Monday, September 8, 2008

Security News Feed Monday 9/8/08

Virtualization users should expect more attacks VMware's release of patches for 16 vulnerabilities last week is likely to be the first of many as hackers increasingly focus their attention on virtualized environments according to security researchers. Read more...






Group to release uniform metrics to measure IT security







Schwarzenegger gets softened version of vetoed breach bill







iPhone 3G owner sues Apple, AT&T over dropped calls, app crashes






Social Security numbers exposed on Iowa land-records Web site






Is Rock Phish cybergang set for a comeback?







Docs store unsecured patient data on memory sticks





Posted last week but still important:
Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA






Threat From DNS Bug Isn't Over, Experts Say - 9/8/2008 9:15:00 AM
Further patches expected by year's end; basic flaws in critical Internet technology still unresolved






Report: N. Korea Used Spyware, Sex in Targeted Attack on S. Korean Military - 9/3/2008 4:30:00 PM
Spy posing as anti-Communist speaker allegedly supplied North Korea with names, email addresses of South Korean military officers to launch targeted attacks






Tomorrow's patches advance notice:
http://www.microsoft.com/technet/security/bulletin/ms08-sep.mspx






More on the anti-spam crusade:
http://voices.washingtonpost.com/securityfix/2008/09/estdomains.html#more
"... According to RegistrarStats.com, EstDomains is the 49th largest domain name registrar, with more than 270,000 domains. Security Fix is still working on cataloging all of those domains, but for the purposes of this analysis we'll examine some 10,000 Web site names that are both registered through EstDomains and using the company's various domain name servers to route traffic to them..."






NebuAd, Phorm delay ad trialsNews Brief, 2008-09-05
The two companies, whose controversial ad technology uses data on consumers gathered from ISPs, delay their plans following privacy outcry.






"Apple has all but admitted that a British man invented the iPod over three decades ago in the 1970's. Unfortunately, he let the patent run out. When another company tried to grab a portion of its iPod profits, though, Apple went running to him to defend them in court. In return, it looks like he's in for a share of the cash generated from the sale of 163 million iPods."






"The BBC reports that China will launch its third manned space mission in late September, according to state-run news agency Xinhua. The Shenzhou VII flight will feature China's first ever space walk, which will be broadcast live with cameras inside and outside the spacecraft. For the spacewalk, two crew members will go into the spacecraft's vacuum module. One yuhangyuan (astronaut) will carry out the spacewalk; the other is there to monitor the activity and assist in case of an emergency. Two types of spacesuits — one made in China, the other from Russia — will be carried up on the flight. It is unclear why China has opted for two different types of spacesuit. Spaceflight analyst Dr Morris Jones commented that China might want to test the suits against each other. Alternatively, he said, it might not be ready or willing to fly a mission exclusively with its own suits."






"Ever wondered why you never get the 10 hours of batttery life advertised with your new ultraportable? Battery life ratings have been a joke for years, so it's interesting to hear that one big vendor is picking up its game. PC Authority says Sony is abandoning the usual (and wildly misleading) JEITA method for coming up with those 10+ hour battery numbers (they're still using JEITA, but not the usual way). Interestingly, the story has links showing the old and new steps Sony takes to come up with those battery predictions. It's good to see the industry coming clean on this issue."






Law prof warns against coming ISP privacy apocalypse
A Colorado law professor argues that ISP surveillance, powered by deep packet inspection gear, represents an "unprecedented and invasive" danger. But laws to curtail may already be on the books.
September 07, 2008 - 03:45PM CT - by Nate Anderson






Fake YouTube Infects with Trojans
Seeing one's favorite celebrity in an exclusive video might be temping enough for many people to click on a ...[ more >> ]







Intel rolls out low power server chips
Larry Dignan: The chip giant noted that the lineup is the first halogen-free Xeons, which will lower its environmental impact. However, you'll most likely be interested in the power consumption.






So Much Hate For Microsoft's Seinfeld/Gates Buddy Ad






A Way to Find Hidden Fingerprints
By Brittany SauserThursday, September 04, 2008
Scientists have developed a better way to identify fingerprints on bullets and fragments of explosives.






McAfee brings nearly instant malware updatesCNET - 1 hour, 50 minutes ago
What if your desktop security application could detect and remove a new threat that was only minutes old? That's the impetus behind McAfee Artemis Technology, announced on Monday.






McAfee touts "cloud-based" malware defense system
McAfee Monday is announcing a change in how it delivers malware-signature software updates that it... ...1






Defrag for Faster Virtual I/O
Defrag may not be the first thing you think of when it comes to optimizing virtual networks, but it does provide a more orderly foundation that can greatly simplify matters for higher-level I/O processing. More





Latin American Governments Meet In Bogota To Focus On Cyber Crime By Grey McKenzie 09/4/2008







Using Shredded Checks as Packaging Material
This seems like a really dumb idea.

No comments: