Paul F. Roberts

As the thirst for low-maintenance on-demand software continues to grow in the enterprise, some security experts and customers worry that security weaknesses could disrupt on-demand applications and leave them high and dry. For now, these security concerns lurk well below the surface—few of the big vendors pitching their wares at the RSA Conference on Feb. […]

While the world held its breath, there were few noticeable effects from the dreaded Blackworm, which began deleting files on infected Windows computers Friday, according to interviews with computer virus experts. The worm, which also goes by the name “Kama Sutra,” “Nyxem” and “MyWife,” is continuing to spread, but is not causing the damage that […]

Malicious hackers are increasingly targeting security vulnerabilities in open-source software that runs bulletin boards and online forums, according to Internet monitoring firm Netcraft. The unpatched holes, in open-source software like phpBB, PostNuke, and Mambo are being used to take control of powerful servers for denial of service attacks and phishing scams. Poor deployment of security […]

Symantec said Feb. 1 that a high-risk hole could allow a remote attacker to take over vulnerable Sygate Management Servers. The company issued a patch for the Sygate application vulnerability. If left unpatched, remote attackers could use SQL (Structure Query Language) code to overwrite passwords for accounts on the server, possibly gaining administrative access to […]

The Boston Globe newspaper said on Feb. 1 that it accidentally released sensitive data on as many as 227,000 subscribers. Information on around 13,000 subscribers to the Worcester Telegram & Gazette was also accidentally released in the incident. Subscribers names, credit card numbers and bank routing numbers, were printed on the back of recycled paper […]

Oracle is advising its customers to quickly apply a critical database patch the company issued Jan. 17. Security experts warn the hole could allow even unsophisticated users to take control of Oracle databases. The patch, known as DB18, fixes a hole that affects most supported versions of the Oracle database software, including Oracle8i, Oracle9i and […]

IBM recorded more than 1 billion suspicious computer security events last year, despite a leveling off in the amount of spam e-mail and a decrease in major Internet worm and virus outbreaks. Enterprises should expect to see the same level of malicious traffic this year, even as online criminal groups shift to stealth attacks and […]

3Com unveiled a new IPS (intrusion prevention system) appliance for large enterprises and service providers on Jan. 30 called TippingPoint M60. The new appliance is the product of a 2003 joint venture between 3Com and Chinese networking equipment maker Huawei. It can stop denial of service attacks and block communications from worms, viruses, Trojan horse […]

A 45-year-old California man was arrested Jan. 25 and charged with operating an online phishing scheme that targeted America Online customers. Jeffrey Brett Goodin of Azusa, Calif., was arrested and charged with wire fraud and unauthorized use of a credit card. He could face 30 years in prison if convicted of both offenses. Goodin is […]

Oracle is advising its customers to quickly apply a critical database patch the company issued last week. Security experts warn the hole could allow even unsophisticated users to take control of Oracle databases. The patch, known as DB18, fixes a hole that affects most supported versions of the Oracle database software, including Oracle versions 8, […]

The recent move by Apple Computer to begin shipping Macintosh computers that use microprocessors from Intel could open the door to more attacks against computers running the companys OS X operating system, security experts warn. The shift to Intel processors from the Motorola Power PC processors will make it easier to create software exploits for […]

A survey of U.S. adults revealed that three times the number of respondents said they were more likely to be victimized in an online attack such as phishing or virus outbreaks than a physical crime. Twenty six percent of respondents said they think they will be a victim of a virtual crime in the next […]