Security: Vulnerabilities


ASN Security Issues Run Deep, Forrester Warns

Security flaws reveal weaknesses in Microsoft's Abstract Syntax Notation One, a cryptographic and authentication mechanism in use by every Window operating system. The problem is with the compiler, not the applications themselves. It's time for developers to patch and recompile quickly.

New Breed of Attack Targets Microsoft Outlook XP Users

Microsoft upgrades Outlook XP's vulnerability to "critical" after researcher finds additional flaws; company urges patch be applied quickly

Worm Writers One-Up Each Other

The battle to capture your e-mail address has gone to new levels: deleting competing worms.

Alerts

New Vulnerabilities Steal Financial Data Via ICQ, Target P2P File Traders, and Delete Office Files

Microsoft Says Security Improvements Coming

The company is querying its user base for security enhancements; meanwhile, security option defaults will be changed in future releases and updates.

Alerts

Sarbanes-Oxley; partnering for security; security certification guide

Security Briefs

Microsoft Warns of Critical ASN.1 Vulnerability; More Doom Unleashed

Top Three Security Problems Remain Despite Increased Spending

Companies turn to managed Service providers for help; desktops dominate security budgets as patches average $234 per machine.

MyDoom Details from Kaspersky Labs

Newest vulerabilities feed on old worm to take aim at Microsoft's Web site

Solving the Patch Management Headache

Best practices in keeping the desktop secure

Briefs

New Mydoom variants; Vulnerabilities in IE browser, Checkpoint products; January a banner month for threats.

Companies Defect as Anti-virus Software Struggles with Worms

The latest threats have companies reconsidering their anti-virus tools, wondering if AV is becoming irrelevant. Increasingly, companies are looking at application-level personal firewalls and all-in-one gateway hardware for PCs.

First Worm Outbreak of the Year Packs a Wallop

MyDoom monopolizes Internet via e-mail harvesting, P2P file sharing, back door

Guarding Against Your Partner's Web Services Flaws

Coding errors in Web Services code at your partners can trigger problems on your own systems.

Briefs

New worm and Trojan software unleashed; purported PayPal mail carries worm

Briefs

Voice-over-IP vulnerabilities; impact to Microsoft's ISA Server 2000

Battling Blended Threats with Pattern Detection

IT needs to move from looking at events coming from particular sensors to recognizing patterns of activity coming into that infrastructure.

Briefs

Using investigations to satisfy Sarbanes-Oxley requirements; learning from 2003's vulnerability onslaught

BRIEFS: Network Storage Rules; Anti-Virus Software; Choosing a Mail Filter

Learn Network Storage Security Rules; Free Anti-Virus (For A Year)

Report: Last Year Was Worst Ever for Viruses

Last year was the worst year ever for vulnerabilities, says anti-virus software maker F-Secure, in part because virus writers and spammers got together. Here's what you can do to prepare.