Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

1/31/2011
11:52 AM
Connect Directly
Twitter
LinkedIn
RSS
E-Mail
50%
50%

Trend Micro Unveils IBM Security Suite

ScanMail Suite for 64-bit Lotus Domino platforms uses a cloud-based database to detect threats, including those generated by URL-shortening services recently linked to the spread of malware.

Top 10 Security Stories Of 2010
(click image for larger view)
Slideshow: Top 10 Security Stories Of 2010

Internet security software developer Trend Micro Monday unveiled its ScanMail Suite, a solution designed for all 64-bit IBM Lotus Domino platforms, including IBM's new System z platform.

The vendor's newest offering provides anti-spam, anti-malware, Web threat protection, and content protection to prevent data loss and theft, according to Trend Micro. ScanMail Suite, which was designed specifically as a native Lotus Domino server application, was optimized for high-performance scanning, the developer said. The technology supports all current 64-bit Domino platforms, as well as Windows and AIX.

"The release of ScanMail v5 for Lotus Domino for Linux on IBM System z allows us to exploit the world's fastest chip technology on the IBM zEnterprise System to help our customers achieve unrivalled reliability, security, and manageability for their multi-OS datacenters," said Steve Quane, chief product officer at Trend Micro. "Further, since Lotus Domino, ScanMail, and IBM System z all support multiple operating environments, heterogeneity of data centers no longer stands in the way of dramatic consolidation and cost reduction -- a key objective of our large enterprise customers."

IBM's zEnterprise System was designed to be fast and scalable. The solution integrates a number of IBM technologies to support enterprises' multi-architecture data centers and private clouds, according to the vendor. In the fourth quarter of 2010, sales of System z mainframes grew 69% year-over-year, IBM said.

Likewise, Trend Micro turns to the cloud, using its domain-reputation database to track the credibility of Web domains and IP addresses. The database assigns a reputation score, using factors such as the site's age, IP email sending behavior, indications of suspicious activities discovered via behavior analysis, and historical location changes, the developer said. ScanMail immediately can access this rating, allowing the software to instantly block messages that include links to malicious URLs, said Trend Micro.

Malicious URLs are a growing threat today, according to many researchers and security developers. Creators of phishing sites are tapping into users' hunger for the shortened URLs popular on Twitter, direct messages, SNS applications, chat services on Twitter and Facebook, as well as friend-search optimization, according to AhnLabs, a provider of online security solutions.

Earlier this month, a new worm spread via the goo.gl URL abbreviator, said Kaspersky Labs security researcher Nicolas Brulez, in a company blog. The attack, first seen on Jan. 20, tweets a malicious URL, eventually linking a user to a scareware page. Scammers created a similar ruse in December, while a September attack using bit.ly's link shortening service saw more than 116,000 clicks.

To help combat these attacks, Twitter offers a link service that also will be used for analysis.

"A link converted by Twitter's link service is checked against a list of potentially dangerous sites. When there's a match, users can be warned before they continue," the company's site said. "Our link service will also be used to measure information like how many times a link has been clicked. Eventually, this information will become an important quality signal for our Resonance algorithm -- the way we determine if a Tweet is relevant and interesting."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 11/19/2020
New Proposed DNS Security Features Released
Kelly Jackson Higgins, Executive Editor at Dark Reading,  11/19/2020
How to Identify Cobalt Strike on Your Network
Zohar Buber, Security Analyst,  11/18/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-25159
PUBLISHED: 2020-11-24
499ES EtherNet/IP (ENIP) Adaptor Source Code is vulnerable to a stack-based buffer overflow, which may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition or code execution.
CVE-2020-25654
PUBLISHED: 2020-11-24
An ACL bypass flaw was found in pacemaker before 1.1.24-rc1 and 2.0.5-rc2. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went throu...
CVE-2020-28329
PUBLISHED: 2020-11-24
Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could use this password to access authenticated, administrative functions in the API. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19.
CVE-2020-29053
PUBLISHED: 2020-11-24
HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.
CVE-2020-25640
PUBLISHED: 2020-11-24
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.