CA has made a deal to snag Eurekify in a bid to deepen CA’s abilities in role-based identity and compliance management. The terms of the deal were not disclosed, but the purchase is the culmination of several months of collaboration on the integration and sale of Eurekify technology as part of the larger CA Security […]
Web security vendors Marshal and 8e6 Technologies have joined forces. Officials at both companies announced Nov. 12 they agreed to form Marshal8e6. The move brings together the companies’ respective expertise in e-mail and Web gateway security, helping the new company compete against larger security vendors playing in both areas. According to the Gartner Magic Quadrant […]
The honeymoon may soon be over for any retailers that have not extended attention to the Payment Card Industry Data Security Standard to their virtual environments. VMware announced today it has joined the PCI Security Standards Council in a bid to include specifics related to virtualization into the Payment Card Industry Data Security Standard (PCI […]
A Web hosting firm reportedly responsible for hosting roughly 75 percent of the world’s spam went offline Nov. 11 after its primary Internet providers cut the company off. According to the ‘Security Fix’ blog in the Washington Post, McColo’s two main ISPs, Global Crossing and Hurricane Electric, terminated service after getting reports from Security Fix […]
The Anti-Malware Testing Standards Organization has published a set of best practices and guiding principles for testing security software. Call it a much-needed first step. The group published two documents on its Web site, setting the foundation for the uniform testing regime the security industry needs. Both documents are the fruits of discussions by more […]
In a relatively quiet Patch Tuesday, Microsoft has plugged critical security holes in Microsoft XML Core Services as well as an old vulnerability affecting the Server Message Block Protocol. The bulletin for XML Core Services, the more urgent of the two, addresses issues in XML Core Services versions 3.0, 4.0, 5.0 and 6.0 that exist […]
New research offers a peak into the state of security of domain name server security – and it’s not all pleasing to the eye. In an annual study of domain name servers (DNS) connected to the Internet by The Measurement Factory, it was uncovered that roughly one in four DNS servers does not perform source […]
Hackers have painted a bull’s-eye on an Adobe Reader flaw patched by the company earlier this week. The attackers are targeting a vulnerability in Adobe Reader 8.1.2 uncovered by Core Security Technologies. According to an advisory from the SANS Institute’s Internet Storm Center, attackers are using malicious PDF files toexploit the bug, which Adobe Systems […]
Security researcher Stephan Chenette has reincarnated an old attack vector, giving it a new twist and a new name. Chenette, manager of security research at Websense, has dubbed the new attack vector “script fragmentation” and will be making a presentation on it next week at the PacSec Applied Security Conference in Japan. Though he was […]
Barracuda Networks is biting into the data backup business with the acquisition of BitLeap, a provider of local and offsite disaster recovery solutions. As part of the acquisition, Barracuda Networks will now offer Barracuda Backup, a complete and affordable data backup and disaster recovery solution, to customers of all sizes and business types. The offering […]