Dennis Fisher

NEEDHAM, Mass.–In an attempt to resurrect itself after a disastrous 2001, security developer Baltimore Technologies plc. is orchestrating a massive reorganization. At the heart of its reorganization is a shift of focus from PKI (public-key infrastructure) technology development to providing professional services and repeatable security solutions, according to Bijan Khezri, Baltimores new CEO, in an […]

A well-known problem in the way that Internet Explorer handles user cookies can be exploited to allow an attacker to hijack MSN Messenger sessions, according to a bulletin published by a U.K. security researcher. The vulnerability, which another researcher brought to the attention of Microsoft Corp. late last year, is in the document.open command and […]

There is a buffer overflow vulnerability in the Telnet service in Windows 2000 that could enable an attacker to execute arbitrary code on a vulnerable machine. Microsoft Corp. has developed a patch for the flaw, which also affects the Telnet daemon in Microsoft Interix 2.2, the companys environment for running Unix applications on Windows machines. […]

Irish security vendor Accelerated Encryption Processing Ltd. on Monday will unveil two additions to its line of SSL accelerators, including a chip that can handle as many as 10,000 transactions per second. The AEP10K is the first release under the companys new Scaleable Public Key Architecture, a design that will eventually support ASICs (application specific […]

Information security research and education efforts would get a huge financial boost under a bill passed Thursday by the U.S. House of Representatives. The House voted 400-12 to approve $880 million for the National Institution of Standards and Technology and the National Science Foundation to fund security research and provide incentives for universities to establish […]

The New York state attorney general on Thursday sued security vendor Network Associates Inc. for violating free speech laws with a clause in its user agreement that prohibits users from criticizing the companys products. The suit charges that the clauses are illegal and harm the public by preventing discussion of problems and defects in the […]

As promised, a security researcher on Wednesday revealed several security vulnerabilities in Oracle Corp.s 9i database software, some of which enable an attacker to run arbitrary code on the affected machine or access the database server without a password. Patches or workarounds are available for all of the vulnerabilities. The advisories come at a particularly […]

Funding for information security projects within the federal government would increase by more than 50 percent in 2003 under the budget proposed by President Bush. Spending on security-related technology would jump to $4.2 billion from $2.7 billion this year. That increase is part of an overall hike in federal IT spending. Under Bushs budget plan, […]

A small Cambridge, Mass., developer this week will introduce software designed to lock down notoriously insecure WLAN systems. Funk Software Inc.s Odyssey includes server and client software and is based on a new authentication scheme known as EAP-TTLS (Extensible Authentication Protocol-Tunneled Transport Layer Security). EAP-TTLS requires no client-side digital certificates. To date, most wireless LAN […]

Novell Inc. on Monday joined the Liberty Alliance Project single sign-on effort, adding yet another marquee name to what is shaping up to be a partisan fight over the future of identity management on the Web. The Provo, Utah, company will bring its considerable experience in identity management to the alliance, which is designed to […]

Microsoft Corp. on Thursday named Scott Charney, a former security and cybercrime specialist with PricewaterhouseCoopers, as its new chief security strategist. Charney replaces Howard Schmidt, who is leaving to become vice chairman of the National Critical Infrastructure Protection Board. Charney will have no shortage of things to keep him occupied when he starts work at […]

WASHINGTON — Microsoft Corp. is wasting no time implementing the Trustworthy Computing initiative that Bill Gates outlined in his all-company memo last month. Speaking to a group of privacy and security officers at the Privacy and Data Security Summit here Friday, Richard Purcell, Microsofts corporate privacy officer, outlined an extensive privacy program that requires every […]