Dennis Fisher

Customers of another bank are being targeted by e-mail scammers attempting to steal account information and other personal data. The e-mail appears to come from the Bank of America customer support department, but there are several misspellings and grammatical errors that make it easy to identify the message as a fake. The message arrives from […]

A new vulnerability in Windows Media Player could enable an attacker to execute code on the machine of a user who downloads a skin for the player. When users download skins, or interfaces, for WMP, the files are automatically saved to the players Skins folder. As protection against some attacks, WMP puts a random element […]

Check Point Software Technologies Ltd. is making a major move into the application security and intrusion prevention markets with a new set of capabilities for its widely deployed FireWall-1 and VPN-1 boxes. The features contained in the new Next Generation with Application Intelligence software build on the core functionality of the platform and add the […]

The Fizzer worm continued to spread rapidly late Monday afternoon as anti-virus experts raced to analyze the code of what they called one of the more complex worms in recent memory. First seen late last week, Fizzer began spreading in Asia initially but then hit Europe and North American hard Monday as office workers started […]

Despite all of the attention being paid these days to security, and in particular wireless security, the message apparently hasnt gotten through to everyone, including many vendors. AirDefense Inc., a wireless LAN security company, set up one of its sensors on the show floor at last weeks Networld+Interop show in Las Vegas, and in just […]

Millions of .Net Passport accounts were threatened by a flaw in the log-in services coding that allowed attackers to reset the password to any account, and thereby access users personal information. The problem enabled an attacker to change the password on any account for which he knew the user name, simply by entering a URL […]

A hoax e-mail purporting to come from First Union Bank and attempting to dupe recipients to visit a malicious Web site is making the rounds on the Internet. The e-mail arrives from the address bankaccount@firstunion.com and informs the recipient that the bank has lost the recipients online banking username and password. It directs users to […]

There is a new vulnerability in the ubiquitous Windows Media Player that could enable an attacker to execute code on the machine of a user who downloads a skin for the player. When users download new skins—or user interfaces—for the Windows Media Player, the files are automatically saved to the players “Skins” file folder. As […]

When Microsoft Corp. raises the curtain on the first piece of its Next-Generation Secure Computing Base for Windows technology this week, company executives said it will mark the beginning of a fundamental shift in the architecture of the PC and the way users interact with their machines. While it could take years to test that […]

Record labels and movie studios are eagerly anticipating the potential file protection capabilities of Microsoft Corp.s Next-Generation Secure Computing Base technology, but new research contends the architectures security features may also help pirates and file swappers protect their ill-gotten gains. At the heart of the issue, according to a paper due to be published this […]

In a sign of users increasing frustration with the security shortcomings of many software applications, a civic group in South Korea has made good on their threat to file a lawsuit against Microsoft Corp.s Korean subsidiary, a Korean ISP and the countrys Information Ministry. The suit is the direct result of the havoc caused by […]

As administrators and IT managers continue to look for ways to improve the signal-to-noise ratio in their IDS systems, a small Indiana company is unveiling a new product designed to reduce false positives and get fixes to vulnerable machines quickly. Intelligent IDS combines the functionality of a typical network IDS with real-time vulnerability assessment and […]