Brian Prince

In a bid to unify database performance management, CA on April 16 introduced an advanced analysis and diagnostic tool for its database management product. Dubbed CA Insight Database Performance Monitor for Distributed Databases, the performance analysis tool allows administrators to monitor both the real-time and historical performance of all an enterprises databases from a single […]

Microsoft is investigating attacks exploiting a vulnerability in the Windows Server Domain Name System Service, as well as two types of hacks targeting Vistas OEM BIOS activation feature. A company spokesperson said a very limited number of attacks exploiting the flaw in the Windows Server DNS Service have been seen in the wild. “Our investigation […]

A House committee gave the federal government a grade of C-minus for 2006 as part of the committees annual assessment of how well information is protected on government computers. The annual report by the House Government Oversight and Reform Committee is meant to judge compliance with the Federal Information Security Management Act. The committee has […]

IT organizations are being urged to deploy a patch for a bug affecting how Microsoft Windows handles animated cursors as spammers step up their efforts to exploit the flaw—this time with a promise of lewd pictures of celebrity hotel heiress Paris Hilton. The spammed e-mail messages have subject lines such as “Hot pictures of Paris […]

Oracle plans to release patches to plug 37 security holes in its products next week, according to a preview of the upcoming Critical Patch Update released April 10. The update will be made available April 17 and will include 13 security fixes for Oracle Database, two for Oracle Enterprise Manager, and one each for Oracle […]

Microsoft says a preliminary investigation into reports of vulnerabilities in its Office 2007 suite has produced no evidence of a threat to users. Reports of new security holes in MS Office have been made public on known exploit sites, including information about four bugs posted on one site. Microsoft has not released specific information about […]

Symantec has patched a security hole in its Enterprise Security Manager tool that allows attackers to take control of infected machines. The Cupertino, Calif., company cautioned users in an advisory that all versions of ESM, except version 6.5.3, are vulnerable to a remote code execution attack. The problem, officials at the anti-virus vendor reported, is […]

Microsoft is investigating public reports of vulnerabilities in Microsoft Office. Reports of several new security holes in Microsoft Office have been made public on known exploit sites. The company did not release specific information about the vulnerabilities, citing potential risk to users. “Microsoft is not aware of any attacks attempting to use the reported vulnerability […]

Patch Tuesday has arrived, and brought with it patches for a number of security vulnerabilities rated “critical” by Microsoft. The four updates considered critical deal with remote code execution vulnerabilities in Microsoft Agent, the Universal Plug and Play service, Content Management Server and the Windows Client/Server Run-time Subsystem (CSRSS). A fifth update is rated “important” […]

Microsoft has issued a hotfix for users of Windows XP SP2 experiencing problems with third-party programs. Last Tuesdays out-of-cycle MS07-017 update was Microsofts answer to a number of vulnerabilities, including the Windows ANI bug. But with those fixes apparently caused problems for users of ElsterFormular, a German tax calculator; the Realtek HD Audio Control Panel; […]

Forrester Research analysts are urging corporations to prepare for a shift in the Network Access Control market in the years to come, as NAC vendors move toward new software-based tools that leverage endpoint technology to proactively manage risk. In a report titled “Client Management 2.0,” Forrester analysts Natalie Lambert and Robert Whiteley forecast the death […]

Some 46,000 University of California, San Francisco, students, faculty and staff are being cautioned to stay on the lookout for identity theft after the school reported a possible data breach. In late March, UCSF determined that there may have been unauthorized electronic access to a UCSF computer file server located at the University of California […]