Brian Prince

If a laptop, CD or smart phone is stolen, encryption can be the difference between a data breach and a close call. With so much sensitive corporate and personal information at stake, a clear encryption strategy is a vital part of data protection. Step one for developing that strategy is to understand just what data […]

The buzz about the need for virtualization security products is getting louder, with several vendors showcasing approaches to securing virtual environments at the VMworld conference in Las Vegas. VMworld kicked off Sept. 15 alongside announcements from security players such as McAfee and smaller, virtualization-focused vendors like Catbird Networks. McAfee announced McAfee Total Protection for Virtualization, […]

Data Professionals See Salaries Rise Dollars and Sense and the Data AdminBeing a database professional is not easy, but it can pay well. So says a survey of 503 members of the Independent Oracle Users Group conducted by Unisphere Research. Those surveyed included database administrators and IT managers as well as database developers and analysts. […]

The alleged theft of trade secrets from Intel by a former employee offers yet another reminder of the importance of monitoring and controlling access to corporate data. According to reports, ex-Intel engineer Biswamohan Pani has been accused by the FBI of stealing trade secrets from Intel while he secretly worked for the company’s chief rival, […]

Talk of HTTPS cookie hijacking is pushing its way toward the front of the line of security concerns with the release of details regarding an automated tool dubbed the CookieMonster. The Python-based tool is the brainchild of reverse engineer Mike Perry, who spoke about HTTPS cookie hijacking at the Defcon 16 security conference in Las […]

The quickening adoption of software-as-a-service must be validating for a company like MessageLabs, which has had a software-as-a-service (SaaS) business model since its inception in 1999. But in a crowded space a company is only as good as its ability to differentiate itself, and to that end MessageLabs plans to expand its offerings and unify […]

Businesses are afraid of cyber-crime, and rightly so, as a survey of nearly 1,400 IT security professionals by Finjan found 25 percent admitted experiencing a security breach at their company. Another 42 percent could not rule out the possibility that their data had been breached. The statistics, contained in Finjan’s “Web Security Survey 2008” report, […]

IBM is making a play in the hardware encryption market with a new tool for securing server hard drives. The IBM System x ServeRAID-MR10is Vault adapter tool is a RAID controller with a built-in crypto-engine that encrypts data written to hard drives. IBM is aiming the product specifically at small and midsize businesses, which typically […]

Google has updated its Chrome browser to address some of the security vulnerabilities uncovered in the week-old beta. The update patches a buffer overflow vulnerability that exists in the handling of long file names that display in the -SaveAs’ dialog. The update also fixes a second buffer overflow vulnerability in the handling link targets displayed […]

Microsoft released four “critical” security bulletins for September’s Patch Tuesday, including a massive update for Microsoft Windows GDI+ that affects multiple products. All four bulletins address vulnerabilities that permit hackers to remotely execute code. Of the four, the GDI+ bulletin is the largest. GDI+ is a graphics device interface that provides two-dimensional vector graphics, imaging […]

The nonprofit Center for Internet Security plans to release a set of IT security metrics soon based on input from more than 80 security experts from government, business and academia. The CIS metrics are meant to help organizations determine their security posture using a consensus-based measuring stick. In general, the initial set of outcome and […]

Trend Micro has bundled together some of its messaging security products to bolster enterprise defenses using its cloud-based Smart Protection Network. Dubbed Trend Micro Communication & Collaboration Security, the suite consists of four products-Trend Micro IM Security for Microsoft Office Communications Server, Trend Micro ScanMail for Microsoft Exchange, Trend Micro PortalProtect for Microsoft SharePoint and […]