Paul F. Roberts

A new program from 3Com Corp. will pay security researchers for information on software vulnerabilities. 3Com and its TippingPoint division announced the ZDI (Zero Day Initiative) this week. The program will pay researchers cash for data on vulnerabilities, which 3Com will pass along to affected vendors and use to beef up protections through its TippingPoint […]

Vulnerabilities in USB drivers for Microsoft Corp.s Windows could allow an attacker to take control of locked workstations by using a specially programmed USB device, according to an executive from SPI Dynamics Inc., a security vendor whose researchers discovered the security hole. The vulnerabilities that could let an attacker circumvent Windows security and gain administrative […]

If there was any doubt about the power of blogs, consider the case of Michael Gee. A part-time journalism professor at Boston University, Gee was fired recently after he posted comments in a blog about the looks of a female student in his course. Writing on the Web site SportsJournalists.com July 5, Gee, a well-known […]

Vulnerabilities in USB drivers for Windows could allow an attacker to take control of locked workstations using a specially programmed Universal Serial Bus device, according to an executive from SPI Dynamics, which discovered the security hole. The buffer-overflow vulnerabilities could enable an attacker to circumvent Windows security and gain administrative access to a users machine. […]

In more evidence of Microsofts increased interest in security technology, the software company said on Wednesday that it plans to acquire FrontBridge, a provider of secure messaging services, for an undisclosed sum. Microsoft Corp. plans to use its acquisition of FrontBridge Technologies Inc. to deliver a secure, highly availabile e-mail service that will be marketed […]

A group of leading technology firms that includes Microsoft Corp., IBM, Yahoo Inc. and Cisco Systems Inc. has submitted a new e-mail authentication standard to the Internet Engineering Task Force. The specifications for DKIM (DomainKeys Identified Mail) were submitted to the IETF last week for consideration as a new e-mail authentication standard. DKIM has been […]

Like pornography, spyware has been something that most people cant define but know it when they see it. But no longer. The Anti-Spyware Coalition, in Washington, has published a document that aims to define key terms and behaviors that characterize spyware. The list of uniform definitions is the first major contribution by the ASC, which […]

Like pornography, spyware has been one of those things that most people cant define but know when they see. No longer. The Anti-Spyware Coalition, an anti-spyware industry group, on Tuesday published a document that aims to put spyware in its place by defining key terms and behaviors that characterize spyware programs. The list of uniform […]

VeriSign Inc. said on Thursday that it has acquired security intelligence firm iDefense for $40 million in cash. iDefense specializes in developing security intelligence about software vulnerabilities and online threats. VeriSign said in a statement that it will use the Reston, Va., companys global network of researchers to improve its managed security services business. iDefense […]

Representatives from 37 e-mail technology companies used a one-day Summit in New York on Tuesday to exhort private sector administrators and online marketers to adopt e-mail sender authentication technology that helps block spam and phishing attacks. Around 500 people attended the E-Mail Authentication Implementation Summit and heard speeches by Internet luminary Esther Dyson, as well […]

With headlines about the compromise of hundreds of thousands of credit card numbers at CardSystems Solutions Inc. still fresh, the industry is implementing long-awaited data security rules for merchants and card processors. The Payment Card Industry Data Security Standard mandates IT security best practices such as firewalls and anti-virus software, as well as data encryption […]

New tools and features from two manufacturers of wireless security software will help network administrators sniff out rogue wireless systems and spot attacks that spread over wireless links. AirDefense Inc. and Newbury Networks Inc. each announced software in the past two weeks that gives administrators new ways to inventory authorized wireless devices; spot attacks; and […]