Lisa Vaas

Hewlett-Packard has released a batch of entry-level disk arrays that allow smaller companies to flip between low-cost Fibre Channel and iSCSI on the one hand and high-availability storage area networks in virtualized server setups on the other. On Feb. 6, HP unleashed the new family, dubbed the HP StorageWorks 2000 Modular Smart Array, or MSA2000. […]

Aten Technology has released an IP-enabled keyboard/video/mouse switch that promises to let smaller businesses manage multiple servers over the Internet regardless of which closet in which country the systems are tucked away. “These new Category 5 switches [allow businesses] lots of flexibility from the standpoint of where you can deploy the switches as well as […]

A security consultancy in February will launch a portal to automate the infliction of faux spear-phishing attempts on one’s own work force—an educational tactic that experts are increasingly pointing to as one effective method to stem the tide of information being unwittingly handed to thieves. The site, PhishMe.com, will be launched by Intrepidus Group, a […]

When office workers are asked to self-report anonymously on their work-related security behaviors and attitudes, a snapshot emerges that may make IT workers cringe. The research, conducted in on-the-street surveys in Boston and Washington by RSA in November and published in a report titled “The Confessions Survey,” (PDF) found that 53 percent of respondents who […]

Attackers are going after Microsoft Office Access databases, US-CERT warned earlier in the week, taking advantage of an unpatched stack buffer overflow to deliver malicious databases that are leading to system hijacking in an undetermined number of cases. Security researchers didn’t have many details on the attacks, but US-CERT’s advisory did say that users don’t […]

Microsoft’s latest monthly patch set tackles critical vulnerabilities that attackers can exploit in the wild to target PC users. Microsoft released seven security bulletins that addressed 11 vulnerabilities on its Dec. 11 Patch Tuesday. Of those, three bulletins containing seven client-side vulnerabilities are rated as critical and affect nearly all major Microsoft operating systems: 2000, […]

Even as Microsoft prepared to release critical updates for flaws in multimedia frameworks and APIs, proof-of-concept exploit code came out over the weekend that shows how an attacker can target the Winamp multiformat media player, a media player from Nullsoft that runs on Windows and is second only to Windows Media Player in worldwide popularity. […]

Security researchers have spotted Trojans that are using RSS feeds to communicate instead of their traditional method of “phoning home” to get marching orders from command-and-control centers that security researchers have learned to track down and blacklist. Yuval Ben-Itzhak, chief technology officer for Finjan, told eWEEK that the security firm recently detected three separate Trojans […]

Microsoft will put out seven security bulletins on Patch Tuesday, with three critical updates that could lead to systems getting hijacked via Windows, Internet Explorer, and/or Microsoft’s multimedia frameworks and APIs. Vista is vulnerable to all three of the critical flaws, although Microsoft noted in a table of affected software included in its monthly advance […]

Oak Ridge National Laboratory has been bombarded by a coordinated phishing attack aimed at multiple national labs and may have unwittingly handed over to attackers the personal information of anybody who visited the lab over a 14-year span, including Social Security numbers. On Dec. 3, Laboratory Director Thom Mason sent a letter to staff telling […]

Canada’s government was in an uproar after a citizen found that when applying online for a passport he could easily access other people’s passport applications. Jamie Laning, an IT worker at a Algonquin Automotive in Huntsville, Ontario, told eWEEK that on Nov. 29 he was applying online for a passport to travel to the United […]

Thieves stole a laptop from the home of a Forrester Research employee during the week of Nov. 26, potentially exposing the names, addresses and Social Security numbers of an undisclosed number of current and former employees and directors, the company said in a letter mailed to those affected on Dec. 3. Forrester “Chief People Officer” […]