Dark Reading
Risky Business
CISO GUIDE: FISMA Compliance
Do more than just cursory scans. Develop
a holistic approach to app security.
Find out how!
Do more than just cursory scans. Develop
a holistic approach to app security.
Find out how!
EBOOK: 7 Truths of IT Governance
Learn to take the ambiguity out of managing IT so you can guide your business forward.
Download now!
Learn to take the ambiguity out of managing IT so you can guide your business forward.
Download now!
BUYERS GUIDE: Endpoint Protection
Use these tips from Gartner to identify the EPP solution that best suits your business.
Download now!
Use these tips from Gartner to identify the EPP solution that best suits your business.
Download now!
All Security News Feeds
Trend Micro Expands its Hosted Security Service And Puts Focus On Channel-Success And Protecting Mobile Workers
Smart Card Alliance Healthcare Council Plans Identity Management Focus For Upcoming Year
CA Extends Web Access Security Technology
SPYRUS Ships Secure Storage Devices With FIPS 140-2 Encryption
ENISA: 17 Golden Rules To Combat Online Risks For Mobile Social Networking
InfoExpress Adds Virtual Appliance To Its CyberGatekeeper Family Of NAC Products
Sunbelt Software Announces Top 10 Malware Threats For January
Unisys Awarded Contract to Provide Biometric Citizen Identification Solution For Mexico
Report: Corporate Departments Left Open To Voice Call Interception
Windows File System Attack To Be Demo'ed At Shmoocon
DataInherit Launches A Free High Security Online Password Safe
McAfee Announces Quickstart Services For SMBs
Retired USAF General Publishes White Paper on U.S. Strategy For Cyberwar And Cyberterrorism
Cisco: 87% Of Europeans With Wireless Internet At Home Have Enabled Security
PGP Corporation Acquires TC TrustCenter & ChosenSecurity
LogRhythm Granted Patent For Log And Event Management Technology
Wipro, Trend Micro Unite to Deliver Next-Generation Virtualization Security Solutions For Dynamic Datacenters
Netgear Brings Enterprise-Class Security To Small Businesses And Telecommuters For Under $300
VeriSign Identity Protection Mobile Application on Verizon Wireless Phones Makes Security More Accessible
Encryption Firm Says No One Stepped Up To Claim $250k In Pure Gold
Sophos Report: Malware And Spam Rise 70% On Social Networks
Industry Experts Gather At MAAWG To 'Protect The End User'
Cyber-Ark's Sales Increased 40 Percent In 2009
Speaker Pelosi And Boehner Send Letter To CAO On Protecting House Web Sites From Being Hacked
Online Trust Alliance Release Framework For Protecting Consumer Data
New Email Threat Poses As Local Parcel Firms
WhiteHat Security Kicks Off 2010 With Record Revenue
Data Privacy Day: New Report Reveals Companies Struggle To Manage Electronic Records
Tips for Safeguarding Your Online Privacy For World Data Privacy Day
RedSeal Rolls Out Change Management
Skybox Security Launches Firewall Management Solution
StoneGate Releases New Firewall/VPN And Management Centre
StillSecure Announces Virtual Security Services
Tufin Rolls Out New Version of Firewall Management Tool
Tripwire Intros Next-Gen SIEM Solution With Log Center
Google Updates Chrome Browser
Apache Software Foundation Announces Apache SpamAssassin Version 3.3.0
SecureWorks: Hacker Attacks Targeting Healthcare Organizations Doubled In Q4 2009
Secure Passage Announces Record-Breaking Year
PCI DSS Names New Chair
HBGary Federal And Palantir Technologies Partner To Provide Enhanced Cyber-based Threat Intelligence
WhiteHat Partners With Aspect For Web App Security
PacketMotion Simplifies PCI DSS Compliance With New Virtual Segmentation Solution
Panda Security USA Expands Management Team
StopBadware Spins Off From Harvard's Berkman Center For Internet & Society
EU Agency Report: How Email Providers Combat Spam
Thales, Voltage Team To Deliver End-to-End Encryption And Key Management To Secure Payments
AVG Posts Record Growth, Surpasses More Than 110 Million Users
F5 Networks Announces Quarterly Earnings
IronKey Launches Trusted Virtual Computing Initiative
Mozilla Delivers Firefox 3.6
FBI Warns About Mystery/Secret Shopper Schemes Via Email
PGP Corporation Announces New Data Protection Solutions For Mac And Linux Enterprise Users
Lockheed Martin Invests In Cyber Security Talent And Workforce Development
Avast Launches Free Desktop Security Software, Full Internet Security Suite
PC On A Stick/Secure Virtual Desktop From IronKey And Lockheed Martin
Sourcefire Delivers 20 Gbps Intrusion Prevention Solution
Core Security Launches Professional Services
Panda Cloud Antivirus Now Compatible With Windows 7
SAIC To Acquire CloudShield
Perimeter E-Security's Top 10 Threats For '10
Intersections Offers ID Protection Service For $10/Year
Entrust Updates PKI Platform, Adds Linux Support
FaceTime, YellowJacket Team In IM Compliance For Energy Industry
Summit Partners Invests in NetWitness
Dataguise Announces Dgmasker Application Templates
FBI Warns Of Haitian Earthquake Relief Scams Online
Study: Server Virtualization Still Growing
Kingston Digital To Replace Affected Secure USB Flash Drives With Upgraded Security Architecture, New Drives
Check Point Global Survey Reveals Rise In Unprotected Enterprise Endpoints
New Antivirus Company Thirtyseven4 Launches
HP, Microsoft Team In Cloud Computing
Report: Mal-Bredo A Virus Spreads Via Social Media
Core Security Posts Record Growth In Revenues, Sales In Q4
Trustwave Buys BitArmor
Trend Micro Rolls Out New Solution Suites For Enterprises And Midsize Businesses
FIPS 140-2 Certified Encryption Module Added To KVM Switch
Cyber-Ark Labs Launched To Develop New Info Security Solutions, Headed by Former CA Exec
ScanSafe Reports 55% Increase In Employees Attempting to Download Illegal Software At Work
Secerno Debuts Data Protection At 230,000 Transactions Per Second
Huawei Symantec Announces New Security, Storage Brands
Solutionary Designated as an Approved Scanning Vendor by Payment Card Industry (PCI) Security Standards Council
Open Internet Coalition Launches "Protect the Net" Campaign
Thales Introduces Next-Generation Hardware Security Modules
Hughes Announces New Wireless PCI Scanning Service
SecureWorks Gains PCI Certification For Scanning Service
Symantec Data Center Report: 83% Rate Data Center Security Important
Red Condor Warns Of Highly Personalized Spear-Phishing Campaign
Free Comodo System-Cleaner Organizes Registries, Improves Privacy
New Email Security Product Supports TLS Encryption
StrongAuth Releases StrongKey Lite
ICSA: How To Save Time And Resources When Selecting Security Products In 2010
Dyn Inc. Acquires EveryDNS
Oberthur Bank Cards Not Affected by 2010 Bug
Tom Ridge's Security Firm Partners With Pace To Deliver Integrated Energy And Security Solutions
General Dynamics Receives NSA Certification for Secure Voice
PandaLabs Releases 2009 Annual Malware Report
SCM Microsystems, Bluehill ID Merge, Change Name
Gartner Acquires Burton Group
MANDIANT Expanded Team in 2009 By Over 65%
ManageEngine Releases ADSelfService Plus Password Reset Portal
SonicWALL Gives Network Managers More Control With Management System
NetWitness Reports Major Revenue Growth In 2009
Rocstor Unveils New Family Of Encryption Products
CreditReport.com Launches Free Identity Theft News Tool
eEye Names New CEO Kevin Hickey
Centrify Awarded Patent In Identity Management Of Unix, Linux Systems
VeriSign Metrics Highlight Significantly Heavier Traffic This Holiday Season
Fortinet Announces Breakthrough In IPv6 Security Throughput
E-Threats Shifting With International Current Events, Rising Popularity Of Web 2.0, Study Says
Two Consumer Groups Ask FTC To Block Google's Purchase Of AdMob
OTA Asks FTC For Standardized Privacy And More Browser Controls
Palisade PacketSure Certified For Twitter And Facebook
BreakingPoint Introduces Bing-like Security Strike Search Engine
Element Payment Services, Trustwave Partner In Level 4 PCI Compliance Program
SIA Launching Field Studies For Physical Security, Security Project Management
Astaro Releases Version 2.1 Of Free Astaro Command Center
SmoothWall Launches Powerful Web Filtering Appliance
Webroot, AnchorFree Join Forces
Clavister Adds Enhancements To Clavister Security Gateway 4300 Series
Discretix Announces Embedded Security Solutions For Media Phones
IETF, BITS Financial Services And MAAWG Join Forces
Cryptzone Acquires AppGate Network Security AB
Report: Over 97% Of November Email Was Spam
Zscaler Protects Against Adobe Acrobat Reader Zero-Day Exploits
Symantec, Message Systems Join Forces
'Five Golden Rules' For Reducing Security Risk Posed By Temporary Holiday Workers
Veracode Hits Milestone Of 50B Lines Of Code Scanned
Secure64 Releases High-Performing DNS Caching Software
MSSPs Team Up For Global Offering
Black Box Rolls Out New NAC
Protegrity Advances Tokenization Of Sensitive Data With Transparent, On-Site Enterprise-Ready Solution
WatchGuard Unveils Enhanced Managed Security Services Program
Shavlik, Numara Partner on Patch Management
BlockMaster Launches SafeConsole 4.0 To Enhance Usability And Security Of USB Devices
Black Hat Announces Abu Dhabi 2010
SAP, Security Weaver Settle Lawsuit
CIS Names Board Chairman
Neustar Implements DNS Security Extensions In The .US Registry
Optenet Offers New SaaS Security Solution For The Enterprise
EMC Upgrades Data Protection Management Analysis And Reporting
PhishMe Reaches Milestone
FishNet Rolls Out SIEM Service
PKWARE, Fidelis Security Systems Release Joint Content-Aware Encryption Solution
Deloitte: 'Tis The Season For Cyber Vigilance
ActivIdentity To Acquire CoreStreet
EMC Unveils New Version Of EMC Data Protection Advisor
Lieberman Software Provides Privileged Identity Management Solution For Microsoft Office SharePoint Server
Iovation Partners With Litle & Co. In Secure Payment Solutions
Kace Upgrades Endpoint Security Product
Solera Networks Launches OS 4.0
BitDefender Partners With S.N. Safe&Software
Check Point: Adds Full Disk Encryption For Apple's Macintosh OS X Snow Leopard Platform
MessageLabs '09 Report: Botnets Bounce Back With Sharpened Survival Skills
CA Report: Fake Security Software, Search Engines, Social Networks 2009's Top Internet Threats
Free DNS Service From Comodo
OpenDNS, Neustar Team Up In DNS Service
Microsoft Acquires Sentillion
Palisade Systems Adds On $2.6 Million In Funding
FishNet Uses FireMon For Its Managed Firewall Services
U.S. District Court Rejects Motion To Dismiss In Phoenix Technologies' Lawsuit Against DeviceVM
Trend Micro 2010 Future Threat Report
Marc Maiffret Joins FireEye As Chief Security Architect
Facebook Offers New Personalized Privacy Controls
BitDefender Releases 'Conficker -- One Year After' Whitepaper
Napatech Brings Intelligence To Network Monitoring
BlueCat Enhances DNSSEC
SecureWorks Acquires U.K.-based Provider Of Managed Security Services
Unisys Predicts Biometrics Boom To Protect Data In 2010
McAfee Unveils Integrated IPS/Zero-Day Malware Protection Platform
Gemalto Surpasses 25 Million Smart Card Shipments To Feds
Attack Attempts To Hijack Yahoo Hosting Customers' Websites
Shavlik Releases XP Device Patch
HBGary Launches HBGary Federal
Arbor Networks Introduces 40Gig Threat Management System To Mitigate Application-Layer Attacks
InfoExpress Enhances CyberGatekeeper 7 NAC Products
IronKey Releases D200 32GB USB Flash Drive
GFI Releases Freeware Version Of GFI EndPointSecurity
Sandata Enhances Fraud Prevention Capabilities
Autorun-Based Malware Tops BitDefender's November Top Ten Threat Report
Conformity Announces Integration Support For TriCipher's myOneLogin
Fortinet Launches Messaging Security Tools For MSSPs, Carriers, Large Enterprises
SecureWorks Reports Increased Email Scams
FaceTime Adds Support For Squid Proxy Server To Unified Security Gateway
Exostar Launches Managed Access Gateway Service
DigitalPersona Fingerprint Sensor Technology Ships On IBM SurePOS 500 Retail Systems
Phoenix Technologies' Freeze Proximity Security System Now Offered With Trend Micro Internet Security Pro 2010
Secure64 Earns FIPS Level-2 Certification
NetWitness Announces Partnership With SRA
Dasient's Web Anti-Malware Service Out Of Beta
Symplified Uses Salesforce To Secure Cloud Applications
Trustwave Receives NAC Patent
BitDefender Partners With Compro Technology In Anti-Malware
ENISA Launches Position Paper On Security Risks In Online Banking
Sunbelt Software Online Shopping Survey Highlights Stark Consumer Security Concerns
McAfee Reveals Removable Media Strategy
Webroot Unveils New SaaS Security Solutions
Unisys: Protecting Yourself From Holiday-Related Scams
AlgoSec Extends Policy Managment To Eight Network Security Devices
Comodo Firewall Now Part of Comodo Internet Security
Bit.ly, Sophos Partner For Malware Protection
UTM Startup Focuses On Small Businesses
FTC: What To Look For In An ID Theft Benefit For Employees
Perimeter E-Security: Top Ten Biggest Security Breaches And Blunders of 2009
IBM OEMs Engate For Proactive Botnet, Phish, Virus And Email Security
Signify Extends 2FA Hosted Service To SaaS Apps
Red Condor Blocking 'Snowshoe' Spammers Without RBLs
Black Friday Crime -- Retailers Scammed Out Of Billions Due To Receipt Fraud
AFA Announces Final Round Teams For National High School Cyber Defense Competition
VeriSign Extends VIP Network With MarkMonitor
Survey: 90 Percent Of Consumers To Shop Online This Holiday Season; Majority Have Security Concerns
Twelve More Companies Earn CompTIA Security Trustmark
Intersections Inc. Offers Tips for Safe Holiday Shopping On Black Friday, Cyber Monday
CA Rolls Out Internet Security Suite 2010 'At No Additional Charge For A Year'
SonicWALL Identifies Top Online Threats, Scams, Frauds For Holiday Season
Five Tips to Help Retailers Reduce Risk Of Cyber Attacks For Holiday Season
Cyberoam Launches Data Protection Security Software
VeriSign Provides Digital Identity Management To Aerospace And Defense Industry
Webroot Alerts Online Shoppers To Holiday Cyberthreats: Data-Stealing Malware On The Rise
Trustwave Launches TrustKeeper 3.0
StillSecure, HP Partner In Managed Security Services
DHS Goes PKI
FDA Issues Warning Letters To Web Site Operators Over Illegal Pharmacies
Nominum Announces 'DNSSEC Made Easy' Solutions
Immunet Secures $2 Million In Funding
WatchGuard Launches New Family Of E-mail Security Appliances For SMBs
Macintosh Spy Software Hits The Market
ScanSafe: Gumblar Responsible For 29% of All Web Malware Blocks In October
Verizon Business Offers New IT Security Consulting Services For Electric Utilities
FBI Warns Of Spear Phishing Attacks On U.S. Law Firms and Public Relations Firms
National Retail Federation/Shop.org, AVG Provide Online Safety Tips For Shoppers
InfoExpress Announces Windows 7 Support For CyberArmor Enterprise Firewall
Klocwork Rolls Out New Source Code Analysis Tools For Agile
VeriSign Chosen To Protect The Windows Azure Platform
James Cash, Jr., Ph.D., Joins Veracode Board
GlobalSign Announces Multi-Year Secure Email Certificate
DeepNines Introduces Security Lab And Internet Security Assessment Tool
Trustwave Rolls Out Tokenless Two-Factor Authentication
Damballa Announces Plans For Company-Wide Growth, Names Ex-IBM ISS Exec As New CEO
Facebook Automates Sensitive Data Discovery
Napatech Unveils Inline Network Adapters
Astaro Offers Free Firewall For SMBs
Lenovo Introduces Secure Managed Client Solution 2.0
Wiresoft Firegate "Hack Us If You Can" Challenge Starts
Survey: User Name/Passwords Used By 99% of European Firms, But PKI On The Rise
Jetico Rolls Out BCWipe 4.0
New Program From Courion Aims To Limit Data Breach Threats
Atmel Introduces Turnkey Security Microcontrollers
BitDefender, Zotac Team Up To Provide Innovative Anti-Malware Solutions
BIG-IP Adds New Capabilities To Security Product Line
New Osirium Solution Can Manage Many Different Security Devices
Team Cymru Launches New Tool to Help With Cyber Crime Investigations
Onsite Disk Wipe Combats Storage Data Leaks
HITRUST Announces Health IT Security & Privacy Certification Program
Global DataGuard To Deliver Unified Security For Cloud Computing Environments
idAlliance Corporation Releases iManageCerts Certificate Management Tool
Network Solutions Deploys Cloud Based Anti-Spam Service
Promisec Introduces Clientless Endpoint Management Software For MSPs
Fortinet Rolls Out New UTM Appliance
MashSSL Alliance Formed To Promote Open Standard For Trust Establishment Between Web Applications
Lockheed Martin Forms Cyber Security Technology Alliance
Verizon Business Identifies Top Technology Trends That Will Support Business Expansion As Economy Recovers
NetWitness Rolls Out NextGen Version 9.0
HP to Acquire 3Com For $2.7 Billion
Forum Systems Rolls Out Secure XML-SOA Gateway
Survey: Healthcare Companies Not Ready For New Privacy And Security Regulations
Oracle Announces Latest Release Of Oracle Audit Vault
China Nudges Out U.S. For Most Bot-Infected Machines
China Shutters Hacker 'Boot Camp'
GAO Report: NASA Still Facing Weaknesses In IT Security
MORE KEYHOLE
ENTERPRISE VULNERABILITIES
Vulnerability:suse linux
Published:2010-01-22
Severity:High
Description:SUSE Linux Enterprise 10 SP3 (SLE10-SP3) configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
Published:2010-01-22
Severity:High
Description:SUSE Linux Enterprise 10 SP3 (SLE10-SP3) configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:The URL validation functionality in Microsoft Internet Explorer 7 and 8 does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
Published:2010-01-22
Severity:High
Description:The URL validation functionality in Microsoft Internet Explorer 7 and 8 does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
Vulnerability:bind
Published:2010-01-22
Severity:Medium
Description:ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.
Published:2010-01-22
Severity:Medium
Description:ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246.
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246.
|
