Dennis Fisher

Network Associates Inc. and Symantec Corp. have developed automated signature-delivery technologies they say should help head off the outbreak of fast-moving viruses such as Klez and Nimda. Network Associates McAfee Security division next week will unveil the latest version of its VirusScan ASaP managed anti-virus service, which includes an improved peer-to-peer delivery system that enables […]

Microsoft Corp. last week announced plans for a technology called TrustBridge, which it said will help businesses securely share customer identity information. Scheduled for release next year, the technology is roughly analogous to the companys .Net Passport service, which stores consumer identity data and enables single sign-on across multiple Web sites. Microsoft said TrustBridge will […]

If approved, the proposed Department of Homeland Security would radically alter the shape of the federal governments information security response and detection apparatus. The new department would absorb five separate security-related entities from across the government, including the FBIs National Infrastructure Protection Center and the General Services Administrations Federal Computer Incident Response Center. In total, […]

Microsoft Corp. on Thursday announced plans for a new technology called TrustBridge which it says will help businesses securely share customer identity information. Scheduled for release next year, the technology is roughly analogous to the companys .Net Passport service, which stores consumer identity data and enables single sign-on across multiple Web sites. Microsoft said TrustBridge […]

Security researchers have identified numerous flaws in the Bluetooth short-range wireless access points sold by Red-M Communications Ltd., the most serious of which could compromise the administration password. @stake Inc., a security research and consultant firm in Cambridge, Mass., discovered the six vulnerabilities in Red-Ms 1050AP, which is the only server on the market that […]

Looking to move into the top tier of security companies, intrusion-detection system vendor Sourcefire Inc. on Tuesday announced the hiring of a new CEO. Wayne Jackson, formerly of Aether Systems Inc., takes over the helm of the company, while founder Martin Roesch, who had served as CEO, becomes chief technology officer. Jackson joined Aether when […]

A security startup is taking a new approach to the problem of WLAN security by applying the concepts of intrusion detection and constant monitoring to Wi-Fi deployments. AirDefense Inc. will launch this week its wireless LAN security appliance, which includes vulnerability assessment and other features to provide the same level of security for wireless networks […]

Reflecting the industry trend toward advanced, hybrid intrusion detection systems, two vendors have unveiled IDS products that take different approaches to the challenge of identifying and halting attacks. Lancope Inc. last week introduced Version 2.0 of its StealthWatch product, which includes several new capabilities and gives administrators a more detailed picture of each host on […]

A high-stakes battle is brewing between software developers and security researchers over when to release discovered vulnerability data and patches, and customers are caught in the cross fire. The debate is about when researchers should alert the general public to the flaws they find. Industry protocol calls for discoveries to be kept quiet until a […]

Symantec Corp. on Monday announced a new software-licensing structure that will require large enterprises to estimate their software needs up front for the next two years. The overall plan is called the Symantec Security License Program, with separate structures for small and large businesses. The Symantec Elite Program gives large companies two licensing options. The […]

Security researchers have found a serious flaw in Macromedia Inc.s JRun Java application server that enables an attacker to gain complete control of a vulnerable machine. The buffer overrun vulnerability lies in the ISAPI filter/application that is used to handle requests for Java Server Pages resources. In order to exploit the flaw, an attacker would […]

Microsoft Corp. on Wednesday released a patch for a new denial-of-service vulnerability in Exchange 2000. The problem lies in the way the server handles malformed SMTP mail messages. When it receives such a message, Exchanges Store service uses all of the available CPU cycles in trying to process the message. There is no way for […]