Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Month: May 2004

Financial Firms in Hackers’ Crosshairs

Posted on May 28, 2004December 30, 2021 by admini

The professional service firm’s annual Global Security Survey showed a dramatic rise in the number of respondents reporting system breaches.

“Security threats such as viruses, worms, malicious code, sabotage and identity theft are real and have already cost millions of dollars in lost revenues to institutions globally,” Ted DeZabala a principal and national leader of Security Services for Deloitte & Touche, said in a statement.

Despite that, fewer respondents reported fully deployed antivirus measures — 96 percent last year compared to 87 percent this year. Also, IT security budgets were flat at more than 25 percent of the survey base, with 10 percent reporting reduced security budgets.

The survey found gains in the areas of privacy and regulatory compliance efforts, where two-thirds claim to have a privacy management program in place, up incrementally by 6 percent over the previous year. Most identified themselves as “effective users of demonstrated technology” according to the surveys authors. That said, only 9 percent were willing to take risk associated with being an early adopter.

The survey also found vulnerability and identify management technologies were the two most common technology initiatives planned for pilot programs or deployment in the next 18 months.

A recent Gartner group survey estimated the cost of fake e-mail ‘phishing’ attacks at $1.2 billion dollars. This year also looks to be bad for viruses and Trojans of all sorts, though according to one study infection rates are holding steady.

More info: http://www.internetnews.com/fina-news/article.php/3360961

Read more

Deloitte security survey has some puzzling figures

Posted on May 28, 2004December 30, 2021 by admini

The release accompanying the survey has it differently.

“Practitioners from Deloitte’s Global Financial Services Industry practice conducted face-to-face interviews with senior information technology executives of the top 100 global financial services organizations (sic),” it says. The survey claims that the results, published this month, “provide a global benchmark for the state of security in the financial sector.” Did the company actually speak to representatives from the top 100?

Kevin Shaw, Leader Security Services Group – Asia Pacific for the company’s Enterprise Risk Services, said: “What we can say is that interviews with senior information technology executives of top 100 global financial services organizations (sic) were conducted and that the sample includes 31 of the top 100 global financial services institutions.” He said four Australian banks were among those interviewed but refused to name them.

“I am sure that you will understand that respecting the confidentiality of those who were so kind as to participate is very important to us, and so unfortunately, we cannot denote the true number of organizations (sic) that have participated in the survey,” Shaw said.

“If we indicate the number of organizations, (sic) people may start to reverse engineer the number and make assumptions about who participated. This could have impact on two levels, one being that unfair assumptions are made leading to potentially erroneous conclusions, and the other in that they circumvent our intent and promise of allowing organizations (sic) to remain anonymous.”

Last year’s survey had some question marks over it as well. The company claimed the participants represented 35 percent of the top 500 global financial services organisations, which would have meant that 175 companies of the top 500 had been interviewed. However, when asked about it, Deloitte admitted that the facts were that 35 percent of the top 50 global financial services organisations – meaning 17 or 18 – had been involved.

More info: http://www.smh.com.au/articles/2004/05/28/1085641687991.html

Read more

Linux Servers Up, Unix Down: Survey

Posted on May 27, 2004December 30, 2021 by admini

The report said server unit growth for the March quarter was up 27 percent (1.6 million units) over last year while worldwide revenues grew 9.3 percent to $11.8 billion.

Despite legal threats from SCO Group and competition from Microsoft, Gartner’s report said Linux continued to be the growth powerhouse in the operating systems server market, with a revenue increase of 57.3 percent in the first quarter of 2004.

Windows continued to be the operating system of choice for servers with revenue hitting 35.1 percent of total market share. On a shipment basis, Windows dominated all others with 69.4 percent of the OS server market.

As for Unix, the study said the OS suffered a decline with first quarter revenue down 2.3 percent from the first quarter of last year.

Each of the major vendors of the low-end servers, IBM, (Quote, Chart) HP, (Quote, Chart) Sun, (Quote, Chart) and Dell (Quote, Chart), have something to brag about — depending on how they read Gartner’s tea leaves with respect to product cycles, industry segment emphasis and geographic demand patterns.

Although IBM made the most money from servers in the last three months, HP sold the most units, and Dell gained the most ground, said Mark Stahlman, technology analyst with Caris & Company.

He told internetnews.com the only vendor who is positioned for significant upside in this market is Sun.

Sun has been working very hard to make up for lost time, bolstering its volume server lineup with support for x86 products.

The company recently said its Hardware Compatibility List (HCL) for the Solaris OS on x86, doubled in size in the last six months.

More info: http://www.internetnews.com/ent-news/article.php/3359981

Read more

First known 64-bit virus threat found

Posted on May 26, 2004December 30, 2021 by admini

Representatives at the Cupertino, Calif.-based company were quick to point out that the threat was merely a so-called proof-of-concept virus–a worm developed by someone to show that vulnerabilities are present in a particular type of system–and not a virus already spreading in the wild.

However, Oliver Friedrichs, senior manager of Symantec’s Security Response Team, said W64.Rugrat.3344 can attack 64-bit Microsoft Windows files successfully. He said the virus does not infect 32-bit files and will not run on 32-bit Windows systems. Since 64-bit systems have yet to proliferate widely, Symantec maintains that the virus does not yet represent a serious threat. “We always see early adopters trying to find a way to attack new technology right away, as we did with 32-bit, so it’s not surprising to see this,” Friedrichs said. “But we do expect to see more of these, as 64-bit technology becomes more prominent.”

The 64-bit market is expected to grow rapidly. By the end of next year, most Intel chips, will be 64-bit capable, and virtually all of rival Advanced Micro Devices’ processors will be 64-bit chips. Software titan Microsoft is also pushing the high-end market forward. Earlier this month, Chairman Bill Gates asked hardware makers to start writing 64-bit drivers for their software.

Among the advantages of 64-bit software is the ability to gracefully accommodate more physical memory than the 4GB limit in 32-bit systems.

Symantec said it was not expecting widespread copycats of W64.Rugrat.3344, since the affected assembly code requires fairly advanced technical knowledge. Symantec said W64.Rugrat.3344 was created in IA64 (Intel Architecture) assembly code and infects IA64 executable files, excluding .dll files. The security specialists reported that W64.Rugrat.3344 also infects files that are in the same folder as the virus, as well as all files within related subfolders.

Symantec is currently updating its Norton AntiVirus product line to protect against W64.Rugrat.3344 and expects to have versions of the software armed to defeat the virus ready by the end of the day Thursday. The company earmarked the 64-bit virus as a Level 1, or the least dangerous sort of threat ranked on its five-tiered ratings system, but warned users to update their virus protection systems as quickly as possible.

The company earmarked the 64-bit virus as a Level 1, or the least dangerous sort of threat ranked on its five-tiered ratings system, but warned users to update their virus protection systems as quickly as possible.

More info: http://zdnet.com.com/2100-1105_2-5221949.html?tag=adnews

Read more

Two thirds of emails now spam: official

Posted on May 25, 2004December 30, 2021 by admini

Spam hotspots are emerging as the global levels of junk mail worldwide continue to increase. MessageLabs figures also indicate significant regional variations and spam “hot spots”, despite attempts to deter spammers through legislation. Currently, email traffic sent to the United States, the UK, Germany, Australia and Hong Kong represents more than 97 per cent of the global spam volumes being filtered by MessageLabs. The figures suggest spammers are targeting English-speaking countries and regions where the proliferation of Internet/email usage is at its highest. The majority of spam originates in the US, with Boca Raton, Florida the worldwide capital of junk mail.

Mark Sunner, Chief Technology Officer at MessageLabs, commented “The US presents the widest market for spammers in terms of Internet access and adoption of email as a communications tool. While it currently has the worst global figure at 83 per cent, it’s only a matter of time until the UK falls victim to similar volumes in around six-months time, whilst Asia-Pacific countries will likely see the same impact in 12 months time. “Countries where English is a widely-used language, particularly in electronic communication, will always be a natural target for spammers as mass mailing in one common language is by far the easiest way for them to disperse their messages,” he added.

A study from rival message filtering firm Clearswift out yesterday suggests financial spam (37.8 per cent) is close to overtaking pharmaceutical spam (40 per cent) as the most common form of junk email. Sexually explicit spam has been on decline ever since, accounting for only five per cent of total spam seen by Clearswift last month.

US Federal Trade Commission rules insisting that porno spam needed to be labelled as “SEXUALLY-EXPLICIT” came into effect last week. US laws (the CAN-SPAM Act) allow companies to send junk email without prior consent but it does at least criminalise hiding the true origins of spam. European anti-spam laws insist on prior consent but largely fail to criminalise spamming. Only Italy and Australia, as far as we’re aware, have anti-spam laws that both insist of prior consent backed up by criminal sanctions against offenders.

More info: http://www.theregister.co.uk/2004/05/25/spam_deluge/

Read more

Antispam framework scores Microsoft endorsement

Posted on May 25, 2004December 30, 2021 by admini

Microsoft said on Tuesday that it had agreed to combine its Caller ID efforts with the SPF, a specification crafted by Pobox.com Chief Technology Officer Meng Wong.

A recent crop focuses on the idea that ISPs could publish the range of Internet Protocol addresses associated with their e-mail domains. If there’s no match, the recipient’s ISP can safely assume that the message is spam–or at least fraudulently addressed. The combined SPF and Caller ID, which has yet to be named, will use XML (Extensible Markup Language) to let Net service providers post IP addresses in the Domain Name System, the giant database that translates alphanumeric domain names like “news.com” into numerical IP addresses for Web servers.

“The convergence of the two proposals is a very positive milestone in the war on spam and brings together the best of both SPF and Caller ID,” said Microsoft spokesman Sean Sundwall. AOL, which in December began testing SPF, hailed Microsoft’s collaboration with Wong. “We welcome Microsoft to the position we have long held concerning the attributes of SPF,” AOL spokesman Nicholas Graham said. “And on the need for a joint standard that is about more than one technical standard, one technology or one company. We were the first ISP to agree to test and implement SPF, back in December, and we think this convergence is the right approach at the right time.”

Other systems for authenticating mail are also in progress. Sendmail and Yahoo have gotten behind DomainKeys, which authenticates e-mail through digital signatures and is not mutually exclusive with DNS-based systems.

More info: http://zdnet.com.com/2100-1104_2-5220253.html

Read more

Posts navigation

  • 1
  • 2
  • 3
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme