list of top ten viruses (10/8/2003)

Coping with the Gramm-Leach-Bliley Act
We speak with one of the GLBA's five authors to discuss the challenges organizations face as they struggle to stay GLBA-compliant. (10/1/2003)

Security Spending Will Top All IT Investments
IDC predicts security and business continuity spending will increase twice as fast as overall IT budgets between now and 2007. (10/1/2003)

Alert: Virus Masquerades as Microsoft Security Update
New worm targets old IE vulnerability. (10/1/2003)

Best Practices: Staying Ahead of International Regulations
From carrots to sticks, a variety of recent regulations challenge security managers. (9/24/2003)

CERT: Best Practices for Beating Worms
CERToutlines the top steps businesses, vendors, and the government can take to arrest the onerous cycle of constant patching. (9/24/2003)

Alert: Vulnerability in SSH
Versions of OpenSSH prior to 3.7.1 are vulnerable to denial of service attacks via a buffer management problem. (9/24/2003)

Finding Security Holes in Your Web Applications
The dot-com boom’s legacy: buggy code. How do you find those bugs? Instead of trying to do code reviews with tools that were meant for developers, it's time to do them with tools meant for security (9/17/2003)

Accelerating Security Certification
Can information security professionals really get certified in half the ordinary time? (9/17/2003)

Authentication: Three Critical Steps for Every Organization
Yankee Group predicts large growth in the authentication market. Here are three things every organization needs to do to ensure users are who they say they are. (9/17/2003)

Best Practices: Handheld Security
Handheld security expert suggests best practices for organizations that support the devices  (9/10/2003)

Dirty Dozen Viruses: August was a Banner Month
Central Command shows a single virus accounted for over three-quarters of all activity last month.  (9/10/2003)

Alert: “Critical” Flaw in Office, Other Microsoft Applications
Vulnerability in Microsoft applications occurs thanks to Visual Basic for Applications  (9/10/2003)

Seeking the Perfect Patch Process
To avoid the patch-and-pray cycle, IT organizations need to examine how to make vulnerabilities such as Sobig seem so small.  (9/3/2003)

Spammers Increasing Methods to Avoid Detection
Techniques for challenging and defeating spam filters continue to grow  (9/3/2003)

Alerts: CiscoWorks, P2P Software Vulnerable
Cisco details vulnerabilities in CiscoWorks; eMule code hiding in P2P software  (9/3/2003)

Sobig Lives Up to Its Name
It's been a banner month for viruses, as new vulnerabilities were unleashed and others lingered  (8/27/2003)

Best Practices in Security Training
Worms and legislation dictate the need for security-savvy employees; here's how to train them and reinforce human nature.  (8/27/2003)

Vulnerabilities: IE Cross-Domain Security Flaw, Database Component Exposure
Microsoft releases a patch for IE 5.01 and above; company's Data Access Components could run hacker's code  (8/27/2003)

Worm Continues Blast Across Internet
Worm exploits RPC/DOM vulnerability; denial-of-service attacks still likely  (8/20/2003)

Passwords and Identity: Seeking Synergy
Do password management software and identity synchronization software naturally go together? One thing's for sure: the ROI for both categories is attractive.  (8/20/2003)

Alerts: BSD and Postfix Vulnerabilities; File-Sharing Dangers
New vulnerabilities in BSD operating system and Postfix, a popular mail transfer agent; the FTC warns about the dangers of file-sharing  (8/20/2003)

How To Protect Yourself from Fibre Channel Insecurity
Vendor and end-user ignorance perpetuate security holes, security architect warns  (8/13/2003)

Case in Point: Protecting the Network Edge
Japanese university finds easy way to control network access  (8/13/2003)

Alerts: Vulnerabilities in IE, Windows Desktops
MiMail.A exploits IE flaw; Autorooter targets windows hole to run its own code  (8/13/2003)

Identity Management: Untangling Meta and Virtual Directories
We discuss how organizations use virtual directories to interface enterprise applications and identity data with Clayton Donley, CEO of OctetString, a virtual directory provider. (8/6/2003)

Boosting IM Security
Management key to enterprise rollout; financial services advised to retain messages (8/6/2003)

Briefs:
Microsoft offers patch to a critical Windows problem; survey shows few companies are in regulatory compliance (8/6/2003)

The Perils of Identity Mismanagement
eProvision Role-Out normalizes, reconciles, and cleans user identities (7/30/2003)

Integrating Security into Software Development
AppScan Developer Edition provides fully automated application security testing for major development environments (7/30/2003)

California Privacy Law: Goodbye Good Intentions
New law mandates information theft disclosure no matter what (7/23/2003)

Teaming Identity Management with Auditing
Novell's Nsure Audit helps you comply with government regulations, organizational policies (7/23/2003)

Briefs: Brand spoofing on the rise; e-Security update
SurfControl reports brand spoofing is on the rise; e-Security updates Enterprise Security Management software (7/23/2003)

CA, SteelCloud Enter Crowded Appliance Market
Companies announce launch of antivirus, IDS boxes (7/16/2003)

Wireless LAN Monitoring Reveals Risks and Risky Behavior
An activity-monitoring experiment in a confined, high-usage WLAN environment shows surprisingly few users take security precautions when accessing e-mail. (7/16/2003)

Briefs: Microsoft Flaw, nCircle Update
Microsoft warns of critical security flaw, nCircle updates IP360 vulnerability management (7/16/2003)

Careers: Getting and Keeping an Information Security Job
Tips for starting out, furthering your information security career (7/9/2003)

Unsolicited E-mail Tops List of Intrusions
Spam edges out viruses; legal threat rises (7/9/2003)

Briefs: Bytware's Native iSeries Antivirus; Symantec Updates IDS Software
Bytware introduces native IBM iSeries virus detection; Symantec updates three intrusion detection system products (7/9/2003)

Overcoming Wi-Fi Security Fears
iPass improves interface and connectivity for global, virtual network (7/2/2003)

Combating Identify Theft and Fraud in Real Time
New Unisys software ARMS financial institutions in their fight against fraud (7/2/2003)

Briefs: Tripwire compliance monitoring; security appliance sales up, prices down
Tripwire introduces its Professional Audit Preparedness Services; what's behind falling appliance prices? (7/2/2003)

Unsolicited E-mail: No Problem Come 2006?
An analyst's road map to a (mostly) spam-free existence (6/25/2003)

CA Announces Integrated Content Security Management
Product offers single console for viewing security policy compliance and enterprise-wide content-related security trends. (6/25/2003)

Briefs: Resetting passwords, antivirus deal
Getting colleagues' permission to reset passwords; Central Command offers jilted Linux users antivirus discount (6/25/2003)

Microsoft Entering Antivirus Market
Company may use assets of takeover target assets improve Windows (6/18/2003)

Protecting Data From Events Firewalls Can't Catch
TippingPoint releases Peer-to-Peer control, intrusion prevention devices (6/18/2003)

Briefs: IPv6 attacks, updated iQ.Suite (6/18/2003)

CSI/FBI Report: Losses Down, Vulnerabilities Up
Ex-FBI agent discusses Computer Security Institute report (6/11/2003)

Updated Tivoli Risk Manager Locks Down Databases
Software can scout for risks "autonomically” (6/11/2003)

Briefs:
Windows Server 2003 patch, worm aimed at financial institutions, more (6/11/2003)

The Push for Policy Compliance
BindView launches tool to help with government regulations
(6/4/2003)

Web Services: Protecting Yourself from Partners' Security Problems
OASIS unveils XML schema to provide initial threat, impact, and risk ratings guidance in consistent manner (6/4/2003)

Briefs:
Intrusion detection, dynamic threat protection, and Windows
Media Services patch
(6/4/2003)

Tackling the File-Swapping Threat
Akonix releases tools to identify and block file trading
(5/28/2003)

Security Captures Attention of Data Center Managers
What keeps data center managers awake at night (5/28/2003)

Briefs: Symantec Vulnerability Assessment, Windows Server 2003 Backup, Another E-Mail Threat
(5/28/2003)

Q&A: Securing Sensitive Networks
Connecting open and closed networks with security intact (5/21/2003)

Fighting Fizzer
Blocking and detecting Trojan code (5/21/2003)

News in Brief
Security toolkit for developers; MailFoundry appliance filters e-mail (5/21/2003)

Improving Oracle Security
Logical Apps offers granular security for Oracle databases (May 14, 2003)

Mobile Forensics: Network Analysis on the Go
SilentRunner analysis tool takes baseline, analyzes network usage (May 14, 2003)

News in Brief
Passport and Cisco vulnerabilities; improving MS Server protection (May 14, 2003)

Protecting Physical Assets from Physical Threats
NetBotz's new IP-based threat-monitoring hardware (May 7, 2003)

F-Secure Talks Government Security
The top SSH vendor explains what its government customers need (May 7, 2003)

News in Brief
Cisco Secure Access Control Server; more on Snort (May 7, 2003)

Locking Down Digital Documents
A solution for companies to secure paper trails in the information age. (April 30, 2003)

Firewall Drag Race
Watchguard's new top-of-the-line firewall, gigabit speeds, and one question -- is it overkill? (April 30, 2003)

News in Brief
Snort vulnerable. An XP patch slows computers; patch anyway, says Microsoft. (April 30, 2003)