• 
• 
• 
• 
• 
• 
• 

News

• Criminals make more use of malicious code
  New monthly survey to monitor malware.
• VoIP wiretapping could lead to more problems.
  Keeping spooks happy could cost a bundle.
• Microsoft drags feet on wireless
  WPA2 security finally up to speed.
• Secure IM service launched by MessageLabs
  Locking down company chit-chat.
• Microsoft readies business anti-virus product
  Another shot at corporate AV.
• Wormhole opened in Yahoo
  Under attack from malware creepy-crawly.
• Japanese firm in huge data leak
  Secrecy surrounds loss of personal information.
• One in 300 PCs affected by malware
  Microsoft reveals the bitter truth.

More news »

Insight

• How much does a wireless breach cost?New
  Figures are hard to come by, but WVE expert Chris Waters rounds up what's there.
• WLANs and monitors merge
  To make a really secure WLAN has needed a separate security overlay. Now those products are merging.
• Search engines serve up danger
  Menace lurks behind simple search terms such as "screensaver".

More »

How-To

• Beat the new wireless attacks
  What are the emerging types of wireless attacks and how can they be combated?
• Know your wireless enemy
  Defending your WLAN is a lot easier if you know how it can be attacked.
• How to blend WEP, WPA, and 802.11i
  Progress in Wi-Fi security leaves managers with a problem: how do you run older kit on newer, more secure networks?

More »

White Papers

• The Legal Guide to Employee Monitoring
• Securing portable storage
  The USB drive can be used to carry information securely if its carrier is comprehensively identified in a three factor way.
• The Rise of Greynets
  Greynets are everywhere - powerful network applications such as IM and P2P that aren't officially on the network.

More »

Briefings

• 802.11w security won't block DoS attacksNew
  The IEEE's next wireless security spec should keep management traffic under wraps - but DoS attacks will continue, says Joshua Wright.
• Network access quarantine control
  We explain the standard tools in Windows Server 2003 that will help you to keep infected remote and mobile PCs from damaging the rest of your network.
• Secure SIP protects VoIP traffic
  What you need to know about this security mechanism, which has been defined to make SIP more secure.

More »

	Windows Security Articles     Updated: Wednesday 14 June 22:50 UK Group Policy Changes in Vista In this article we will look at the new Group Policy features in Vista. SPIKE and BURP for real world computer security usage (Part 2) In this part two of the article series we will actually use an HTTP proxy and find out more on how you can use this very useful tool. Calamitous Cryptography: The Extortoise and the Haregretful Cryptovirology - cryptography's evil younger sibling. Let's look at how the intensity of this dark science feeds directly from the security of its older, defensive brother. Event Log/Monitoring Consolidation In most corporate organizations today there is a large array of computer network security devices deployed. All of these security tools produce voluminous amounts of output. What good is that output unless you can make use of it? How to Nest Users and Groups for Permissions In this article I will show you how to nest users and groups for permissions. More »

Blog: Write Once, Read Many

• For the love of lawsuits New
  Finjan bites its rival, Secure Computing.
• Suckered by "free" FTP software New
  Would you have fallen for this sales ploy?
• Why ditch Windows now? 
  CEO's interest in Mac has nothing to do with love of Apple.

More blog entries »

Reviews

• BlueSocket improves wireless gateway
  The veteran of Wi-Fi gateways has updated its controller. Does it keep the good points of the old one?
• Check Point VPN-1 UTM firewall
  This branch office firewall is clever in many respects but comes with a split personality that confused us.
• Linksys WTR54GS mobile wireless router
  Humans didn't crawl out of caves to stay tethered to them, now did they?
• Linksys WAG54GX2 ADSL MIMO router
  Another broadband networking box with MIMO WiFi. So how does one choose between them?
• Eli managed security appliance
  A low-cost managed security appliance should be out of the reach of small businesses. This particular product/service package challenges that assumption.

More reviews »

Interviews

• A patch off the old block
  We talk to Mark Shavlik, eponymous boss of Shavlik Technologies, about writing code for Microsoft, the evolution of patch management tools and their growth towards regulatory compliance.
• A patch in time saves nine
  Risk management should mean less patching for security and software, not more, argues Skybox's Edward Cooper.
• Tit for tat
  Everdream and Iron Mountain's DataDefense both have products and services to protect desktop PC and notebook data if the computer is lost or stolen. How do they compare?

More »

Case Studies

• World's largest Wi-Fi network uses Linux
  Schools in Victoria, Australia, get secure access through Linux, and some wrangling with Cisco
• hospital locks up wireless access points
  Security isn't enough with new regulations. You need logs to prove it, found one hospital witha wireless LAN.
• What customers want in this new year (part 2)
  Heightened communication, standards, disaster recovery and virtualisation are just a few of the areas IT managers are focused on as they chart their courses for the coming months.

More »

	Security Alerts   Updated: Wednesday 14 June 23:10 UK Fast Menu Restaurant Ordering Multiple Vulnerabilities luny has reported some vulnerabilities in Fast Menu Restaurant Ordering, which can be exploited by malicious people to conduct cross-site scripting attacks and SQL injection attacks. blur6ex "ID" Parameter SQL Injection Vulnerability rgod has reported a vulnerability in blue6ex, which can be exploited by malicious people to conduct SQL injection attacks. Car Classifieds "make_id" Cross-Site Scripting Vulnerability luny has reported a vulnerability in Car Classifieds, which can be exploited by malicious people to conduct cross-site scripting attacks. PhpMyFactures Multiple Vulnerabilities DarkFig has discovered some vulnerabilities in PhpMyFactures, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks, and to bypass certain security restrictions. Realty Home Rent "sel_menu" Cross-Site Scripting Vulnerability luny has reported a vulnerability in Realty Home Rent, which can be exploited by malicious people to conduct cross-site scripting attacks. Realty Room Rent "sel_menu" Cross-Site Scripting Vulnerability luny has reported a vulnerability in Realty Room Rent, which can be exploited by malicious people to conduct cross-site scripting attacks. more »