Newsletter Archive: 2005
The Fake McAfee Patch
The hacker hit parade continues as phisherman launched their most recent attack, namely in the form of a fake McAfee patch. This isn't the first time hackers have taken seemingly legitimate names and attached various cyber-criminal activities too them. McAfee is just the latest.
http://www.enterprisesecuritynews.com/2005/1215.html
12.15.05
How Effective is Your AV in Detecting Spyware?
Your antivirus software will protect your organization against viruses and it will probably even do a good job against worms, but what about keyloggers, backdoor trojans, adware and spyware?
http://www.enterprisesecuritynews.com/2005/1213.html
12.13.05
Spyware, EULAs And AntiSpyware Companies
One big issue working through the Internet world right is the limitations of End User License Agreements (EULA). The issue is part of the battle with Sony BMG and their rootkit problems and a number of companies who produce products used as adware or spyware are fighting with antispyware companies for listing them.
http://www.enterprisesecuritynews.com/2005/1114.html
11.14.05
Microsoft's November Security Bulletin: Friend Or Foe?
Microsoft sent out their new critical patch on Tuesday and it was loaded with major fixes, 3 to be specific. While this Tuesday patch has become a regular event with Microsoft, their most recent releases haven't been all that successful. In some cases, they've done as much damage as they've corrected. Is the November patch going to be more of the same?
http://www.enterprisesecuritynews.com/2005/1110.html
11.10.05
Neural Networking Against Online Fraud
PassMark announced their new version 2.0 of their Two-Factor Two-Way Authentication system. The package is designed to give financial institutions and their customers protection against phishing, spoofing, keyboard logging and other attacks.

http://www.enterprisesecuritynews.com/2005/1013.html
10.13.05
SpreadFirefox.com Hacked Again
The evangelist site for the Firefox browser has been attacked again and will be offline through October. MozillaZine reports that an unpatched vulnerability in the TWiki software was exploited by remote attackers. Only Spread Firefox was affected; no other Mozilla sites were impacted by the attack...
http://www.enterprisesecuritynews.com/2005/1005.html
10.05.05
Bugging Out Firefox
Last week, Mozilla and Netscape became aware of a vulnerability in their browsers regarding IDNs. This marks multiple problems with IDNs the browsers have had and this seems to have been a real problem for the organizations.

http://www.enterprisesecuritynews.com/2005/0916.html
09.16.05
Most People Unaware Of IM Threats
IMLogic recently conducted a survey of 1,100 enterprise instant message users, and found that most people unknowingly expose their computers and company networks to security threats.

http://www.enterprisesecuritynews.com/2005/0914.html
09.14.05
Lots Of Mytob, But Netsky Still Tops
Just as millions of people traveled on vacation in August, so did the Mytob worm variants to PCs worldwide.

http://www.enterprisesecuritynews.com/2005/0902.html
09.02.05
Lockheed Martin Securing NYC MTA
A $212 million USD contract will see the defense contractor conduct a massive upgrade of the electronic security operations in place. Thousands of people utilize the Metro Transportation Authority's transit systems every day.

http://www.enterprisesecuritynews.com/2005/0824.html
08.24.05
Get Control Of Endpoint Security
While you're on a business trip, you use the hotel or conference room wireless network to check news and request an upgrade. A hacker exploits a new and un-patched operating system vulnerability to install a rootkit (a virtually undetectable infection).

http://www.enterprisesecuritynews.com/2005/0822.html
08.22.05
Apple Re-releases Security Update
A security update released for Mac OS X earlier in the week broke the functionality of 64-bit applications.

http://www.enterprisesecuritynews.com/2005/0819.html
08.19.05
Zotob Zeroes In On Plug And Play Flaw
Criminal hackers have begun trying to do to a Microsoft plug and play vulnerability what Sasser did to systems worldwide. This one doesn't spread through email; instead the Zotob worms target a vulnerability in the Windows operating system and can...

http://www.enterprisesecuritynews.com/2005/0815.html
08.15.05
Message Board Security Problems
Security leaks can be a big problem for any site using a message board. Hackers can actually use your message board to go in and change things on your site. This has happened to me at least four times. Once an iframe was added to every single page of one of my very large sites.

http://www.enterprisesecuritynews.com/2005/0720.html
07.20.05
Look, Up In The Web, It's SuperWorm!
Mytob variant bearing gifts of adware and spyware may begin making the rounds of good and bad computers everywhere. As security researchers watch more variants of the Mytob worm circulate, indications have been that the variants are pieces of a greater whole.

http://www.enterprisesecuritynews.com/2005/0615.html
06.15.05
Identity Theft: Count The Ways
I received an e-mail message from "Paypal" not too long ago. The e-mail stated that PayPal needed me to update and verify my security information for their database. I didn't. One of the sentences in the e-mail read: "Complete the necessary verification tasks within 5 days, or your account might get temporarily suspended."

http://www.enterprisesecuritynews.com/2005/0608.html
06.08.05
Cookies And PIE - An Introduction To Flash Security
Web-enabled consumers are tossing their cookies in greater numbers; and although this phenomenon is related to the stomach-churning activities of some Internet marketers and their offerings, it has more to do with taking back control of their Web browsing, and less to do with violent physiological reactions to bad snack food.

http://www.enterprisesecuritynews.com/2005/0606.html
06.06.05
Webcast Invitation: Security for your Enterprise
Many organizations are legally bound by legislation to protect the privacy and security of personally identifiable information, and if hackers can get at this sensitive information, run the risk of not being in compliance.

http://www.enterprisesecuritynews.com/2005/0601.html
06.01.05
Flip The Switch: Your PC Can Now Better Protect Itself
Your computer is full of confidential data, hard work, and critical information. Hackers, thieves and scammers are itchy to get their fingers into this treasure trove.

http://www.enterprisesecuritynews.com/2005/0517.html
05.17.05
Instant Messaging – Expressway For Identity Theft, Trojan Horses, Viruses, And Worms
Never before with Instant Messaging (IM) has a more vital warning been needed for current and potential IM buddies who chat online. John Sakoda of IMlogic CTO and Vice President of Products stated that,

http://www.enterprisesecuritynews.com/2005/0420.html
04.20.05
The Power Of 1
When you travel through an airport, you encounter an integrated security system. Most obvious are the security agents who check your bag for weapons before you enter the gate area.

http://www.enterprisesecuritynews.com/2005/0413.html
04.13.05
Business Technology Guide | SME Spyware infiltrates the enterprise
Desktops littered with pop-up ads, computers grinding to a halt under the weight of snoopy software, private data snatched off networks and sent to a server somewhere in Siberia or San Francisco… all these unfortunate occurrences can be attributed to spyware...

http://www.enterprisesecuritynews.com/2005/0406.html
04.06.05
Businesses Failing To Take Basic Wi-Fi Security Precautions
The lack of security in wireless networks represents a serious threat to businesses that have not taken measures to protect themselves against those who can easily tap into the Wi-Fi systems being deployed in private and public locations.

http://www.enterprisesecuritynews.com/2005/0316.html
03.16.05
TippingPoint Starts VOIP Security Alliance
TippingPoint has established a VOIP Security Alliance in conjunction with VoIP vendors, providers, security researchers, and thought leaders to discover and reduce VoIP security risks.

http://www.enterprisesecuritynews.com/2005/0216.html
02.16.05
Network Security And Cisco SAFE
While implementing a functional network design that meets an organization's business and technical goals is critical, it is imperative that the design is properly secured.

http://www.enterprisesecuritynews.com/2005/0201.html
02.01.05