Brian Prince

The honeymoon may soon be over for any retailers that have not extended attention to the Payment Card Industry Data Security Standard to their virtual environments. VMware announced today it has joined the PCI Security Standards Council in a bid to include specifics related to virtualization into the Payment Card Industry Data Security Standard (PCI […]

A Web hosting firm reportedly responsible for hosting roughly 75 percent of the world’s spam went offline Nov. 11 after its primary Internet providers cut the company off. According to the ‘Security Fix’ blog in the Washington Post, McColo’s two main ISPs, Global Crossing and Hurricane Electric, terminated service after getting reports from Security Fix […]

The Anti-Malware Testing Standards Organization has published a set of best practices and guiding principles for testing security software. Call it a much-needed first step. The group published two documents on its Web site, setting the foundation for the uniform testing regime the security industry needs. Both documents are the fruits of discussions by more […]

In a relatively quiet Patch Tuesday, Microsoft has plugged critical security holes in Microsoft XML Core Services as well as an old vulnerability affecting the Server Message Block Protocol. The bulletin for XML Core Services, the more urgent of the two, addresses issues in XML Core Services versions 3.0, 4.0, 5.0 and 6.0 that exist […]

New research offers a peak into the state of security of domain name server security – and it’s not all pleasing to the eye. In an annual study of domain name servers (DNS) connected to the Internet by The Measurement Factory, it was uncovered that roughly one in four DNS servers does not perform source […]

Hackers have painted a bull’s-eye on an Adobe Reader flaw patched by the company earlier this week. The attackers are targeting a vulnerability in Adobe Reader 8.1.2 uncovered by Core Security Technologies. According to an advisory from the SANS Institute’s Internet Storm Center, attackers are using malicious PDF files toexploit the bug, which Adobe Systems […]

Security researcher Stephan Chenette has reincarnated an old attack vector, giving it a new twist and a new name. Chenette, manager of security research at Websense, has dubbed the new attack vector “script fragmentation” and will be making a presentation on it next week at the PacSec Applied Security Conference in Japan. Though he was […]

Barracuda Networks is biting into the data backup business with the acquisition of BitLeap, a provider of local and offsite disaster recovery solutions. As part of the acquisition, Barracuda Networks will now offer Barracuda Backup, a complete and affordable data backup and disaster recovery solution, to customers of all sizes and business types. The offering […]

Microsoft is preparing for a relatively quiet Patch Tuesday Nov. 11, with just two security bulletins on the menu. Little information was made available Nov. 6 via the company’s Advance Notification. However, Microsoft rated one of the bulletins “critical.” That bulletin addresses at least one remote code execution vulnerability in various versions of Microsoft Vista, […]

A day after the national election, both President-elect Barack Obama and Republican presidential candidate John McCain are in the middle of cyber-crime news. According to a Newsweek report, the FBI believes both men had their campaigns hacked by a “foreign entity.” After technology staff at Obama headquarters detected what they thought was a phishing attack […]

UPDATE: Adobe has patched a critical flaw in its Adobe Reader PDF-file browsing software that could allow hackers to take control of a compromised system. Researchers at Core Security Technologies found the vulnerability in Adobe Reader 8.1.2, but believe earlier versions may be affected as well. The flaw lies in the way Adobe Reader implements […]

Sybase has bundled together a set of services and software to help enterprises perform continuous loading of data into Sybase IQ in real time. Sybase is calling the new offering the Sybase IQ Real-Time Loading Solution. It consists of PowerDesigner, Sybase ASE, Replication Server and a 10-day engagement with Sybase Professional Services, all available for […]