Dennis Fisher

In a major milestone in the maturation process for security event management technologies, a small vendor will unveil the first dedicated SEM appliance. High Tower Software Inc.s TowerView box incorporates the companys SEM software, which includes a unique correlation and visualization feature that presents security events in three dimensions. As technologies such as firewalls and […]

A portion of source code from Windows NT 4.0 and Windows 2000 made its way onto the Internet Thursday, sending shockwaves throughout the industry over the potential harm that could be inflicted if the code were to land in the wrong hands and leading to internal and external investigations by Microsoft Corp. The sections of […]

Microsoft Corp. officials confirmed late Thursday that a portion of the source code for Windows NT and Windows 2000 has been posted on the Internet. The company said it did not believe the posting was the result of a security breach, which means that it is likely that someone who had a legitimate copy of […]

Every day in the security world brings something unexpected, and the appearance Wednesday of Doomjuice.B certainly fits that bill. The worm is a variant of Doomjuice.A, which first appeared Monday and is a variant of MyDoom.A. Experts said the new worm one of the few known cases of a variant threat spawning a variant. Like […]

In an effort to batten down its operating system, Sun Microsystems Inc. this week will unveil a sweeping set of security enhancements to Solaris, as well as new managed security services. The moves, which include a rewriting of parts of the Solaris kernel as well as a major partnership with VeriSign Inc., are in large […]

Microsoft on Tuesday warned of a serious security vulnerability in all of the current versions of Windows that not only allows an attacker to run code on vulnerable machines, but also enables him to install software and change and delete data. The vulnerability is covered in Microsoft Security Bulletin MS04-007. The problem, which lies in […]

A new version of the MyDoom worm appears to be circulating on the Internet and may be responsible for some disruptions to Microsoft Corp.s Web site Sunday night and Monday morning, researchers said. When its executed, the new variant, called MyDoom.C, or Doomjuice, begins scanning for machines listening on TCP port 3127. When it finds […]

In another sign that the security market—and technology sector in general—is on the rebound, Juniper Networks Inc. on Monday agreed to acquire security appliance maker NetScreen Technologies Inc. for $4 billion in stock. The purchase price is a premium of more than 50 percent for NetScreens shareholders. The companys stock was trading at $26.40 at […]

Check Point Software Technologies Ltd. on Wednesday released a fix for a set of severe security vulnerabilities in its FireWall-1 product that enable attackers to execute commands on the vulnerable server. The problems are a group of format string flaws that appears when FireWall-1 attempts to validate HTTP requests, according to analysts at Internet Security […]

Microsoft Corp.s main Web site on Tuesday showed no ill effects from the scheduled denial-of-service attack generated by computers infected by the MyDoom.B virus. Machines infected by the less-common of the two MyDoom viruses are programmed to begin flooding Microsofts site with HTTP GET requests today, and to continue doing so through March 1. However, […]

After years of success deploying more effective and smarter defenses, anti-virus researchers contacted last week in the wake of the MyDoom outbreak acknowledged for one of the first times that the battle may be getting away from them. The MyDoom virus, which hit Jan. 26 and infected several-hundred-thousand machines, is the fastest-spreading virus in the […]

Microsoft Corp. on Monday finally released a patch for a dangerous vulnerability that lets attackers trick Internet users into visiting malicious sites. The flaw has been public knowledge for some time, but Microsoft failed to include a fix for it with Januarys scheduled patch releases. The vulnerability has to do with the way IE parses […]