Powered By InformationWeek Business Technology Network
 


Database Security Tech Center

IBM Researchers Unveil New Data Masking Technology
'MAGEN' technology automatically shields sensitive customer, patient data

Oracle Report: Consumers Fickle About Ecommerce Security Controls
Nearly one-third of U.K.'s online shoppers don't trust online security measures, but most don't want additional controls if it affects ease and speed of transactions

Tech Insight: Database Security -- The First Three Steps
Protecting sensitive data means locating and enumerating the information in your databases -- and finding the right method to secure it

MORE DATABASE SECURITY TECH CENTER STORIES



Security Services Tech Center

Google Discloses Plans For New Malware-Resistant OS
Chrome OS aimed at eradicating malware issues for desktops with lightweight platform and cloud-based application model

SecureWorks-VeriSign Deal Highlights Acquisition Trend In Security Services
As SecureWorks gets bigger faster, VeriSign pulls out of services business

New Tool And Managed Service 'Penetration-Test' End Users
New User Attack Framework (UAF) could eventually work with Metasploit's hacking tool, researchers say

MORE SECURITY SERVICES TECH CENTER STORIES



Insider Threat Tech Center

Dark Reading To Hold Virtual Conference On Insider Threats Next Week
All-day event includes keynote, sessions, exhibit floor, and discussion rooms -- all without leaving your desk

Insider Arrested For Stealing Critical Proprietary Code From Financial Services Company
Blogger says stolen code might have been Goldman Sachs' 'secret sauce'

Security Guard Busted For Hacking Hospital's HVAC, Patient Information Computers
"GhostExodus" bragged about his breaches on YouTube, and tried to rally fellow hackers to conduct a massive DDoS attack

MORE INSIDER THREAT TECH CENTER STORIES





Best Of The Web

FINEXTRA
New Jersey Street Gangs Gravitating To Hi-Tech Cheque Fraud
JULY 8, 2009  | Several members of the New Jersey Bloods gang have been arrested and accused of using laptops and digital cameras to create counterfeit checks worth $654,000

ADOBE PRODUCT SECURITY INCIDENT RESPONSE TEAM
Adobe Warns Of Potential ColdFusion Security Issue
JULY 8, 2009  | Adobe has had reports of ColdFusion Websites being compromised through a vulnerability in the FCKEditor rich text editor, which is installed with ColdFusion 8; Adobe is working on a patch

THE REGISTER
Cops Swoop On E-Crime Gangs After Banks Pool Intelligence
JULY 8, 2009  | Two London-based cybercrime gangs were apprehended following an agreement by banks and credit card companies to share intelligence on network attacks and malware

NETWORK WORLD
US Authorities Extradite Indian On Hacking Charges
JULY 8, 2009  | Indian pleads not guilty to charges of hacking into online brokerage accounts in order to manipulate stock prices

THE WASHINGTON POST
GAO: Major Security Flaws At Federal Buildings
JULY 8, 2009  | The federal government police agency in charge of protecting federal buildings has failed several physical security audits

COMPUTERWORLD UK
Malware Traffic Soars
JULY 8, 2009  | Fortinet data shows the exploit rate is near 60 percent for first time

HIR INFORMATION REPORT
Fare Thee Well, Milw0rm
JULY 8, 2009  | Milw0rm, a site dedicated to posting new exploit code, appears to be on its way out

GOOGLE BLOG
Native Client Security Contest: The Results Are In!
JULY 8, 2009  | Winning contestants found bugs that enabled exploits, but no fundamental flaw, in the design of Google Native Client, Google says

More Best Of Web




Free Security Tools from Sophos
Scan for security risks, threats, rootkits and unauthorized applications.

Info-Tech Research Group
A specialist in small and medium-sized businesses, Info-Tech offers a different perspective than research houses that focus on the Fortune 1000.



Video
Blogs

Evil Bytes
BY John H. Sawyer
Hacking And Exploit Site Milw0rm Closes Its Doors
July 8, 2009
02:18 PM -- Milw0rm is by far one of the best-known public sites to get the latest proof-of-concept exploit code. Or at least it was until it closed its doors today. The closing comes as a shock to the security community given that milw0rm had become a valuable resource for proof-of-concept and weaponized exploit code, demonstration videos, and papers on all a ...

SophosLabs Insights
BY Graham Cluley
Independence Day Fireworks Video Carries Malware Payload
July 4, 2009
02:41 AM -- Hackers are taking advantage of American Independence Day celebrations by spamming out what pretends to be a link to a Fourth of July fireworks show, but is really an attempt to infect computers.

Hacked Off
BY Gadi Evron
DDoS Cyberwarfare Hurts Us All
July 9, 2009
11:55 AM -- A distributed denial of service (DDoS) attack has been in the news in recent days due to attacks against the U.S. government -- with fingers pointed at North Korea. There are a few basic truths people forget when it comes to information w ...

Dark Dominion
BY Tim Wilson
Dark Reading Launches Database Security Tech Center
June 16, 2009
09:23 AM -- Today Dark Reading launches a new feature: the Database Security Tech Center, a subsite of Dark Reading devoted to bringing you news, product information, opinion, and analysis specifically focused on the topic of database security.

CS Island
BY Sara Peters
Kantara Initiative: Another Effort To Get Identity 2.0 Out Of The Gate
July 6, 2009
05:09 PM -- We've been saying for a while now that better identity management -- more so than secure Web app coding or even more secure browsers -- could fuel a quantum leap in Web security. The "Identity 2.0" community can be credited with wonderful research and truly significant advancements in identity management technology. In many ways, we're poised for a ...

MORE BLOGS



CSI Report
13th Annual CSI Survey
Targeted attacks, DNS exploits are on the rise, according to the 2008 CSI Computer Crime and Security Survey
MORE

User Profiles
8.22.2008
Life Insurer Takes New Approach to Two-Factor Authentication
Cryptocard technology helps Kansas City Life get the handle on a thorny access problem
MORE
5.30.2008
Stanford Medical School's Rx: Anomaly Detection
Appliance helps minimize bot, malware infections
MORE

Jobs
Position: Software Engineer 1
Company: Boeing
Location: Anaheim, CA
Posting Date: Posted 07/02/09
MORE INFO
Position: Mechanical Design Engineer
Company: Osram Sylvania
Location: Danvers, MA
Posting Date: Posted 07/02/09
MORE INFO
Position: Research on Algorithms
Company: D. E. Shaw
Location: New York, NY
Posting Date: Posted 07/02/09
MORE INFO
Position: Health Information Management Directors
Company: KForce
Location: Saint Louis, MO
Posting Date: Posted 07/02/09
MORE INFO
Position: Software Engineer 5
Company: Boeing
Location: Anaheim, CA
Posting Date: Posted 07/02/09
MORE INFO


Briefing Centers
POWERFUL INFORMATION
AT YOUR FINGERTIPS
(SPONSORED LINKS)


Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:pluck
Published:2009-07-02
Severity:Medium
Description:Directory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the post parameter.
Vulnerability:cpanel, fantastico de luxe
Published:2009-07-02
Severity:Medium
Description:Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. (dot dot) in the sup3r parameter.
Vulnerability:ez publish
Published:2009-07-02
Severity:High
Description:The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttribute_data_user_login_30, ContentObjectAttribute_data_user_password_30, and other parameters.
Vulnerability:clamav
Published:2009-07-02
Severity:Medium
Description:The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file.
Vulnerability:avast antivirus
Published:2009-07-02
Severity:Medium
Description:Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed (1) ISO or (2) RPM file.