Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Month: February 2004

New HP Security Services Automate Threat Prevention

Posted on February 22, 2004December 30, 2021 by admini

Hewlett-Packard Co. plans to unveil two new security services next week at the RSA Conference in San Francisco, both of which are designed to help customers resist potential and ongoing attacks.

HP’s new Active Countermeasures service will be a two-tiered vulnerability assessment that pulls in data on new threats from the CERT Coordination Center, ISA and other sources. The system will rank the threats according to their probability of exploitation and risk, then perform scheduled scans of the customer network, searching for machines that are vulnerable to any of the high-risk threats. HP will write its own exploits for new flaws and then use the code to access each machine and install the patch.

HP’s other new offering is called the Virus Throttler, and is designed to limit the damage done by viruses and worms after they hit a network.

http://www.eweek.com/article2/0,4149,1533447,00.asp?kc=EWRSS03119TX1K0000594

Read more

Only 10% of Web Applications Are Secured Against Common Attacks

Posted on February 20, 2004December 30, 2021 by admini

The most common vulnerabilities were cross-site scripting (80%), SQL injection (62%) and parameter tampering (60%). While these types of hacking attacks are common, most enterprises have not adequately secured web sites, applications and servers against them.

In 2001, Gartner Group reported that 75% of cyber attacks and Internet security violations are generated through Internet Applications.

The Federal Trade Commission announced in January that Internet-related fraud was the reason for more than 500,000 of consumer complaints filed in 2003, with estimated consumer losses of $200 million in the U.S. alone.

More info: http://www.bankinfosecurity.com/?q=node/view/693

Read more

Marimba to Update Security Patch Managment Software

Posted on February 20, 2004December 30, 2021 by admini

The new user-driven features include an integrated patch repository that can automatically collect patch information from Microsoft Corp. and Sun Microsystems Inc. as well as Shavlik Technologies LLC, a small patch-management vendor that collects information about patches and provides it in machine-readable format, including dependencies and meta data associated with a patch.

“This product allows you to simulate a patch being installed on an end-point, and you can do end-path analysis,” described Purnima Padmanabhan, director of product management at Marimba of Mountain View, Calif.

The simulator can determine before deployment which patches will install on end-points and which will not, which patches are obsolete; and it will identify patch conflicts and installation order.

Within one shot, you know how many [end-points] are compliant or are not compliant,” Padmanabhan said.

http://www.eweek.com/article2/0,4149,1533017,00.asp?kc=EWRSS03119TX1K0000594

Read more

IBM tool targets data compliance

Posted on February 19, 2004December 30, 2021 by admini

The machine, which will compete with similar products from rivals EMC and Network Appliance, is designed to help companies preserve information in keeping with a host of new laws such as the Sarbanes-Oxley Act and the Health Insurance Portability and Accountability Act (HIPAA), which are intended to prod companies to adopt better data-handling practices.

This feature helps organizations in situations in which the precise retention period is unknown, IBM said. For example, because mortgages with 30-year terms can be paid off at any time, the retention period for such data could be based on the event of the payoff

Storage specialists Network Appliance and EMC have similar products on the market.

Network Appliance’s SnapLock software is designed to work with the company’s disk storage systems to help organizations satisfy record-retention requirements. The company also allows for tape backup of the data.

EMC sells a storage device called Centera designed to facilitate compliance with regulations. The product offers ease-of-management features and can be expanded to a capacity of multiple petabytes, according to EMC.

Dianne McAdam, an analyst at research firm Data Mobility Group, said one difference between the IBM product and the EMC gear is that EMC’s is designed to keep data on disks, while Big Blue’s allows customers to retain data either on disk or magnetic tape.

In a recent study by investment firm Credit Suisse First Boston, about 77 percent of chief information officers surveyed indicated some level of increased IT spending in 2004 based on regulatory requirements.

http://news.com.com/2100-7341_3-5161264.html?part=rss&tag=feed&subj=news

Read more

Can a New Law Really Protect Our Critical Infrastructure?

Posted on February 19, 2004December 30, 2021 by admini

First, the agreeable part: Everyone—the government, industry and consumers—agrees that the government should help protect the critical infrastructure that allows our economy to function, and everyone agrees that particular attention should be directed to the protection of water supplies, power grids and gas lines.

Beyond that point, however, the harmony fades. Industry has two big gripes with the new law. First, a meddlesome federal government could require industry to cough up billions of dollars for security measures that may or may not be needed. And second, industry doesn’t trust the government to keep a secret.

There is, of course, good reason for that: The Freedom of Information Act requires federal agencies to release to the public all documents containing information about public health risks and general safety, and the data demanded by the new act would certainly qualify as such. So it’s not surprising that industry spokespeople have been making a lot noise about the dangers of such information falling into the hands of the wrong people, such as terrorists, not to mention investigative reporters or consumer advocacy groups.

Ever innovative, the DHS has found a way to encourage business to share the kind of information that it would not otherwise share: It simply trumped the Freedom of Information Act. The new law now contains a provision that grants the Department of Homeland Security the authority to exempt any information that it deems “protected” from the reaches of FOIA. That provision, of course, is making consumer advocates and environmentalists crazy. They point out that the law creates a convenient method for industry to bury damaging information about such things as plant safety and environmental hazards. All a polluter has to do, they say, is persuade an industry-friendly DHS that certain information should be “protected,” and that information will be off-limits to journalists, stock holders and even plaintiffs in civil lawsuits.

According to a recent article in The Wall Street Journal, some critics claim that the law could conceivably be used to prosecute whistle-blowers who reveal problems involving any part of a company’s critical infrastructure. The DHS admits that the law is not perfect. If it were, the agency would not be asking the public for comments about it for the next 90 days. But the DHS leaders do want comments. Is there a way to protect the country’s critical infrastructure and keep everybody happy?

http://comment.cio.com/soundoff/021904.html

Read more

Nemx Upgrades Anti-Spam Software

Posted on February 17, 2004December 30, 2021 by admini

Power Tools 4.2 measures the frequency and destinations of e-mails that an organization sends externally and automatically set up a list of “friendly domains.”

The upgrade is an improvement over competitors’ software that use white lists of domains, which require manual updates by IT administrators, officials with the Canadian company said.

Power Tools can be configured to automatically delete identified spam, while forwarding legitimate e-mail for virus checking before going to end-user inboxes.

http://www.techweb.com/wire/story/TWB20040217S0014

Read more

Posts navigation

  • Previous
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme