Experts: Don't rely solely on patches
Following unresolved ActiveX vulnerability in Internet Explorer, security experts say users should take extra precaution and not rely on critical patches alone.
Security
Apple patches two critical Safari bugs
Update fixes two bugs that put Mac and Windows systems at risk of cross-site scripting attacks or of being taken over.
Find more stories in: Web browsers, Open source, PC security, Network security, Apple Inc., Security, Web Browser, Apple Macintosh, Secunia, patch management
Data protection laws vital for outsourcing hubs
Countries positioning themselves as outsourcing hubs must show they have stringent security regulations that protect customer data, say Symantec execs.
Find more stories in: Data security, IT outsourcing, Outsourcing, Outsourcing, Security, Safe Harbor, India, Asia-Pacific, Malaysia, Government
DirectX targeted in Microsoft security updates
Microsoft Patch Tuesday preview shows that one of six security updates slated for next week will target critical hole in DirectX.
Find more stories in: Hacking, Microsoft Windows, Web sites, Security, ActiveX Control, DirectX, Microsoft Virtual PC, Video, Microsoft Windows, Security Update
US govt takes DDoS in its stride
Department of Homeland Security reports series of distributed denial of service attacks on U.S. government networks since July 4.
Find more stories in: Federal Government, Network security, U.S. Department Of Homeland Security, Attack, FTC, distributed denial of service, U.S. Government, CERT, British Broadcasting Corp., network
Security expert blesses Google Native Client technology
Researcher who wins bug-finding contest says Google Native Client technology is architecturally sound.
Find more stories in: Network security, Viruses and worms, Antivirus software, Web sites, Security, Google Inc., Web Application, Internet Security Systems Inc., computer, Environment
MessageLabs: Short URLs in e-mail spam spikes
E-mail spam that includes truncated Web addresses sees a dramatic increase, MessageLabs says.
Find more stories in: Hacking, Spam and phishing, Security applications/tools, Domain names, Spam filtering, Twitter, Malware, MessageLabs Ltd., security provider, Spam
Report: US Social Security numbers can be predicted
Researchers say they have proven that it is possible to predict Social Security numbers knowing the state and date of birth.
Find more stories in: Security Management, Local Government, Data mining & analysis, Domain names, Authentication, IP, social security number, IP Address, Social Security, Carnegie-Mellon University
'Highest' phishing rate to date
June marked increased malware attacks and record number of phishing attacks on Web, according to Fortinet's online threat report for June.
Find more stories in: Spam and phishing, PC security, Security Management, Phishing, Fortinet Inc., Malware, Singapore, Anti-spam, e-mail, Symantec Corp.
iPhone 3GS jailbreak hits Web
Hacker who originally unlocked the iPhone has let loose a jailbreaking app, "purplera1n", for the iPhone 3GS. For now, it's Windows-only, but a Mac version is supposedly on way.
Find more stories in: Applications and tools, Data services, Security applications/tools, Apple Inc., Apple iTunes, Apple Macintosh, Microsoft Windows 7, firmware, Microsoft Windows, America
Report: Problems stymie US cyberspy protection
Technical and privacy issues are plaguing the U.S. government's work on the overarching system to protect federal computer networks from cyberspies, according to The Wall Street Journal.
Find more stories in: Security implementation/standards, Federal Government, Server platforms, File servers, Hacking, Mobile platforms/communications, U.S. Department Of Homeland Security, U.S. Department Of Justice, Attack, Pentagon
Waledac worm targeting July 4 spam offensive
Researcher warns people to be cautious about clicking on links related to U.S. Independence Day videos in e-mail messages over the holiday.
Find more stories in: Network security, Video, PC security, Eset, Worm, Spamming, Spam, e-Mail Message, leasing, Valentine's Day
Apple fixing iPhone SMS security hole
Vulnerability in the way iPhones handle text messages could be used to track the location of the phone, turn on the microphone, or turn phone into botnet zombie.
Find more stories in: Mobile, Security Management, Mobile/Wireless, Mobile applications, Mobile platforms, Apple Inc., Security, Conference, co-author, RFC
Juniper Networks pulls security talk from conferences
Network infrastructure company cancels researcher's talk at Black Hat and Defcon about ATM insecurities after a vendor complains.
Find more stories in: Network security, Hacking, Federal Government, Business applications, ATM, Security, Conference, Cisco Systems Inc., Juniper Networks Inc., E-book
Unisys puts stealth into the cloud
The IT services company's new Secure Cloud managed service aims to shield sensitive information from other users of a cloud by scattering the data across different storage sites.
Find more stories in: Network security, Federal Government, Cloud computing, Infrastructure/architecture management, Analyst reports, Security, Datamonitor, Workday, Storage, Cloud computing
Postini: Google's take on e-mail security
Search giant's e-mail security unit uses globally distributed automated systems and Zero-Hour software to keep spam and viruses out of inboxes.
Find more stories in: Network security, International governments, Spam filtering, Message, Google Inc., Spam, Database, e-mail security, Humans, Anti-spam
Botnets lead way in spam charge
Over 83 percent of spam in June were sent from botnets, says new report. Instant messages with malicious links and Web-based malware are also on the rise.
Find more stories in: Network security, Security Management, PC security, Data security, Malware, MessageLabs Ltd., Web Browser, Spam, Bot, Messaging
Hackers blamed for wave of fake death tweets
Hackers are suspected to have broken into Twitpic accounts of Britney Spears, Ellen DeGeneres and P. Diddy to post false death announcements.
Find more stories in: Web 2.0, Network security, Security Management, Twitter, Social Media, Password, Britney Spears, photograph, Associated Press, e-mail
UK launches dedicated cybersecurity agency
New government agency will coordinate national IT security defence and response, including launching DDoS attacks and cyberespionage.
Find more stories in: Security, Cybersecurity, IT Security, Government, Prime Minister, U.S., Cyberattack, agency, Security
Finjan offers free SecureTwitter browser plug-in
New SecureTwitter plug-in can protect people from worms, Trojans, and other malware attacks spread through Twitter, Gmail, MySpace, and other sites.
Find more stories in: Security applications/tools, Twitter, Site, Finjan Software Inc., Plug-in, Web Browser, Social Media, question mark, Web browser plug-in, Facebook
















