Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Month: May 2005

Government warns of IPsec VPN flaw

Posted on May 12, 2005December 30, 2021 by admini

On its Web site, NISCC said a flaw in the IPsec VPN protocol could allow hackers to obtain a text version of encrypted communications with only “moderate effort”.

The flaw, which NISCC rated as ‘high risk’, makes it possible for an attacker to intercept IP packets travelling between two IPsec devices and modify the encapsulation security payload — a sub-protocol that encrypts the data being transported. This could ultimately expose this data to an unauthorised third party.

On its Web site, NISCC wrote: “By making careful modifications to selected portions of the payload of the outer packet, an attacker can effect controlled changes to the header of the inner (encrypted) packet…If these messages can be intercepted by an attacker, then plaintext data is revealed.”

NISCC has published a number of solutions to this issue.

http://news.zdnet.co.uk/internet/security/0,39020375,39198102,00.htm

Read more

Trend Micro to Provide Integrated Protection for Mobile Devices Running on Microsoft Windows Mobile

Posted on May 12, 2005December 30, 2021 by admini

“Today’s smart phones and wireless handhelds are becoming mini computers that potentially have security risks similar to other computers,” said Raimund Genes, president of European Operations for Trend Micro, who is also responsible for mobile security products globally. “As the network perimeter expands to encompass such devices, organizations and operators should consider appropriate security measures for protecting their users’ devices.

“Trend Micro Mobile Security brings added value to the Windows Mobile software by providing additional security for our mobile device users,” said Chris Hill, group product manager for the Mobile and Embedded Devices Division at Microsoft Corp. “The market for mobile devices is growing, and with it the need for security is increasing.

According to a 2003 study by IDC, the mobile security market will grow from $161 million in 2005 to more than $992 million in 2008.

http://www.zdnetindia.com/news/pr/stories/121846.html

Read more

Security gripes? Microsoft feels your pain

Posted on May 12, 2005December 30, 2021 by admini

Dubbed Windows OneCare, the service will draw in part on existing tools like the company’s anti-spyware software, as well as on basic PC management functions inside Windows. But it will add a more powerful firewall, ongoing antivirus protection, and the right to get a live support person on the phone without paying extra, the company said.

“We’re trying to address a consumer need we see being unmet today,” said Dennis Bonsall, group product manager for the company’s technology care and safety group, noting that most people don’t run even a basic antivirus scan on their computers at home. “Our target is those consumers who aren’t protected by this kind of PC health solution today.”

The service, which won’t be available for ordinary consumers even in beta until much later this year, represents the latest stage in Microsoft’s move against the security problems that have plagued its software over the past few years.

The service should provide the company with recurring revenue, as opposed to the one-time sales of software releases like Windows or Microsoft Office.

The OneCare service marks the first time that Microsoft has offered antivirus software directly to consumers, even though it has spent several years buying companies that offer the technology. Executives said they did not plan on offering the virus-fighting technology outside the OneCare bundle of services. The package will also include the Microsoft’s spyware-fighting tools and a firewall that blocks unauthorized outbound traffic, such as spyware data, as well as the inbound traffic blocked by XP.

Analysts said a Microsoft antivirus product would be likely to appeal to the large percentage of consumers–close to 75 percent, by some estimates–who have no virus protection loaded on their computers. “I don’t think that Microsoft is going to take market share away from (security providers like Symantec), but instead it’s more likely (Microsoft) will be able to attract a lot of people who haven’t had antivirus on their desktops before,” said Gartner analyst Peter Firstbrook.

The OneCare package also will offer automatic computer care tools such as disk defragging and file repair, and scheduled data backup features that will save critical data such as photos and financial information to CDs or DVDs.

Microsoft critics often point out that many of the worst PC problems, ranging from viruses to spyware, take advantage of security vulnerabilities in Microsoft’s own Windows, Internet Explorer and other software. But company executives said there was nothing untoward about charging consumers in part to block these problems. “I think that at this point, a fair number of the kind of threats we see on the security front are not just attacking vulnerabilities,” said Amy Roberts, director of product management in Microsoft’s Security, Business and Technology unit. “Security is a key component, but OneCare goes beyond that to help customers have a broader sense of PC health.”

The service will be launched in beta form to Microsoft employees, and will be released to consumers in late summer or fall, the software giant said.

The company did not provide any details on projected pricing.

http://news.zdnet.com/2100-1009_22-5705430.html

Read more

Spyware threat takes pole position

Posted on May 11, 2005December 30, 2021 by admini

The poll of over 100 US IT managers found that four out of five were more concerned about spyware compared to this time last year, and 45 per cent were less worried about spam than they were last year.

Overall nearly three quarters of those questioned were spending more time on security than last year.

“Spam is understood and there are solutions in place to control it,” one respondent said. But the sharp increase in the volume and sophistication of spyware was deemed especially worrying for many companies. “We have seen some new forms of spyware within the past two to three weeks,” said another respondent. We are looking at it differently now, rather than just a nuisance.”

Spyware was the chief concern for IT managers, but 59 per cent also identified phishing attacks as a growing threat.

Concern over hacking was viewed as less of an issue, with only one in five IT managers rating it as a growing problem.

The survey was conducted for information security firm Secure Computing by TheInfoPro.

http://www.vnunet.com/news/1162952

Read more

Security concerns outweigh all other IT headache

Posted on May 11, 2005December 30, 2021 by admini

Other important IT issues, such as systems integration, compliance,IFRS or upgrading IT, each received less than 20% of the votes in the poll, conducted with Datawatch.

Paul Durkin, a partner at Ernst & Young, said that the internal controls requirements of Sarbanes-Oxley have driven accountants to consider IT security even more seriously than before, with auditors warning businesses that their systems security is often too ‘informal’. ‘A new employee will have certain access rights to systems, for example, but as they move into new departments they accumulate these rights. And when they leave the company, these controls can remain active for a long time,’ Durkin said.

Richard Anning, product marketing director at financial software company Systems Union, said: ‘Financial data must be secure, with good IT controls ð that’s what Sarbox section 404 is all about.’

During the recent InfoSecurity Europe conference, the Metropolitan Police said that the vast majority of computer hacking was carried out by current or former employees. Detective inspector Chris Simpson, of the Metropolitan Police computer crime unit, told delegates that one of the first steps in any investigation is to check employee details. ‘In the vast majority of cases we investigate whether the culprits are current or former employees,’ he said. ‘They’re not hacking into systems using flaws in software. Instead they are using flaws in the security procedures of the company to carry out their attack.’

Most recently the national high-tech crime unit foiled a gang of hackers attempting to steal £220m from a Japanese bank in London. After gaining access to the IT systems of Sumitomo Corporation’s London offices in October, the gang installed key-logging software to record log-in codes and company documents. They had been planning to transfer the money to 10 bank accounts around the world.

http://www.accountancyage.com/analysis/1140206

Read more

Security players shoot an all-in-one

Posted on May 11, 2005December 30, 2021 by admini

The new wares combine firewall, VPN and intrusion-prevention capabilities in a format that promises proactive, easy-to-manage network protection, the vendors and solution providers said.

This week Juniper is shipping a long-awaited module that adds integrated intrusion detection and prevention (IDP) to its ISG 2000 appliance, delivering up to 2 Gbps of intrusion-prevention throughput and 1 Gbps of VPN/firewall throughput. NetScreen Technologies first launched the integrated security gateway with firewall and VPN features last April, days before the completion of its acquisition by Juniper.

Having multiple capabilities in the same box gives us a good competitive point against TippingPoint,” said Dave Casey, vice president of Westron Communications, a solution provider based in Carrollton, Texas.

Juniper, Sunnyvale, Calif., is also introducing the ISG 1000, a smaller firewall/VPN appliance. Intrusion-prevention modules for that box are slated to ship in the second half of this year.

3Com also has plans to roll out new appliances in the fourth quarter that introduce TippingPoint’s intrusion-prevention technology to the SMB market, said James Freeze, vice president of global marketing at 3Com, Marlborough, Mass.

This will help reduce the number of devices required to secure a customer’s network, Chambers said. The appliances scale from small businesses to large enterprises and incorporate features found in the PIX Security Appliance firewall, IPS 4200 Series and VPN 3000 Concentrator families.

Cisco’s appliances are shipping with starting prices that range from $3,495 for an SMB version with up to 300 Mbps throughput to $16,995 for an enterprise edition with up to 650 Mbps throughput.

http://www.crn-india.com/breakingnews/stories/57978.html

Read more

Posts navigation

  • Previous
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme