Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Security concerns outweigh all other IT headache

Posted on May 11, 2005December 30, 2021 by admini

Other important IT issues, such as systems integration, compliance,IFRS or upgrading IT, each received less than 20% of the votes in the poll, conducted with Datawatch.

Paul Durkin, a partner at Ernst & Young, said that the internal controls requirements of Sarbanes-Oxley have driven accountants to consider IT security even more seriously than before, with auditors warning businesses that their systems security is often too ‘informal’. ‘A new employee will have certain access rights to systems, for example, but as they move into new departments they accumulate these rights. And when they leave the company, these controls can remain active for a long time,’ Durkin said.

Richard Anning, product marketing director at financial software company Systems Union, said: ‘Financial data must be secure, with good IT controls ð that’s what Sarbox section 404 is all about.’

During the recent InfoSecurity Europe conference, the Metropolitan Police said that the vast majority of computer hacking was carried out by current or former employees. Detective inspector Chris Simpson, of the Metropolitan Police computer crime unit, told delegates that one of the first steps in any investigation is to check employee details. ‘In the vast majority of cases we investigate whether the culprits are current or former employees,’ he said. ‘They’re not hacking into systems using flaws in software. Instead they are using flaws in the security procedures of the company to carry out their attack.’

Most recently the national high-tech crime unit foiled a gang of hackers attempting to steal £220m from a Japanese bank in London. After gaining access to the IT systems of Sumitomo Corporation’s London offices in October, the gang installed key-logging software to record log-in codes and company documents. They had been planning to transfer the money to 10 bank accounts around the world.

http://www.accountancyage.com/analysis/1140206

Read more

Security players shoot an all-in-one

Posted on May 11, 2005December 30, 2021 by admini

The new wares combine firewall, VPN and intrusion-prevention capabilities in a format that promises proactive, easy-to-manage network protection, the vendors and solution providers said.

This week Juniper is shipping a long-awaited module that adds integrated intrusion detection and prevention (IDP) to its ISG 2000 appliance, delivering up to 2 Gbps of intrusion-prevention throughput and 1 Gbps of VPN/firewall throughput. NetScreen Technologies first launched the integrated security gateway with firewall and VPN features last April, days before the completion of its acquisition by Juniper.

Having multiple capabilities in the same box gives us a good competitive point against TippingPoint,” said Dave Casey, vice president of Westron Communications, a solution provider based in Carrollton, Texas.

Juniper, Sunnyvale, Calif., is also introducing the ISG 1000, a smaller firewall/VPN appliance. Intrusion-prevention modules for that box are slated to ship in the second half of this year.

3Com also has plans to roll out new appliances in the fourth quarter that introduce TippingPoint’s intrusion-prevention technology to the SMB market, said James Freeze, vice president of global marketing at 3Com, Marlborough, Mass.

This will help reduce the number of devices required to secure a customer’s network, Chambers said. The appliances scale from small businesses to large enterprises and incorporate features found in the PIX Security Appliance firewall, IPS 4200 Series and VPN 3000 Concentrator families.

Cisco’s appliances are shipping with starting prices that range from $3,495 for an SMB version with up to 300 Mbps throughput to $16,995 for an enterprise edition with up to 650 Mbps throughput.

http://www.crn-india.com/breakingnews/stories/57978.html

Read more

Poachers turn over Microsoft Gatekeeper security test

Posted on May 11, 2005December 30, 2021 by admini

The Gatekeeper Test was an entertaining test of wits for security pros: A series of progressively trickier multiple choice questions (two per working day) were to be offered between 2 to 14 May, culminating in an open question tie-breaker question at the end. Security experts from 20 countries in Europe, the Middle East and Africa were to compete with their compatriots, with a Tablet PC awarded to the the best in each country. The overall winner was to get a VIP trip to Microsoft’s TechEd conference in Amsterdam this July. There were even league tables so you could compete with your mates.

The test attracted more than 20,000 IT pros, according to Microsoft, but right from the off things went awry. The system failed to accept to correct answer on some occasions, as Reg reader Stuart Antcliff discovered: “After pressing submit with, what I hope was, the correct answer it took me to their nice file not found page; I was even using IE because I figured it wouldn’t work with other browsers. A quick test shows this happens with enough browsers to make it funny (I didn’t find one that worked). Is this a cunning plan to lure us into working out what is wrong?
Is it all part of the test?”

Elsewhere, competitors learned they if they answered incorrectly they could press backspace and re-answer questions without any scoring penalty. Similar tricks allowed the unscrupulous to artificially inflate their scores.

“After two days some people already at 1,750 points, when the maximum they could have achieved was 350 points per day,” one anonymous participant told South African site ITWeb.

Microsoft tried to discount earlier results (involving the equivalent of the £2,000 question on Who Wants to be a Millionaire?) but after three days of headache, suspended the competition, as iexplained in its test blog. In a statement, Microsoft said it plans to re-start the game at unspecified time. It blames technical issues for problems with the game, which, we note, was never meant to be particularly serious, anyway.

“The Gatekeeper Test experienced an intermittent ViewState clustering issue on the live environment. This means that certain servers in the cluster lost session state information due to data stored in the ViewState. Consequently, intermittent user scores were not being stored, resulting in a compromised scorecard for some participants.” Microsoft has decided to close the game immediately to avoid any disadvantage to certain participants.

The Gatekeeper Test registration site has been reinstated and participants can continue to take advantage of the education tools which are provided on the site, in preparation for the test re-start.

New participants also have the opportunity to register for the test ahead of the re-start date,” it said.

http://www.theregister.co.uk/2005/05/11/ms_gatekeeper_test_fiasco/

Read more

IBM Rolls Out Federated ID-Management Software

Posted on May 10, 2005December 30, 2021 by admini

The IBM Tivoli Federated Identity Manager is designed to let a user log on to an Internet computer system or network and then use that connection to access information or systems run by a business partner, service provider, or other affiliated company. For example, an employee could sign on to his company’s computer network and have that network provide the security authentication necessary when that user tries to access health-care insurance information on an insurer’s site or order parts from a supplier’s site. Some companies will take on both roles, confirming that a user signing on to the network is who they claim to be and then providing secure authentication when that user travels over the Internet to the sites of partners. A common way to share identities between providers means customers won’t have to replicate or stage business processes for their security providers, IBM says.

Identity management is a market that’s poised to take off in the next year or two, but few companies are able to deploy such software today without help, says Jon Oltsik, an analyst at Enterprise Strategy Group. “So IBM uses [Federated Identity Manager] to get through the door with customers,” he says, “and sets up IBM Global Services to make them ready.”

http://www.informationweek.com/showArticle.jhtml;jsessionid=DUUJ1L5ZK2NH4QSNDBNSKH0CJUMEKJVN?articleID=163100244

Read more

Novell acquires Linux security company

Posted on May 10, 2005December 30, 2021 by admini

The Waltham, Mass.-based company will sell Immunix’s products as Novell AppArmor, Chief Executive Jack Messman said in a statement.

The product is designed to protect Linux and higher-level applications from external or internal attacks and viruses.

Immunix, based in Portland, Ore., was founded in 1998. It has somewhat fewer than 20 employees, chiefly programmers who focus on security work, said Novell spokesman Bruce Lowry. One of those employees is co-founder Crispin Cowan, who has been involved in Linux kernel security projects.

AppArmor works on Linux products using the 2.6 kernel, but Novell will support it only on its Suse Linux Enterprise Server product, Lowry said.

http://news.com.com/Novell+acquires+Linux+security+company/2100-7355_3-5702398.html?part=rss&tag=5702398&subj=news

Read more

Trend Micro snaps up anti-spyware firm

Posted on May 10, 2005December 30, 2021 by admini

InterMute is being bought just days after Trend Micro said it would sell its own anti-spyware technology to cut communication links between hackers and the computers they have compromised.

Spyware, such as password-stealing keyloggers, secretly sends personal information back to whoever planted it. Such software has been used to steal identity and banking information, and was implicated in a foiled bank robbery earlier this year.

According to press statements, InterMute’s products will be sold under the Trend Micro brand and will later be integrated into its software. Trend Micro said the acquisition would let customers manage “grayware” — programs that cross the boundary of spyware and adware.

“Spyware continues to evolve and cause concern and damage, but not all spyware can be handled the way viruses and worms are,” said Eva Chen, co-founder of Trend Micro. “Customers need effective solutions to remove spyware, but must also be given the flexibility on how to manage it. We expect to deliver combined solutions to market quickly.”

http://news.zdnet.co.uk/internet/security/0,39020375,39197834,00.htm

Read more

Posts navigation

  • Previous
  • 1
  • …
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • …
  • 421
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme