Finjan: Warning users or scaring up business?
301124
Security tools maker Finjan Software warned on Wednesday that it hadfound as many as 10 security flaws in the last update to Microsoft&#39;s flagship operating system, Windows XP Service Pack 2. In a statement
320034
Antispam lawsuits and enforcement actions suggest that companies taking a wink-and-nudge approach to affiliates should be careful about how they lure paying customers. By Ryan Singel.
753835
Earnings warning? What earnings warning?
663936
bulk messages clogging instant-messaging accounts. AOL and its Anti-Spam Alliance partners -- EarthLink, Microsoft, and Yahoo
402591
Question: We're in the early stages of startup and beginning to shop for technology. We'll need basic hardware and software, plus many other technology and Web-based services to sell online, service customers and keep it all secure.
748126
This is a look at eight of the most dangerous consumer gadgets and services that threaten IT security and infrastructure. The responses from companies to these technologies range from banning and blocking to monitoring employee activities with sophisticated tracking software.
702141
A leading provider of secure content management solutions, Finjan Software, has reported 10 serious security vulnerabilities in Windows XP Service Pace 2. According to the company, the attacker can remotely take control over a machine running Windows XP
647687
PCI DSS fails to settle SMEs Efforts by the credit card industry to boost merchant security are likely to flounder unless tighter regulations are accompanied by punishments against transgressors.â¦
5249
New Web ads respond to your activities--and this has privacy advocates worried.
23509
Department manager wants programmer pilot fish to support a system fish has never heard of. He soon learns it was created by a user that fish knows to be computer proficient -- but extremely dangerous.
358340
(InfoWorld) - The United Nations last week became the latest organization to warn computer users about the dangers of relying on just passwords to protect online bank accounts and e-commerce shopping carts, according to Reuters The warning from the UNâs International Telecommunications Union came a little more than a year after the United Statesâ Federal Financial Institutions Examination Council (FFIEC) released similar guidance calling for stronger user authentication for online banking customers.                                                     Those kinds of warnings are music to the ears of Jon Fisher, CEO of Santa Clara, Calif.-based Bharosa, which sells anti-fraud and multifactor authentication technology to banks, health care companies, and the government. Just three years old and with 50 employees, Bharosaâs been taking on security industry behemoths such as VeriSign and EMC/RSA on their own turf and, in some cases, winning. In the past year, Fisherâs company signed deals with Wells Fargo, National City, and the U.S. Air Force. A serial entrepreneur who sold his first company at age 23, Fisher spoke with InfoWorld Senior News Editor Paul F. Roberts about how the changing regulatory environment has been good for his company. InfoWorld: What is the core intellectual property that Bharosa has? Jon Fisher: We have a proprietary, gated methodology to screen for fraud in real time. The first gate manifests itself pre-log-in via an analysis of a host of data about the user and transaction. The second gate is at the first point of authentication: the user name and password. The third gate is manifest in session where transaction and document requests occur. The fourth gate is a score of third-party data, whether thatâs enterprise, legacy, or other data thatâs fed into our fraud detection engine. IW: What should enterprises know about software like Bharosaâs? JF: Fraud detection has a place not just in achieving FFIEC compliance, but also truly bringing together disparate legacy systems [that] enterprises have had in place for some time. IW: Are you talking about single sign-on, or something else? JF: Single sign-on is an application of that. But fraud detection [can make] a decision about what advanced forms of authentication to use based on the conditions, or what kinds of transactions will manifest in certain ways, like a document request or [bill payment].Â  IW: Arenât authentication and fraud detection ultimately just parts of a bigger architectural change that will tip the scales in favor of vendors who can take care of data security in addition to authentication and storage and the networking piece? JF: Iâve been an entrepreneur for a number of years. I know that if you want to start a company and run a good company, youâve got to do something well. Weâve selected a few things to focus on and do well. Theyâre things that, in aggregate, constitute more than just a point solution. But, yes, certainly less than the array of products in unrelated areas offered by competitors. In terms of how the competition in the space breaks out in the next few years, because of the importance of fraud detection â especially in the enterprise â some very large companies are looking at the space and deciding what their strategy will be. If you have a key product like [Bharosa] fraud detection thatâs embedded deep within some of the worldâs finest enterprises, no matter how much the space matures or develops and no matter what resources competitors have, you still have to work with Bharosa. IW: In the financial services space, how much of this is being driven by FFIEC guidance around single factor authentication? Where do things stand with adoption of FFIEC? JF: There are two answers. As an objective observer, Iâd have to agree that more than 50 percent of U.S. banks will technically not comply with FFIEC-related guidance by the end of the year. However, as a principle at Bharosa, Iâm finding that FFIEC compliance has served as rocket fuel for my relatively young company. Itâs been a key driver in our growth. Weâre very much looking forward to the second phase of FFIEC guidance in 2007. Weâre also looking for the effect this guidance will have on other markets. These mandates for enterprises to update security as a function of time are great environments to work in if youâre a software company.
687532
A security researcher warned today that there are ways the sleek device could potentially be compromised.
32465
Businesses say 'no way' Irish businesses are holding back from taking advantage of modern technologies because they are concerned about potential risks.â¦
658432
The Story: Even when there?s good news on the security front, there always seems to be bad news to balance it out. And while we think this news is important for you to know, it?s not an exception to the Good News/Bad News Syndrome.[ Slideshow: 2007's top underreported tech stories ]                                                    The use of e-mail-borne executable virus attachments dropped sharply in 2007. In particular, spammers have dialed back their use of so-called image spam, which tricks filters by embedding text within an attached image.According to IronPort Systems, outbreaks of viruses embedded in e-mail attachments totaled 860 in 2006 and 844 in 2005. But as of mid-October 2007, attacks totaled just 360. Dave Mayer, an IronPort product manager, said it?s likely that outbreaks will total 450 by the end of the year ? a drop of 47 percent. It appears that evildoers are moving on: ?Traditional viruses have been around for years, a long enough time to harden defenses against malicious attachments,? he said.Earlier in the year, IronPort, Symantec, and McAfee all noted that image spam, which appeared about two years ago, is waning, now that defenses have improved. Filters have now gotten better at scanning the contents of the attachments, leading spammers to link instead to images elsewhere.Mayer, whose company specializes in e-mail and Web security, says spammers are now placing those images on free photo-sharing sites ? the ones people use to send vacation photos to friends and family ? and embedding links to those images in their junk messages. These are difficult for spam filters to block because the same sites are used for legitimate photos as well.But as the abuse of e-mail attachments has declined, other types of threats have escalated. For example, outbreaks of macro viruses, aimed at Office-type applications, have risen by 50 percent to 60 percent while URL viruses climbed by at least 250 percent this year, IronPort found.The Bottom Line: It often seems as if the number of threats that you must be on guard against only increases, stretching your resources past the limits. But the truth is that threat profiles change over time, and some things you may be investing in are no longer as great a threat or are now handled by the tools you have in place. So, although you can?t get lax about security, you can focus more on newer threats.Complete list of 2007 underreported tech stories: 1.? Java is becoming the new Cobol 2.? Sun Microsystems is back in the game 3.? Hackers take aim at Mac OS X 4.? There are some threats you can worry less about 5.? Companies may have found a way around H-1B visa limits 6.? Open source?s new commercial strategy 7.? End-to-end Ethernet finally arrives 8.? Blade servers arrive for the masses 9.? BI is dead; long live BI 10. Balance of power shifts to software buyers
144919
Internet cafes that fail to enforce the strict rules governing their use are being shut down by the government. Also: Companies worry that the spyware buck will stop with them & hellip;.  High-tech outsourcing to India continues  & hellip;. and more.
603474
Would a European Commission decision cause the software maker "great harm"?
497620
Disastrous service can turn off customers and investors.