Security, Security, More Security

By Nancy Weil

Fri, August 01, 2008 — IDG News Service —

Security news dominated this week, and that will undoubtedly be the case next week as well, with the Black Hat and Defcon conferences under way in Las Vegas. In other news, Yahoo shareholders met Friday for their annual meeting, with fewer fireworks than expected.

1. DNS patches cause problems, developers admit: Patches for the DNS (Domain Name System) vulnerability that has generated so much buzz have led to performance problems for servers running BIND (Berkeley Internet Name Domain) software. BIND is the most popular DNS software. Administrators shouldn't roll back the patch released July 8, said Paul Vixie, head of the Internet Systems Consortium, which oversees BIND. "The vulnerability is of more concern than a slow server," he said. An updated patch is in the offing. Meanwhile, hackers are actively exploiting the DNS vulnerability, and ...

2. Apple finally patches dangerous DNS flaw and Opinion: Apple's unforgivable DNS delay: Apple issued a patch -- finally -- for its implementation of the BIND server software in various Mac OS releases. The delay in the patch release has caused considerable consternation among Mac fans.

3. A photo that can steal your online credentials and Black Hat/Defcon: Welcome to the funhouse: Among other things, researchers at Black Hat next week will demonstrate software they've developed that can circumvent security and take over accounts on popular sites such as Facebook, Google and eBay. The malicious software looks like image files to Web servers. The researchers will leave out details of how the attack works so that it won't be immediately used. We expect a lot of news out of Black Hat and Defcon, both in Las Vegas next week.

4. After facing shareholders, Yang must fulfill promises and Yahoo on defensive at shareholder meeting: Yahoo CEO Jerry Yang has made a lot of promises about how he's going to get Yahoo back in its financial and technology grooves. Shareholders at Friday's annual meeting served up some criticism, and one even suggested that Chairman Roy Bostock "do the honorable thing" and quit, but the get-together overall wasn't as heated as had been expected. Even so, with Microsoft's attempts to buy all or part of Yahoo now presumably behind the company, and having made peace with investor Carl Icahn, Yang and other company leaders will be expected to deliver.

5. FBI warns of new Storm worm attacks: The U.S. Federal Bureau of Investigation has warned that spam e-mails making the rounds on the Internet are spreading the dreaded Storm worm. Watch out for e-mail containing the phrase "F.B.I. vs. Facebook" and don't click on links in unsolicited e-mail, especially when you don't know the sender.


Loading...
Network MarketSpace
Thinking About Deploying Mobile Broadband?
Explore lessons and best practices experienced by companies that have deployed mobile broadband to their workforce. Learn more »
Increase Application Performance and User Experience
This research shifts the attention from basic load-balancing features to application delivery features. Learn more »
Gartner Magic Quadrant, Application Delivery Controllers 2009
The market for products to improve the delivery of application software over networks remains dynamic. Learn more »
McAfee's Network Security Platform IPS
McAfee's Network Security Platform IPS; the costs, benefits, flexibility, and risk elements. Learn more »
The Cost of SQL Sprawl
Learn how a new approach to SQL server consolidation can reduce server counts by 50%, lower maintenance costs by 70% and reduce administration time by 75%. Learn more »
A Bottleneck-free Infrastructure
Storage bottlenecks have a significant impact on performance and productivity. Learn more »
Application Delivery Despite Emerging Challenges
IT organizations need to choose appropriate application delivery solutions that can scale to support the emerging challenges. Learn more »
 
SPONSORED LINKS
 

ROI of Application Delivery Controllers

Upgrading to VMware vSphere with vWire

Maximizing website Return on Information with high-quality search

See how AT&T can help protect your network.

Webcast: Unleashing the Power of Customer Data

White Paper: Improve Agility with Operational Responsiveness

White Paper: Legacy Tools: Not Built for the Helpdesk

Taking a Seat at the Executive Table: The Reality of Virtualization

White Paper: Next Generation Remote Infrastructure Management

Keeping Your Members Safe from Online Scams and Predators

The Total Economic Impact of Network Security Intrusion Prevention

Generation Remote Infrastructure Management - Changing the Paradigm

Cloud-Based Email Management: Opinion Shifts In Favor

eBook: How Can You Make Your People Productive Anywhere?

Achieving Business Agility with Application Grid

Ready to virtualize tier one applications? Check your virtualization maturity.

Seven Ways ITIL Can Help You in an Economic Downturn

Tips for successful virtualization management.

AT&T Synaptic Storage as a Service. Expand on demand

Trend Micro ranked #1 against real-world malware. Read more.

Webinar: Jump-start your in-house e-discovery with Ringtail QuickCull from FTI Technology

Streamline IT Costs. Boost Performance with WAN Optimization.

Build your 1st app FREE with Force.com

TDWI checklist helps define data readiness for analytics. Download report.

eZine: A Roadmap to Reducing IT Complexity

Gartner Magic Quadrant, Application Delivery Controllers 2009

Return on Information: Google Enterprise Search pays you back

Cut Costs & Green Your IT Operations with PC Power Management

White Paper: 4 Customer Service Myths

White Paper: Managed Security for a Not-So-Secure World

White Paper: 5 Best Practices for Smartphone Support

Global Research: CIOs Weigh In On Virtualization

5 Key Virtualization Management Challenges

Secure Email and Web-Based Communication from Evolving Attacks

WagerWorks Takes Fraudsters Out of the Game using iovation

Seven Design Requirements for Web 2.0 Threat Protection

Increase UPS efficiency without sacrificing protection.

Learn how advanced forecasting tools can deliver significant business results for global corporations.

Lower IT Costs with Oracle Database 11g Release 2

White Paper: Visibility and the New Normal of Mobile Work

Taking the Service Desk to the Next Level

Learn about The Information Technology Infrastructure Library.

Return on Information: Google Enterprise Search pays you back. Get the facts.

VMware. The source for Business Infrastructure Virtualization.

ShoreTel tells businesses to untangle from competitors' complexity and turn to its brilliantly simple UC solution

Top Five CIO Challenges

Read the RSA report: Security for Business Innovation

64-page prescriptive guide to security, compliance, and IT operations.

A Clear View Toward Virtualization

Virtualization Technology as a Business Solution

 
 
RESOURCE CENTER