Oracle ships emergency workaround for zero-day exploit   29 Jul 2008 02:03 GMT
For the first time since the introduction of its quarterly Critical Patch Update process, Oracle has released an emergency alert to offer mitigation for a zero-day exploit that's been posted on the Internet. The emergency workaround, available here, addresses an unpatched vulnerability that's remotely exploitable without authentication...
Source: ZDNet

Safari browser flaw: Session fixation attacks possible   29 Jul 2008 01:41 GMT
Another day, another unpatched Safari browser vulnerability. According to this flaw warning found on the NVD National Vulnerability Database, Apple's flagship browser is vulnerable to session fixation attacks because of the way it handles cookies in country-specific top-level domains. [ SEE: Microsoft issues Safari-to-IE...
Source: ZDNet

Responding to the DNS vulnerability and attacks   28 Jul 2008 14:18 GMT
The DNS vulnerability, which has completely dominated the news in the security world the last two weeks, has been a concern for so many.  On the front of good news and getting things protected, the IBM ISS has team has published some great information. The Frequency X...
Source: ZDNet

Researchers help define next-gen social networking   28 Jul 2008 13:00 GMT
Academics gathered at an annual event at Microsoft to discuss shortcomings in social-networking platforms.

Source: Computerworld

McAfee: Many SMBs unprepared for online security threats   28 Jul 2008 13:00 GMT
Security software vendor McAfee said that nearly half of the 500 small and midsize companies it surveyed recently don't view themselves as valuable targets for cybercriminals.

Source: Computerworld

Switching Gears, and Looking Back   28 Jul 2008 04:43 GMT
In the course of four years, our security manager accomplished a lot in her government agency, which had been a security disaster waiting to happen.

Source: Computerworld

Ira Winkler   28 Jul 2008 04:43 GMT
The security maven talks about how information security differs from computer security, why 'awareness' isn't enough, and when grandma's computer has to be shut down.

Source: Computerworld

City Missed Steps to Avoid Network Lockout   28 Jul 2008 04:43 GMT
IT executives and analysts list some steps that San Francisco officials could have taken to prevent a disgruntled employee from locking IT administrators out of the citys fiber backbone network.

Source: Computerworld

Short Takes   28 Jul 2008 04:43 GMT
Brief IT news items.

Source: Computerworld

One Risky Point   28 Jul 2008 04:43 GMT
The city of San Francisco's problem with one network engineer hints at management issues for all IT shops, says Frank Hayes.

Source: Computerworld