HP plugs latest ActiveX software update flaw   29 Apr 2008 12:13 GMT
HP has plugged another ActiveX vulnerability in its software update application. The patch (CVE-2008-0712) covers "a potential vulnerability has been identified with the HPeDiag ActiveX control which is a component of HP Software Update running under windows. The vulnerability could be exploited to allow remote disclosure of...
Source: ZDNet

Image gallery: Disaster planning, mix-and-match style   29 Apr 2008 11:20 GMT
Why waste your time and money worrying about something that may never happen? Instead, figure out what type of outage is most likely to hit your geographic area, and plan for that.

Source: Computerworld

Disaster planning, mix-and-match style   29 Apr 2008 11:20 GMT
Why waste your time and money worrying about something that may never happen? Instead, figure out what type of outage is most likely to hit your geographic area, and plan for that.

Source: Computerworld

Developers at fault? SQL Injection attacks lead to wide-spread compromise of IIS servers   28 Apr 2008 20:51 GMT
There's been a lot of noise and violent thrashing over the last couple days regarding a flaw that was originally believed to be a flaw in Microsoft's IIS (Internet Information Server), but has since been pointed out as simply a well thought out SQL Injection attack.  For those of...
Source: ZDNet

Researcher finds new flaw in QuickTime for Windows   28 Apr 2008 13:00 GMT
A rather tricky vulnerability in QuickTime could be exploited remotely to attack Windows PCs running Vista SP1 or XP SP2.

Source: Computerworld

News to know: Ubuntu; Microhoo; IT scapegoats; XP; Google   28 Apr 2008 09:22 GMT
Notable headlines: Larry Dignan: Microsoft: Pondering the alternatives to Yahoo Microsoft should walk away from Yahoo WSJ: Ballmer's big choice Adrian Kingsley-Hughes: Adventures with Ubuntu 8.04 Gallery: A peek at Ubuntu 8.4 Jason Perlow: Ubuntu: I'm...
Source: ZDNet

Paying Breach Bill May Not Buy Hannaford Full Data Protection   28 Apr 2008 04:24 GMT
Hannaford Bros. is spending millions of dollars on IT security upgrades following the theft of up to 4.2 million payment card numbers from its systems. But it remains to be seen whether that will fully protect the grocer from future attacks.

Source: Computerworld

When Taking Time Off Is No Vacation   28 Apr 2008 04:24 GMT
Family obligations run up against a demanding work schedule. Does anyone have advice on working remotely?

Source: Computerworld

HP's security management model brings comprehensive approach to corporate risk reduction   27 Apr 2008 20:23 GMT
Read a full transcript. Sponsor: Hewlett-Packard. We live in an age where there is so much exposure to risk and information security pitfalls that when data gets out -- it gets out in a big way. Devastating security breaches are becoming routine in the media, and those...
Source: ZDNet

Microsoft: Massive site attacks not our fault   27 Apr 2008 13:00 GMT
Microsoft late Friday responded to news reports that hackers have leveraged weaknesses in the company's Web and SQL software to attack hundreds of thousands of Web pages.

Source: Computerworld