Dennis Fisher

Microsoft Corp. has issued a patch for the first serious vulnerability to be found in the Windows Server 2003 software, which company officials have said is their most secure OS yet. Although this is actually the fourth flaw to affect Windows 2003, it is the first one to be rated critical. The others were rated […]

Network Associates Inc. on Wednesday reported earnings of $1.1 million, or $0.01 per share, as the company continues to reshape itself and recover from a financial scandal. The results represent a substantial decline from the same period last year, when NAI earned $21.2 million, or $0.14 per share, on revenue of $232.9 million. Revenue for […]

Former White House cyber-security czar Richard Clarke ripped his former employer Tuesday, saying that the government is doing an unacceptable job of helping the private sector lock down the nations critical infrastructure. Speaking at a press conference called to announce a new private alliance of technology companies concerned with security, Clarke took the Department of […]

Microsoft Corp. last week issued patches for three flaws in various versions of Windows, two of which give attackers the ability to run their own code on vulnerable machines. The most serious of the vulnerabilities affects all currently supported versions of Windows, from Windows 98 through Windows Server 2003. The problem lies in the HTML […]

The government is looking for one good person: someone with years of operational security experience with a solid track record of leading a talented group of people performing vital, sensitive tasks for a public-sector salary in complete anonymity. The candidate must be willing to work long hours, be comfortable with getting no credit for his […]

A large portion of the cyber-security talent that has drained out of the federal government in the last few months has reassembled in a new consulting firm. Richard Clarke, John Tritak and Roger Cressey have joined together to found Good Harbor Consulting LLC, which will advise clients on homeland security, cyber-security, counterterrorism and infrastructure protection […]

RSA Security Inc. on Thursday announced that it will be extending its ClearTrust Web single sign-on product to the mainframe environment later this year. The new extension is designed to allow users to access data stored on legacy systems without having to re-authenticate. The move into the mainframe world is a departure for RSA, a […]

Microsoft Corp. on Wednesday issued patches for three flaws in various versions of Windows, two of which give attackers the ability to run whatever code they wish on vulnerable machines. The most serious of the vulnerabilities affects all currently supported versions of Windows, from Windows 98 up through Windows Server 2003. The problem lies in […]

A voice that has been shouting loudly for honesty and openness in the security industry is about to be silenced. Vmyths.com, a Web site that for eight years has railed against vendor hype, misinformation and hoaxes, has run out of money and, without a large cash infusion, will go dormant within the next few days. […]

A well-known Brazilian crew won this past weekends Web site defacement contest, amassing more than twice as many points as the second-place team. Crackers from the Perfect.br team racked up 152 points in winning the contest, which put them 90 points ahead of the runners-up, the Hackbsd Crew. For their efforts, the Brazilians won a […]

The decades-old rivalry between Microsoft Corp. and Novell Inc. is heating up again. This time, the companies are jockeying for position in a market that rapidly is becoming one of the key battlegrounds for winning and keeping customers: identity management. Novell, one of the established players in identity management, this week plans to unveil two […]

Internet Security Systems Inc. last week unveiled its first Catastrophic Risk Index, a compilation of the 31 most serious current vulnerabilities and attacks. The index is designed to give administrators a constantly updated quick-reference list of the issues that should be their top priorities in protecting networks. Not surprisingly, all but two of the vulnerabilities […]