Little progress on government-wide smart card initiative, and little surprise 14 Nov 2007 14:00 GMTAn October 27 deadline for federal agencies to complete background checks and issue smart-card IDs for most of their employees was met with a chorus of crickets by most agencies -- and a ringing round of 'I told you so' from security analysts and government IT managers.

Source: Computerworld Researcher: Half a million database servers have no firewall 14 Nov 2007 13:26 GMTSo have we learned anything from the recent parade of data-breach scandals and hack attacks? According to security researcher David Litchfield, who took a million-IP-address look at the current state of database security online, missing patches, brain-dead configurations, and absentee firewalls mean it's possible we've gotten even dumber.

Source: Computerworld VeriSign plans divestiture of many businesses 14 Nov 2007 13:10 GMTAs part of overhaul, company will focus on Web-site naming, online security while it sells off units ranging from billing services to consulting. VeriSign, which runs the infrastructure that directs most of the world's Internet traffic, said on Wednesday it plans to divest several businesses and focus on...
Source: ZDNet EU extends review of Google/DoubleClick merger 13 Nov 2007 17:52 GMTEuropean Commission's decision to take a deeper look at the proposed merger potentially puts the $3.1 billion deal at risk. European antitrust regulators will conduct a more extensive, second-phase review of Google's pending merger with DoubleClick, the EU announced Tuesday. As part of the investigation,...
Source: ZDNet Microsoft exec calls XP hack 'frightening' 13 Nov 2007 14:56 GMTIn a matter of minutes, e-crime experts hack into a Windows XP computer that is unprotected and connected to an unsecured wireless network. A Microsoft executive calls the ease with which two British e-crime specialists managed to hack into a Windows XP computer as both "enlightening and frightening."...
Source: ZDNet Microsoft patches URI bug, ancient DNS flaw 13 Nov 2007 14:00 GMTMicrosoft released two security bulletins that fixed a pair of flaws in Windows, including a vulnerability that had been the root of a monthslong debate over patching responsibility.

Source: Computerworld MS07-062 – Important: Vulnerability in DNS Could Allow Spoofing (941672) 13 Nov 2007 08:00 GMTBulletin Severity Rating:Important - This important security update resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS Servers and could allow an attacker to send specially crafted responses to DNS requests, thereby spoofing or redirecting Internet traffic from legitimate locations.
Source: TechNet