Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Month: November 2004

Gates announces new Windows update tool

Posted on November 17, 2004December 30, 2021 by admini

During a keynote speech at the company’s IT Forum conference in Copenhagen, Denmark, Gates outlined Microsoft’s ambitious effort to trim the cost of managing corporate data centers, called the Dynamic Systems Initiative. Microsoft’s DSI is a multiyear plan to wring greater productivity out of systems operators, who oversee company networks.

Microsoft also announced systems management-related product updates, including the first public test release of an automatic Windows update service.

With better management tools, administrators can handle more tasks, such as updating server patches, more quickly. Improved systems administration has become a high priority for Microsoft’s business software division. Company executives point out that the majority of information technology budgets are dedicated to running existing systems, rather than creating new business applications.

Microsoft competes with IBM, Hewlett-Packard and other companies in the systems management software market.

The first products to come from Microsoft’s DSI will appear next year with the release of Visual Studio 2005, the company’s flagship programming tool. With it, developers are expected to begin to build applications that are less likely to crash or suffer from poor performance, Microsoft claims. During his speech, Gates discussed the longer-term vision for DSI as well as how Microsoft is seeking to improve its management tools, said David Hamilton, director of Microsoft’s Windows and enterprise management division.

Hamilton said that future Microsoft management products, namely Systems Management Server and Microsoft Operations Manager, will be designed to monitor performance of data center components by tracking Microsoft-defined “models.” The models will describe the health of an application, its configuration and the tasks it supposed to perform, he said. These models can be defined by programmers with a modeling tool that will be part of Visual Studio 2005 Team System, which is set to be available in the first half of next year.

For example, a developer can indicate that an e-mail application needs to run on four servers and have a certain amount of bandwidth to meet expected demand. “Models are a way of tracking the instrumentation of the application in real time,” Hamilton said. “Getting the models right is absolutely critical.”

Gates also discussed a new smart card, from a company called Axalto, that can be programmed using Microsoft’s development tools. The smart cards can then be used as a secure mechanism for logging onto corporate networks, in conjunction with Microsoft’s existing Active Directory and Identity Integration Server software.

By describing the company’s long-term plans for DSI, Microsoft hopes to get developers and systems operators familiar with the company’s future products and recruit third-party companies to build add-ons to Microsoft’s systems management software, Hamilton said.

Also at IT Forum, Microsoft said that it has started a wide-scale beta testing program for its Windows Update Service for sending out Windows patches, and that its Microsoft Operations Manager 2005 product and Virtual Server 2005 software are generally available worldwide. The company also released enhancements to SMS 2003 for easing large-scale desktop deployments and for installing software on Windows handheld devices.

http://news.zdnet.com/2100-3513_22-5453730.html?tag=adnews

Read more

Microsoft talks security … seriously

Posted on November 17, 2004December 30, 2021 by admini

The company’s “chief trustworthy computing strategist”, Scott Charney told delegates at Microsoft’s IT Forum (ran week of 15th November 2004) that the company had to improve its communication to the industry.

In addition to working on building more secure products by design, promoting security training and development and easing patch management, the company is partnering with hardware makers and security companies, Charney said. Charney portrayed security as his mandate, saying that when government initially ceded the Internet and computers to the public domain, it also gave away its role as protector.

http://www.techworld.com/security/news/index.cfm?NewsID=2628

Read more

Microsoft Buys Stake in Company Tying Linux to Windows

Posted on November 16, 2004December 30, 2021 by admini

The Lindon, Utah-based Vintela has been cranking out software over the past few months to extend Windows-based authentication, management, and monitoring capabilities to UNIX, Linux, and Macintosh operating systems. Privately held Vintela plans to seek another round of funding early next year with an eye toward expanding research and development, sales, and support services.

The irony is that Vintela’s product set grew out of intellectual property the founders acquired from Caldera, which sued Microsoft for antitrust violations related to the desktop operating system DR-DOS.

Vintela over the past month has introduced four integration products that tie Microsoft features to the Linux, UNIX, and Macintosh platforms. Using MOM, IT administrators can manage those platform resources from the existing MOM administrator, operator, and Web consoles as well as the MOM reporting mechanism.

In September, the company introduced Vintela Group Policy, which extends the group policy features of Active Directory to UNIX and Linux desktops and servers.

http://www.pcworld.com/news/article/0,aid,118612,00.asp

Read more

Oracle Releases Risk Hub

Posted on November 16, 2004December 30, 2021 by admini

With this product, Oracle would be used as the consolidation point for offerings from other risk management providers.

On the operational risk side, Oracle has a dashboard product called “Internal Controls Manager” that allows drill-down access to data and events being tracked for regulatory compliance. “It’s a single place to integrate information that’s related to every one of the regulatory mandates, so that you can drill down through the same dashboard in Sarbanes-Oxley information, Basel II information, Patriot Act information, and see the relationships,” says Andrea Klein, vice president of financial services industry marketing for Oracle.

Getting a handle on enterprise risk does more than help satisfy regulatory mandates stemming from Basel II.

“In the same way that the Basel II guidelines are going to make the banks more aware of their capital position so they can manage their money more effectively, you can do that same kind of better management on each one of your corporate accounts,” she says.

http://www.banktech.com/story/news/showArticle.jhtml?articleID=53200242

Read more

Companies warned on IM dangers

Posted on November 12, 2004December 30, 2021 by admini

A report issued on Thursday by Meta Group found that 57 percent of the people surveyed at 300 companies worldwide use IM at work for personal chitchat more often than for job-related communications.

In a nod to IM as a productivity tool, Meta found that 56 percent of employees use the applications at home for work-related activity.

“We believe that by 2008, most new employees will be assigned an IM account when they start a job, just as they are issued an email account today.” As a result of IM’s growing popularity, Tzirimis said an increasing number of companies are looking at ways to track employee use of the applications.

A recent survey released by ePolicy-AMA found that 60 percent of US companies now use software to monitor incoming and outgoing external email and that 27 percent of employers use software to track internal email between employees.

Tzirimis recommends that more companies use tools for tracking IM use, because the software potentially an even larger security threat than email, based on the sort of attacks designed to take advantage of the applications.

http://news.zdnet.co.uk/business/employment/0,39020648,39173540,00.htm

Read more

Gartner: Oracle Needs To Come Clean On Vulnerability

Posted on November 12, 2004December 30, 2021 by admini

Gartner’s Neil MacDonald and Rich Mogull said that Oracle has declined to provide more detailed information about the vulnerabilities that spawned a patch first released in August, then re-released in October.

Although keeping mum is Oracle’s standard policy, the analysts took the company to task for not spelling out the consequences of not applying the patch, and more important, whether the vulnerabilities affect older, non-supported versions of Oracle’s Database Server, Application Server, and Enterprise Manager.

“At worst, [this means] records in every Oracle database you own could be vulnerable,” the pair wrote in an online alert posted to the Gartner Web site. It may be smart to not provide hackers information that could be used to craft exploits, but that “differs from offering information about the implications of not protecting yourself against that exploit,” the guys from Gartner wrote.

“System administrators don’t have enough information to decide which servers to prioritize or which data is most vulnerable.”

And if Oracle offered more detail about the vulnerability, customers might be able to set up defenses, such as deep-packet inspection firewalls, intrusion prevention systems, and application firewalls to protect themselves against attacks, they added.

MacDonald and Mogull recommended that enterprises using the Oracle products apply the patches to supported versions. If older editions are in use, such as 7.x or 8.0x, they advised companies to either upgrade immediately or switch to a rival database. They also urged Oracle customers to put pressure on the Redwood Shores, Calif.-based database giant.

“Ask Oracle to follow Microsoft and other leaders that disclose the details of their vulnerabilities and provide security patches freely to anyone on any supported version of their products,” they recommended.

http://www.techweb.com/wire/security/52601314

Read more

Posts navigation

  • Previous
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme