Archive for March, 2010

Moscow subway attack: Five ways to make mass transit safer – Christian Science Monitor

Wednesday, March 31st, 2010

Times Online
Moscow subway attack: Five ways to make mass transit safer
Christian Science Monitor
The Moscow subway attack Monday highlighted gaps in security. But several new technologies and practices can make subways and mass-transit stations
Transit Systems Worldwide Boost Security After Moscow BombingsVoice of America
Montreal police boost métro securityMontreal Gazette
Security boosted on LA rails after Moscow bombingsSan Jose Mercury News
Xinhua -Reuters -Heritage.org (blog)
all 1,065 news articles »

Microsoft pushes emergency browser fix for 10 bugs

Wednesday, March 31st, 2010

One ‘critical’ flaw across all versions of browser.

Clinton predicts UN consensus on Iran sanctions – AFP

Tuesday, March 30th, 2010

CBC.ca
Clinton predicts UN consensus on Iran sanctions
AFP
GATINEAU, Canada — US Secretary of State Hillary Clinton predicted Tuesday the UN Security Council would reach a consensus on imposing new sanctions on Iran
G-8 demands Iran compliance on nukesThe Associated Press
Harper Says Iran, North Korea Are Threats to RecoveryBloomberg
G8 ministers to call for 'strong steps' over Iran's nuclear activityTelegraph.co.uk
BusinessWeek -Christian Science Monitor -Washington Post
all 979 news articles »

Google mobile services blocked in China

Tuesday, March 30th, 2010

Declines to rule out deliberate intervention.

Yes, IE8 users, you need that new security update – ZDNet (blog)

Tuesday, March 30th, 2010

UberGizmo (blog)
Yes, IE8 users, you need that new security update
ZDNet (blog)
If you're using IE8 on any platform, including Windows 7, you need the updates described in Microsoft Security Bulletin MS10-018. If you heard otherwise,
Microsoft To Roll Out Out Of Band Security UpdateITProPortal
Microsoft issues emergency patch for 10 IE holesCNET
Microsoft patches a gaping security holeInquirer
PC World -eSecurity Planet -Computerworld
all 260 news articles »

G8 seek for solutions of global peace, security challenges – Xinhua

Tuesday, March 30th, 2010

National Post
G8 seek for solutions of global peace, security challenges
Xinhua
At the meeting, G8 foreign ministers discussed three broad themes, including nuclear non-proliferation and disarmament, terrorism, and security
G8 ministers pressure Iran, AfghanistanAFP
AP sources: China will discuss new Iran sanctionsWashington Post
Beijing agrees to talks on sanctions for IranFinancial Times
Houston Chronicle -Sky News -Jewish Telegraphic Agency
all 1,241 news articles »

Tom Ridge takes the blame for a long airport line – Washington Post (blog)

Tuesday, March 30th, 2010
Tom Ridge takes the blame for a long airport line
Washington Post (blog)
By Al Kamen The struggling Transportation Security Agency has not had an administrator since President Obama took office. The first nominee, Los Angeles
TSA Leaderless, Challenged After Second Nominee Bows OutBNET
TSA left in holding pattern after nominee withdraws?USA Today
Law enforcement group pushes air marshal chief for TSACNN Political Ticker (blog)
FederalNewsRadio.com -Security Director News -Wall Street Journal
all 388 news articles »

Microsoft emergency patch addresses IE vulnerabilities, zero-day

Tuesday, March 30th, 2010

Patch security professionals say that Microsoft’s emergency update addressing IE vulnerabilities should be applied quickly.



AVG Offers LimeWire Users Improved Protection

Tuesday, March 30th, 2010

Given that file-sharing does indeed involve the sharing of files, it can be a dangerous practice, resulting in the spread of malware. Security experts should be pleased to hear, then, that LimeWire has teamed up with AVG to give its “Pro”-level users an additional layer of protection.

AVG Offers LimeWire Users Improved Protection
AVG Offers LimeWire Users Improved Protection

People who don’t approve of file-sharing can view this as a sort of community health issue, perhaps similar to the way homeless individuals are given clean needles free of charge. Having less malware out there should benefit everybody in the end, since viruses don’t just attack folks who break the law.

As for what, exactly, the new deal involves, a formal statement explained, “LimeWire LLC has licensed the AVG Anti-Virus SDK engine and has integrated the anti-virus/ anti-spyware protection into LimeWire Pro, its premium file sharing software. Through this partnership, all files will be scanned before LimeWire Pro will allow them to play or execute on an end user’s computer, which prevents infected files from harming machines.”

Jason Herskowitz, Limewire’s vice president of product management, then said, “LimeWire is committed to providing peer-to-peer’s best user experience and we are vigilant about user security. We are always looking for ways to improve, and with AVG’s seamless integration into LimeWire, we will be providing users with peer-to-peer’s most secure technology.”

The LimeWire-AVG integration should be in effect now, and it doesn’t appear that LimeWire will raise the price of its Pro service ($34.95 per year) as a result.

With any luck, this development will have a noticeable and immediate effect. LimeWire Pro users are likely to be trading lots more files than the average person, after all, so it may not take long for the benefits to become obvious.

The one problem might be if LimeWire Pro users – who are presumably somewhat tech-savvy – already have good security software in place, and it’s regular LimeWire users who represent the real security risk.

Phishing phree

Tuesday, March 30th, 2010

Clinton predicts UN consensus on Iran sanctions – Africasia

Tuesday, March 30th, 2010

Telegraph.co.uk
Clinton predicts UN consensus on Iran sanctions
Africasia
US Secretary of State Hillary Clinton predicted Tuesday the UN Security Council would reach a consensus on imposing new sanctions on Iran over its nuclear
Iran nuclear drive in focus at G8 meetAFP
Harper Says Iran, North Korea Are Threats to RecoveryBloomberg
G8 ministers to call for 'strong steps' over Iran's nuclear activityTelegraph.co.uk
BusinessWeek -Washington Post -Sydney Morning Herald
all 892 news articles »

Montreal police boost métro security – Montreal Gazette

Tuesday, March 30th, 2010

Reuters
Montreal police boost métro security
Montreal Gazette
Montreal police say they've taken steps to boost security in the city's métro system after a pair of suicide
Can security be beefed up for Moscow subway commuters?Xinhua
Security boosted on LA rails after Moscow bombingsSan Jose Mercury News
NYC activates security plan after Moscow bombingsReuters
AFP -Sify -New York Daily News
all 1,039 news articles »

Microsoft issues emergency patch for 10 IE holes – CNET

Tuesday, March 30th, 2010

The Tech Herald
Microsoft issues emergency patch for 10 IE holes
CNET
Microsoft issued an emergency security update on Tuesday to plug 10 holes in Internet Explorer, including a critical vulnerability that has
Microsoft To Roll Out Out Of Band Security UpdateITProPortal
Microsoft patches a gaping security holeInquirer
Microsoft patches 10 critical IE bugsComputerworld
InformationWeek -eWeek -NewsFactor Network
all 203 news articles »

Leaders Make Better Liars

Tuesday, March 30th, 2010

According to new research: The researchers found that subjects assigned leadership roles were buffered from the negative effects of lying. Across all measures, the high-power liars — the leaders — resembled truthtellers, showing no evidence of cortisol reactivity (which signals stress), cognitive impairment or feeling bad. In contrast, low-power liars — the subordinates — showed the usual signs of stress…

Social Security & Disability – Compensation Seems Unfair to Retiree – National Ledger

Tuesday, March 30th, 2010

Columbus Dispatch
Social Security & Disability – Compensation Seems Unfair to Retiree
National Ledger
I worked all my life and get about $1800 per month from Social Security. I know a 30-year-old guy who lives down the street. He says he gets $2000 per month
Is Social Security Ripe for Reform, Too?New York Times
Deficit Disconnect: Voters Say No to Medicare, Social Security CutsWall Street Journal (blog)
Seniors: Federal Gov Now Owes $2.5T To The Social Security Trust FundUS Money Talk News
CBS MoneyWatch.com (blog) -Examiner.com -OCRegister
all 94 news articles »

Apple Fixes 53 Security Vulnerabilities in Mac OS X – eSecurity Planet

Tuesday, March 30th, 2010

Gadget Venue (blog)
Apple Fixes 53 Security Vulnerabilities in Mac OS X
eSecurity Planet
Security rating firm Secunia has rated the entire update as "highly critical." The total OS X security fix list includes both the desktop and server
Apple delivers record monster security updateReuters
Apple Rolls Out Mac OS X 10.6.3 UpdateITProPortal
Apple Security Update Is Biggest EverI4U
IT PRO -ITworld.com -TopNews New Zealand
all 112 news articles »

SEC wins judgment against stock options hacker

Tuesday, March 30th, 2010

A U.S. District Court has ordered a Ukrainian man to pay $580,000, as well as civil penalties, after he traded stock options based on knowledge he obtained from hacking into the computer network of IMS Health, a company that provides the pharmaceutical industry with with sales data and consulting services. According to the federal Securities and Exchange Commission (SEC), Oleksandr Dorozhko purchased 630 “put options,” which gives the buyer the option to sell at a given price, knowing that IMS Health planned to announced worse-than-expected earnings later that day. Dorozhko made $287,346 by selling the options after the company’s stock price dropped 28 percent, the SEC said Monday. — DK



Perimeter security: leveraging innovation to expedite convergence

Tuesday, March 30th, 2010

Automation can help push forward enterprise projects, such as converging physical and IT properties.



TSA Leaderless, Challenged After Second Nominee Bows Out – BNET

Tuesday, March 30th, 2010

Austin American-Statesman

Gonzalez co-conspirator sentenced to seven years

Tuesday, March 30th, 2010

Another co-conspirator to hacker Albert Gonzalez was sentenced Monday in federal court in Boston to seven years in prison for playing a major role in the BJ’s Wholesale Club and TJX hacks. Christopher Scott of Miami pleaded guilty in September to charges of unlawful access to computers, access device fraud, wire fraud, aggravated identity theft and money laundering, according to court documents. Scott is latest person involved in the crime ring to be sentenced. The ringleader Gonzalez last week received a record-breaking hacking sentence of 20 years. — AM