New I.B.M. Report Will Warn of Computer Security Threats
4920
I.B.M. plans to begin releasing a monthly report of threats to computer networks in an effort to establish an indicator similar to the federal governmentÂs Homeland Security Advisory System.
387896
Microsoft today released five Security Bulletins warning of several vulnerabilities that put computers running Windows at risk of attack. None are rated "critical," Microsoft's highest severity rating.
221453
Security firms have warned that the three new unpatched vulnerabilities, which have been reported in Microsoft Windows systems could pose a grave risk for exploits.
26007
Security firms are warning about a clever Windows virus called Bofra that has started circulating on the net.
20487
Tech managers fear businesses are more vulnerable to malware because of wireless devices used by workers
687532
A security researcher warned today that there are ways the sleek device could potentially be compromised.
551983
Human security and technologies from cell phones to weather forecasts are more at risk than ever from anti-satellite weapons and space junk, said a research report released Friday.
222388
In what may be the first step toward a major security problem, security researchers have released attack code that will crash Windows machines that are susceptible to a recently patched bug in the operating system.The code is not available to the general public. It was released Thursday to security professionals who use Immunity&#39;s Canvas computer security testing software. It causes the Windows system to crash but does not let the attacker run malicious software on the victim&#39;s system.&quot;It reliably crashes Windows machines,&quot; said Dave Aitel, Immunity&#39;s CTO. &quot;In fact, it blue-screened our print server by accident -- this is a broadcast attack, after all.&quot;That&#39;s the biggest concern for security experts who worry that a more dangerous attack may soon follow as researchers dig further into the vulnerability. The bug is particularly troublesome for two reasons. First, it affects a widely used Windows component that is turned on by default. Worse, no user interaction is required to trigger the flaw, meaning that it could be exploited in a self-copying worm attack.Microsoft patched the flaw in its MS08-001 update, released last week, but it takes time for enterprise users to test and install Microsoft&#39;s patches.The flaw lies in the way Windows processes networking traffic that uses IGMP (Internet Group Management Protocol) and the MLD (Multicast Listener Discovery) protocol, which are used to send data to many systems at the same time. The protocols are used by a range of applications, including messaging, Web conferencing, and software distribution products.For a worm attack to work, the attacker would have to send specially crafted packets to a victim&#39;s machine, which could then allow the attacker to run unauthorized code on the PC. The worm could then spread from computer to computer within a LAN but would generally be stopped from travelling to another network by a firewall.A reliable exploit could be combined with malicious botnet software, giving attackers a way to widen the size of their networks of infected computers. The flaw is rated critical for Windows XP and Vista systems, according to Microsoft.After patching the flaw, Microsoft published some technical research indicating that it would be hard for an attacker to exploit this vulnerability.But Aitel believes that Microsoft may have overestimated how difficult it would be to create reliable attack code. Because it could spread so quickly through a network, a reliable exploit &quot;is going to be worth the effort,&quot; Aitel said. &quot;You can be assured lots of smart people are working on it.&quot;Part of the problem is that IT staff may not be aware of how widely these multicasting protocols are used within their companies, said Russ Cooper, a senior network consultant with Verizon Business. &quot;I am extremely worried that this becomes a problem simply because people are unaware of what they&#39;re already allowing,&quot; he said.If one machine were infected within a network subnet, its attempt to attack other machines might not even be noticeable, he added. &quot;It may look like a large file transfer.&quot;
81628
Internet-based assaults continue to be a major concern, according to a new report from security software maker Symantec. The time from discovery of a vulnerability to attacks exploiting that vulnerability is shrinking.
189384
Antivirus software company McAfee Inc. said on Monday that a new version of its VirusScan Enterprise software contains so-called "intrusion prevention" features that can protect computers from attacks such as buffer overflows, which are often used by viruses, worms and malicious hackers to compromise vulnerable Microsoft Corp. Windows machines.
714209
Beginning next week, users who pay Symantec to manage their security infrastructures will be able to get extensive information on global cyberthreats and threats particular to their IT systems.
186909
The recent Internet Security Threat Report from security vendor Symantec painted a bleak picture for IT security - both now and into the future.
86151
Symantec Corp. is expected to announce on Monday a new service to help financial institutions fight phishing attacks and online fraud.
193994
A leading security expert warns that new chip and pin credit and debit cards could be open to fraud.
267175
8e6 Technologies, a security company dedicated to Internet filtering and reporting, today announced a new enterprise reporting suite designed to alert corporate executives and IT professionals about Internet threats coming from within their organization.
163329
New report on offshoring's implications from the British Computer Society.
35029
Unpatched vulnerabilities may leave computers open to remote attacks.