Brian Prince

Microsoft announced plans today to add new protection to block tracking in the upcoming version of Internet Explorer. In IE9, Microsoft plans to implement a TPL (Tracking Protection List), following up on a “Do Not Track” proposal being pushed by the Federal Trade Commission. Last week, the commission released a report backing the creation of […]

A lot is written about protecting the network and safeguarding endpoints, but what about digital copiers? A new brochure from the Federal Trade Commission released Dec. 3 includes tips for businesses on protecting sensitive information stored on the hard drives of digital copiers. Here are some of the tips: • Before acquiring a copier, plan […]

Researchers at the University of California, San Diego, have shined a light on the way some popular Websites sniff browser histories to track user activity. In a paper titled “An Empirical Study of Privacy-Violating Information Flows in JavaScript Web Applications” (PDF), the group detailed their analysis of Alexa’s global top 50,000 Websites, which they performed […]

Juniper Networks announced today it has bought virtual security vendor Altor Networks for $95 million. The acquisition builds on an existing relationship between the two companies, and Juniper actually invested in the company earlier this year. Founded in 2007, Altor specializes in intrusion prevention, firewall and monitoring for virtual environments. With the purchase, Juniper seeks […]

The saga that is the WikiLeaks controversy dominated security news this past week as governments around the world dealt with the fallout from the breach and the site dealt with denial-of-service attacks. WikiLeaks’ posting of more than 250,000 diplomatic cables online for many highlighted insider security and forced a re-examination of security policies by the […]

Google patched 13 security flaws in the latest release of its Chrome browser. The flaws ran the gamut from a possible pop-up blocker bypass to a use-after-free vulnerability with SVG animations that is considered by Google to be high risk. All totaled, the new release includes 800 bugs and stability improvements. In addition to the […]

BMC Software announced Dec. 3 it acquired database automation specialist GridApp Systems in a bid to extend its system management portfolio to the database layer. Founded in 2002, GridApp focuses on automating database provisioning, patching and administration. The GridApp solution is already integrated with BMC BladeLogic Server Automation, and cuts cost, complexity and risk associated […]

A new report by Forrester Research predicts the network access control (NAC) market will increasingly shift to a new model called “layered access control.” In “Network Access Control Predictions: 2011 And Beyond,” the analyst firm describes a future where NAC encompasses not only the network, but also applications and mobile device access control. “Corporate may […]

Failing to protect laptops with a mix of technology and policy can be costly, and a new survey showed just how much. The survey, dubbed “The Billion Dollar Lost-Laptop Study,” was conducted by Intel and the Ponemon Institute and fielded input from 329 public and private organizations. During the past 12 months, those respondents collectively […]

A survey of critical infrastructure companies by Enterprise Strategy Group reported that the companies with the most industry regulations to address tended to have better security practices, something that did not strike me as all that surprising. What did strike me as somewhat surprising, though, is some of the things people agreed the government should […]

The main distribution server of the open-source ProFTPD Project was compromised in an attack that enabled whoever was behind it to upload and distribute a malicious version of ProFTPD software. The ProFTPD Project develops file transfer protocol (FTP) server software. According to the project team, the compromise occurred Nov. 28, and went undetected until Dec. […]

The FBI has linked a 23-year-old Russian man to the notorious Mega-D botnet, which once was responsible for one-third of the world’s spam. According to federal authorities, Oleg Nikolaenko was paid hundreds of thousands of dollars to use Mega-D to spam out e-mails for a crew of criminals specializing in the sale of fake goods. […]