Brian Prince

IT Security Is Dead- IT Security Is Dead- IT Security Is Dead- IT Security Is Dead- IT Security Is Dead- IT Security Is Dead- IT Security Is Dead- IT Security Is Dead- IT Security Is Dead- IT Security Is Dead- IT Security Is Dead- Worst Data Breaches EverThe Most Poisonous BugsEight Top Security ConcernsThe Security […]

Google expanded its efforts to secure users of its search engine following a McAfee-Yahoo partnership to do the same for Yahoo users. Google quietly launched the Safe Browsing Diagnostic Page to help Web masters by answering four questions: the current listing of the site what happened when Google visited the site whether it is hosting […]

If the experiences of some certificate authorities are any indication, fallout from a vulnerability affecting Debian-based encryption keys has not rippled out as far among enterprises as some have feared-yet. Some CAs issuing replacement certificates free of charge to enterprises affected by the flaw reported that enterprises have not jumped at their offers for a […]

Patches for three publicly disclosed bugs affecting Apple’s iCal application have yet to become a reality. The bugs are related to the improper sanitizing of certain fields of iCal calendar files, and can be exploited to launch denial-of-service attacks or to take over vulnerable machines. The vulnerabilities were uncovered in January by researchers from Core […]

Researchers at Core Security Technologies have uncovered three vulnerabilities in Apple’s iCal application that hackers can exploit to take over vulnerable machines or launch denial-of-service attacks. According to an advisory from Core, the most serious of the bugs is the result of a memory corruption vulnerability that can be triggered if a user runs a […]

Three years after its founding, Aster Data Systems has emerged from stealth mode with an Internet-scale, massively parallel processing database and a well-known customer-MySpace. Dubbed Aster nCluster, the product is aimed at overcoming the price and performance challenges of large-scale data warehouses. At the core of the nCluster architecture are algorithms and processes that control […]

IBM is pushing interoperability as a solution to enterprise identity management and authentication woes. In Version 6.2 of IBM Tivoli Federated Identity Manager, the company has integrated a number of user-focused identity management technologies and frameworks, including OpenID, Microsoft Windows CardSpace and the Eclipse Higgins identity framework. In addition, the software now supports a wide […]

Ingres has bowed to the wishes of its partners by providing an open-source version of its OpenRoad rapid application development platform as a free download, company officials said. OpenRoad is used by developers to build and deploy high-performance and high-availability business applications on a variety of platforms. With this move, the company is open-sourcing the […]

In 2006, five security, systems and networking experts with a combined 40-plus years of experience at Cisco Systems formed a network security startup and took aim at the access management market. Now, two years later, that startup-Rohati Systems-has stepped out of the shadows with a high-speed appliance that relies on user entitlements to control access […]

Enterprises may face an uphill battle to address the fallout from a recently disclosed vulnerability affecting Debian-based Linux distributions that allows hackers to brute-force their way past encryption. The flaw, which was reported May 13 by the Debian Project, rests in the random number generator, which is used to produce cryptographic keys. The vulnerability allows […]

Orphaned accounts are leaving a hole in enterprise security many companies are leaving unplugged. A new study by eMedia USA, commissioned by identity management vendor Symark, found that 27 percent of respondents had more than 20 orphaned accounts currently within their organization. More alarming, more than 38 percent of respondents said they had no way […]

The beta version of Yahoo’s SearchScan security feature has come under fire for false positives and other mistakes. SearchScan is the result of a partnership between McAfee and Yahoo to improve the security of Web searches. The feature, powered by McAfee’s SiteAdvisor, alerts users when sites contain spam, spyware, adware or other malicious software that […]