Breach at TJX Puts Card Info at Risk   22 Jan 2007 05:01 GMT
The TJX Companies said an intruder gained access to its systems and may have stolen a large amount of credit and debit card data, again spotlighting IT security weaknesses within the retail industry.
Source: Computerworld

At Deadline Briefs   22 Jan 2007 05:01 GMT
Short, late-breaking IT news items.
Source: Computerworld

Briefs   22 Jan 2007 05:01 GMT
IT news in brief
Source: Computerworld

‘Eighty-six’ Risky End Users From ...   22 Jan 2007 05:01 GMT
If you want to better manage the online behavior of end users at your company, maybe you should threaten to “8e6” them, Mark Hall writes.
Source: Computerworld

Global Dispatches   22 Jan 2007 05:01 GMT
Global Dispatches: A government-funded education technology advisory group in the U.K. is urging schools there to hold off on deployments of Windows Vista and Office 2007.
Source: Computerworld

Bogus Numbers   22 Jan 2007 05:01 GMT
Letter: How many Americans' data has actually been breached?
Source: Computerworld

New secure VPN tunneling protocol in the works at Microsoft   19 Jan 2007 14:00 GMT
A new remote access tunneling protocol in development at Microsoft would allow users to avoid dealing with typical port-blocking issues.
Source: Computerworld

Vendors, human rights groups ponder Web code of conduct   19 Jan 2007 14:00 GMT
The Center for Democracy and Technology has been coordinating among major Web business interests, educators, and human rights groups to formulate a set of principles for companies doing business globally. The principles would establish guidelines for protecting privacy and freedom of expression.
Source: Computerworld

Operationalizing Security & Policy Compliance: A Unified Approach for IT, Audit and Operation Teams   19 Jan 2007 14:00 GMT
(Source: Qualys) The paper provides a detailed discussion of the internal and external regulatory challenges now faced by organizations, the scope of these challenges, and of the ways in which they can be addressed through better business processes and automation. The solution proposed allows organizations to raise the bar with regard to data security, while adding needed efficiencies to current processes.
Source: Computerworld

The Laws of Vulnerabilities: Six Axioms for Understanding Risk   19 Jan 2007 14:00 GMT
(Source: Qualys) This paper describes The Laws of Vulnerabilities, which are six axioms about the behavior of vulnerabilities gleaned from a continuous long-term research project launched by Qualys in 2002. We analyzed a global data pool of more than 40 million IP scans with QualysGuard, which is Qualys' on demand vulnerability management and policy compliance service.
Source: Computerworld