Security

How to neutralize today's worst Web attacks

Symantec recently posted details about a new version of MPack, a <a href=" http://www.symantec.com/enterprise/security_response/weblog/2007/08/mpack_getting_more_dangerous.html">for-sale Web attack kit</a> that loads up a site with exploits against W...

Best practices for online shopping, Part 2

Here are some more tips and practical suggestions for improving the security of shopping online, from former graduate student Steven Zeligman:

Clearswift makes a clean sweep of Web threats

Mitigating network-borne threats has been an imperative to companies of all sizes and statures. As if malware and viral infestation weren't enough, today's corporations must contend with even bigger bugs, including regulatory compliance, information ...

How close is World War 3.0?

When the Estonian government was hit with major, sustained denial-of-service attacks this spring, the headlines screamed that it was the first incident of modern cyber warfare.

Best practices for online shopping

My former graduate student Steven Zeligman has just submitted another article for the column. Here are his practical suggestions (with the usual editing from me) on improving the security of shopping online.

Oh, don't tell me: 10 claims that scare security pros

A child with a chocolate-smeared shirt says, "I didn't do it." The phone rings, and Mum assures you, "There's nothing to worry about." A systems administrator carrying a box of tapes says, "We'll have everything back up in a few minutes." Sometimes t...

What we know (now) about the FBI's CIPAV spyware

Tucked into an affidavit filed by an FBI agent last month was the first hard evidence that federal agents are equipped with more than automatic pistols and handcuffs: The agency was asking a federal judge to let it infect a PC with spyware so they co...

Set a hacker alarm on your Web mail box

Your Web mail account is a treasure trove of private and potentially valuable information -- and thieves know it. In an online interview, one phisher claimed to make thousands of dollars every day by breaking into people's E-mail accounts and searchi...