Security

Thu, March 01, 2007 - Microsoft and some industry partners are promoting a new certification process designed to make it harder for phishers to spoof websites. The plan gives third-party certification authorities like VeriSign and Entrust more stringent guidelines for authenticating websites. A resulting new seal of approval, an Extended Validation Secure Sockets Layer (EV SSL) certificate, may reassure consumers that they are handing information ...

Thu, March 01, 2007 - Everyone complains about information security, but no one does anything about it. However, if breaches begin to exact a financial penalty, that surely will change.

Thu, March 01, 2007 - The Open Web Application Security Project Foundation makes a list of the top Web application vulnerabilities and what to do about them. Here are five of the most common.

Thu, March 01, 2007 - Security managers have to keep their cool and clearly communicate with chief information officers (CIOs) during a crisis affecting company networks, a top security official with Microsoft said Wednesday.Otherwise, trying to educate CIOs in a panic mode will complicate how an attack is countered, said Greg Galford, Microsoft security architect, who gave a presentation at the EuSecWest 2007 security conference ...

Thu, March 01, 2007 - Developers are more focused on making software work than on making it secure. This is not a criticism; it’s just a fact of life. It's what you do with that information that makes the difference for your business.

Mon, February 26, 2007 - Google’s PC search software is vulnerable to a variation on a little-known Web-based attack called anti-DNS pinning, which could give an attacker access to any data indexed by Google Desktop, security researchers said this week.This is the second security problem reported this week for the software. On Wednesday, researchers at Watchfire said they’d found a flaw that could allow attackers ...

Fri, February 23, 2007 - Researchers at Toshiba have developed a method that they say makes it possible—barring a change in the laws of physics—to absolutely secure distribution of encryption keys across a network.Their system, which was unveiled at this week’s NanoTech 2007 exhibition in Tokyo, builds on quantum key distribution, which has been the subject for research and development work for some time because ...

Thu, February 22, 2007 - Increased timespan of breach could expose millions more.

Thu, February 22, 2007 - Security researchers have discovered a serious flaw in Google’s desktop software that could be used to wreak havoc on a victim’s computer.The bug, which was made public Wednesday by Watchfire, has now been fixed. While Google is automatically delivering a patch, Google Desktop users who want to be sure they are running the latest version of the software can

Tue, February 20, 2007 - Microsoft said it moved quickly to remove a banner advertisement that appeared on its instant-messaging program for a questionable software program.