Security News

Separated at birth: WMF and ANI bugs compared 04 Apr 2007 13:00 GMT
The Windows animated cursor bug patched yesterday by Microsoft Corp. bears more than a passing resemblance to the nasty Windows Metafile (WMF) flaw that surfaced late in 2005.
Source: Computerworld

The 2007 Introduction to SMB Automated Data Protection 04 Apr 2007 13:00 GMT
(Source: Tandberg) The Gartner Group estimates that less than 50% of medium sized businesses and 25% of small businesses have data recovery plans in place. Clearly, SMB data protection is often neglected, undiscovered until disaster strikes. This paper introduces the reader to the automation process and the numerous government regulations effecting data retention.
Source: Computerworld

Don't use WEP for WiFi security, researchers say 04 Apr 2007 13:00 GMT
German researchers have published details of a way to break WEP security on Wi-Fi networks in under 60 seconds. Their recommendation: Use WPA instead.
Source: Computerworld

NeoScale to use standards-based security API 04 Apr 2007 13:00 GMT
NeoScale, which makes the CryptoStor KeyVault security appliance, is adopting the use of the RSA PKCS#11 API, which specifies how devices hold cryptographic information and perform cryptographic functions.
Source: Computerworld

Authentication...it is not just for consumers 04 Apr 2007 13:00 GMT
(Source: Entrust) This podcast discusses issues such as why companies need stronger authentication and what drivers are increasing the need for heightened security.
Source: Computerworld

Man-in-the-Middle Attacks: Helping to eliminate the threat without impacting the business 04 Apr 2007 13:00 GMT
(Source: Entrust) Man-in-the-middle (MITM) attacks have become increasingly recognized as a serious and sophisticated threat that can defeat a single layer of security. A layered approach to security can help thwart MITM attacks.
Source: Computerworld

Foundation Repair: The New SSL; A New Model for SSL Certificates and Browser Trust 04 Apr 2007 13:00 GMT
(Source: Entrust) The long-standing Internet browser trust model is starting to show signs of its age. Based on SSL, the browser trust model is being reworked to help build consumer confidence. This white paper outlines that process.
Source: Computerworld

Microsoft defends 100-day ANI patch process 04 Apr 2007 12:24 GMT
Microsoft Corp. took more than 100 days to develop and release a patch for the Windows animated cursor flaw, which it first learned of in December 2006. The company is now looking into why it didn't spot the flaw two years ago.
Source: Computerworld

Cursor flaw gives Vista security a black eye 04 Apr 2007 11:00 GMT
Tuesday's "critical" patch poked holes in Microsoft's Vista security promises, but doesn't discount them altogether.
Source: ZDNet