Symantec patches 'highly critical' Norton flaw   09 Aug 2007 13:00 GMT
An ActiveX-related input validation bug was hurriedly patched by Symantec on Thursday, after other security-research firms rated the vulnerability "highly critical."

Source: Computerworld

Defcon: Security firm automates generation of attack code   09 Aug 2007 13:00 GMT
A security firm known for its aggressive approach to hunting down and publicizing zero-day security flaws has released a tool aimed at automating the process of pulling together zero-day exploits.

Source: Computerworld

Cisco issued 21 patches hours before site blacked out   09 Aug 2007 13:00 GMT
A Web site blackout yesterday prevented Cisco System Inc. customers from retrieving 21 critical patches for about three hours yesterday, shortly after the fixes were posted by the network hardware maker.

Source: Computerworld

'Virtual sandboxing' provides safe security testing   09 Aug 2007 13:00 GMT
Security researchers at Usenix this week revealed a new method for keeping users and malware separated. "Virtual sandboxing" shows promise for testing Web applications for suspicious behavior before they reach end-users' browsers.

Source: Computerworld

Microsoft gears up for nine patches next week   09 Aug 2007 13:00 GMT
Microsoft plans to release nine patches in its monthly security update next Tuesday, aiming to fix flaws in Windows, Office, Internet Explorer (IE) and Virtual PC

Source: Computerworld

Bug bounty program answers critics   09 Aug 2007 13:00 GMT
The practice of paying money for vulnerabilities to bolster continues to draw fire from critics. But bug bounty hunter Dave Endler said such criticism comes from researchers who are "living in the past."

Source: Computerworld

Companies should be wary of business in virtual worlds, Gartner says   09 Aug 2007 13:00 GMT
From IT risks to confidentiality concerns, allowing employees to work in virtual worlds can raise a laundry list of potential problems for companies, according to Gartner Inc.

Source: Computerworld

Slicing sensitive corporate data for secure, dispersed storage   09 Aug 2007 04:30 GMT
Looking for a way to better secure data? Cleversafe is eying technology that would slice it up and disperse it among a number of data centers until it's needed -- when it can be put back together for use.

Source: Computerworld

IBM security strategist: Stop crediting vulnerability brokers   08 Aug 2007 20:40 GMT
An IBM security strategist wants software vendors to stop acknowledging companies and researchers who buy and sell security vulnerabilities.Gunter Ollman, director of security strategy at IBM Internet Security Systems (ISS), believes there's no real accountability attached to the trading of vulnerability information by third party companies like iDefense and TippingPoint.iDefense...
Source: ZDNet

Short Clip: Harrah’s RFID rollout   08 Aug 2007 16:26 GMT
Harrah's CIO Tim Stanley explains how Harrah's is using RFID technologiesfor customer loyalty and security initiatives. by ZDNet Editor
Source: ZDNet