Start-up generates random numbers from space   12 Dec 2006 15:40 GMT
Jeffrey Manber explains technology behind Yuzoz, whose name itself was generated using cosmic events such as solar wind.
Source: ZDNet

'Rock Phish' blamed for surge in attacks   12 Dec 2006 14:00 GMT
Described by one researcher as "sort of the Keyser Sze of phishing," the Rock Phish criminal organziation is responsible for as many as one-half of all current phishing attacks. Problem is, no one's sure who they are, or even if it isn't just one person.
Source: Computerworld

Vermont officials blast contractor for security lapse   12 Dec 2006 14:00 GMT
Vermont officials are upset that a contractor hired by the state to help in the bidding process for new health care contracts accidentally posted the Social Security numbers of hundreds of health care workers online.
Source: Computerworld

Microsoft patches IE, Windows Media Player flaws   12 Dec 2006 14:00 GMT
Microsoft Corp. has patched critical flaws in Internet Explorer, Windows Media Player and Visual Basic with its last "Patch Tuesday" release of 2006.
Source: Computerworld

Bogus! U.S. agencies target moneymaking scams   12 Dec 2006 14:00 GMT
A sting in the works for most of 2006 has trigged over 100 law-enforcement actions targeting fraudulent business-opportunity offers and work-at-home scams, the FTC announced Tuesday.
Source: Computerworld

Breach at UCLA exposes data on 800,000   12 Dec 2006 14:00 GMT
In what may be the largest data breach at a university, the University of California at Los Angeles began sending out letters to more than 800,000 individuals whose personal data may have been compromised in database breach that remained undetected for more than a year.
Source: Computerworld

Symantec puts encryption on the backup server   12 Dec 2006 14:00 GMT
Symantec's new Veritas NetBackup Media Server Encryption Option offers encryption at the backup server, relieving application servers of the chore and also offers centralized key management.
Source: Computerworld

Web-Based Service Delivery Falling Short of Its Promise   12 Dec 2006 14:00 GMT
Join Bill Rose, SSPA founder and executive director, and Citrix Online for a 30-minute Webcast as they provide a blueprint designed to make the promise of superior Web-based services a reality. You'll discover how to achieve lower operating costs, higher service levels and increased customer satisfaction from Web-based services.
Source: Computerworld

MS06-078: Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689)   12 Dec 2006 08:00 GMT
Bulletin Severity Rating:Critical - This update resolves a newly discovered, privately reported vulnerability. The vulnerability is documented in the "Vulnerability Details" section of this bulletin. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.
Source: TechNet

MS06-077: Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)   12 Dec 2006 08:00 GMT
Bulletin Severity Rating:Important - Microsoft Security Bulletin MS06-077: Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)
Source: TechNet