Dennis Fisher

As IT moves deeper into network security, AT&T Corp. is preparing managed offerings that company officials hope will change the way enterprises think about and purchase security products and services. The centerpiece of the strategy is Project Gemini, an initiative through which the company intends to augment, or entirely replace, customers edge defenses with security […]

Most security vendors have moved away from signature-based detection of attacks to behavior or anomaly-based solutions, but a small group of companies has eschewed this approach altogether and is using advanced memory protection technology to prevent malicious code from executing on protected machines. Most IPSes (intrusion prevention systems) work by observing the behavior of a […]

A new version of the Sober worm appeared on the Internet early Friday morning and already it is having quite a bit of success infecting users in Europe through the use of social engineering. Sober.J arrives in an e-mail message that appears to be a returned-mail error message, telling the user that an e-mail sent […]

With the uncertainty of the election past and normalcy returning to Washington, officials at the Department of Homeland Security are focused on finding a permanent head for the National Cyber Security Division within the next 60 days, insiders say. The top federal cyber-security job has been vacant since Amit Yoran resigned the post in September. […]

A Canadian cryptographic software vendor on Monday announced a new two-factor authentication solution designed specifically for the popular Apache Web server. CryptoCard Corp.s Crypto-Server 6.2 enables administrators to use virtually any form of two-factor authentication to log into their Apache servers through a browser interface. Software tokens, hardware tokens and smart cards all are supported […]

Veterans Day may have been a holiday for many U.S. companies, including banks and other financial institutions, but for Internet fraudsters it was one of the most productive days of the year. Beginning in the early-morning hours and continuing throughout Thursday and into Friday, phishing scammers launched an unprecedented number of unique new attacks against […]

If the practice of security is the black art of the IT world, requiring esoteric knowledge and the ability to employ a bag of tricks and specialized techniques to safeguard data, then cryptography is the highest expression of the art. Cryptographers spend their days immersed in the arcana of one-way functions and stream ciphers, dwelling […]

Things are getting a bit testy in the application-security market. Saying that theyre fed up with some security vendors claiming that their products protect against application-level attacks, a group of application-firewall vendors on Tuesday will issue a challenge to Check Point Software Technologies Ltd., Symantec Corp. and others to prove that their offerings are truly […]

A group that earlier this year offered for sale the source code of a popular intrusion detection system now is selling what it says is a copy of the source code for a recent version of Cisco Systems Inc.s PIX firewall. A member of the Source Code Club, which first surfaced in July, posted a […]

Symantec Corp. is launching a new corporate strategy fusing security and risk management, a concept that the company is calling information integrity. The strategy, unveiled at a series of simultaneous events around the world last week, is not entirely new and is, in part, a restatement of concepts that Symantec and other companies have been […]

As enterprises scramble for security specialists to help lock down their networks, managed security services providers are developing increasingly sophisticated tools that take the burden off IT staffs entirely. A front-runner in the effort with its Internet Protect service is AT&T Corp. This week, the company will bolster the managed service with added capabilities that […]

Messaging security vendor CipherTrust Inc. on Monday released a new component of its IronMail appliances designed to stop spam messages before they get to customers networks. Known as Connection Control, the technology relies on the companys Spam Profiler system to identify the IP addresses of the most egregious e-mail abusers. It does this through the […]