Powered By InformationWeek Business Technology Network
 


Database Security Tech Center

Tech Insight: Database Security -- The First Three Steps
Protecting sensitive data means locating and enumerating the information in your databases -- and finding the right method to secure it

Massachusetts Worker Accused Of Using Database In ID Theft Scheme
Employee at medical cost management firm allegedly used doctors' personal information to obtain credit cards

Oracle Users Struggle With Patch Management
Despite new tools that speed deployment, many administrators are still far behind

MORE DATABASE SECURITY TECH CENTER STORIES



Security Services Tech Center

'Mafiaboy': Cloud Computing Will Cause Internet Security Meltdown
Notorious black-hat hacker warns that cloud-based computing will be "extremely dangerous," and explains how he got into hacking at age 15

OWASP: Security Spending Remains Mostly Unchanged With Cloud Computing
New Open Web Application Security Project report finds enterprises aren't sufficiently verifying cloud providers' security, either

Study: Social Network Users Put Their Data At Risk
Users of Facebook, LinkedIn, Twitter leave themselves -- and their wallets -- open to attack

MORE SECURITY SERVICES TECH CENTER STORIES



Insider Threat Tech Center

Security Guard Busted For Hacking Hospital's HVAC, Patient Information Computers
"GhostExodus" bragged about his breaches on YouTube, and tried to rally fellow hackers to conduct a massive DDoS attack

NAC Appliances Hardest Hit In Network Security By Economic Downturn, Report Says
But Infonetics expects the NAC appliance market to rebound big time by 2013, to around $700 million

CISOs Say Insiders Are Greatest Threat To Data
In study, 80 percent say they're more concerned about employees and contractors

MORE INSIDER THREAT TECH CENTER STORIES









Free Security Tools from Sophos
Scan for security risks, threats, rootkits and unauthorized applications.

Info-Tech Research Group
A specialist in small and medium-sized businesses, Info-Tech offers a different perspective than research houses that focus on the Fortune 1000.



Video
Blogs

Evil Bytes
BY John H. Sawyer
It's Time To Take Bot Infections Seriously
July 1, 2009
03:26 PM -- The soapbox is a place I hate to be, but sometimes a topic just rubs me raw enough that I climb up to try and get my point across. The topic of bots, botnets, and their impact on corporate data is one of those issues.

SophosLabs Insights
BY Graham Cluley
Spammers Scramble To Exploit Michael Jackson's Death
June 26, 2009
10:29 AM -- It took a mere eight hours for cybercriminals to take advantage of the death of pop superstar Michael Jackson.

Hacked Off
BY Rich Mogull
The Only Two Reliable Cloud Security Controls
July 2, 2009
05:00 PM -- It seems that we in the information technology profession are just as fickle as the fashionistas strutting around Milan or New York. While we aren't quite as locked to a seasonal schedule, we do have a tendency to fawn over the latest technology advances as if they were changing colors or hem lengths. Some are new, some are old, some are incredibly ...

Dark Dominion
BY Tim Wilson
Dark Reading Launches Database Security Tech Center
June 16, 2009
09:23 AM -- Today Dark Reading launches a new feature: the Database Security Tech Center, a subsite of Dark Reading devoted to bringing you news, product information, opinion, and analysis specifically focused on the topic of database security.

CS Island
BY Sara Peters
EU Group: Social Networks, Thirty-Party App Developers Subject To EU Privacy Laws
June 25, 2009
01:57 PM -- I just took a close look at the Article 29 Data Protection Working Party's opinion report on online social networking. While some of its recommendations are what you'd expect, others came as a surprise.

MORE BLOGS



CSI Report
13th Annual CSI Survey
Targeted attacks, DNS exploits are on the rise, according to the 2008 CSI Computer Crime and Security Survey
MORE

User Profiles
8.22.2008
Life Insurer Takes New Approach to Two-Factor Authentication
Cryptocard technology helps Kansas City Life get the handle on a thorny access problem
MORE
5.30.2008
Stanford Medical School's Rx: Anomaly Detection
Appliance helps minimize bot, malware infections
MORE

Jobs
Position: Software Engineer 1
Company: Boeing
Location: Anaheim, CA
Posting Date: Posted 07/02/09
MORE INFO
Position: Mechanical Design Engineer
Company: Osram Sylvania
Location: Danvers, MA
Posting Date: Posted 07/02/09
MORE INFO
Position: Research on Algorithms
Company: D. E. Shaw
Location: New York, NY
Posting Date: Posted 07/02/09
MORE INFO
Position: Health Information Management Directors
Company: KForce
Location: Saint Louis, MO
Posting Date: Posted 07/02/09
MORE INFO
Position: Software Engineer 5
Company: Boeing
Location: Anaheim, CA
Posting Date: Posted 07/02/09
MORE INFO


Briefing Centers
POWERFUL INFORMATION
AT YOUR FINGERTIPS
(SPONSORED LINKS)


Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:foxit reader, jpeg2000/jbig2 decoder add-on
Published:2009-06-23
Severity:High
Description:The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read.
Vulnerability:foxit reader, jpeg2000 jbig2 decoder add-on
Published:2009-06-23
Severity:High
Description:The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access.
Vulnerability:chrome
Published:2009-06-23
Severity:High
Description:Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response.
Vulnerability:radio and tv player addon for vbulletin
Published:2009-06-23
Severity:Medium
Description:Cross-site scripting (XSS) vulnerability in forum/radioandtv.php in the Radio and TV Player addon for vBulletin allows remote registered users to inject arbitrary web script or HTML via the station parameter.
Vulnerability:carom3d
Published:2009-06-23
Severity:Low
Description:The LAN game feature in Carom3D 5.06 allows remote authenticated users to cause a denial of service (application hang) via a crafted HTTP request to TCP port 28012.