December 19, 2008
Duchess of York laptop security scandal avoidable
By Alan Harten
Credant, a military-standard endpoint encryption specialist, has hit out at security staff working for the Duchess of York and the Royal family, for not having personal photos, taken by the Duchess herself, encrypted to prevent their theft from a laptop which was reported to have been stolen from a photography studio.
The very public figure [...]
December 9, 2008
New Software-as-a-Service approach to Capacity Management for SMEs
By Neptuny
Neptuny introduces CaplanTM SaaS (Software-as-a-Service), to provide efficient Capacity Management also for Small to Medium-sized Enterprises who want to set up a small-scale Capacity Planning and Management project.
Caplan™ is able to cover multiple domains in one single solution, while having zero impact in production environments thanks to its agent-less architecture, the out-of-the-box integration to major [...]
November 12, 2008
Cyber-Ark Signs Seven-Figure Deal with Top 10 Global Bank to Provide Privileged Identity Management Solution
By Cyber - Ark
Cyber-Ark Software, the leading provider of Privileged Identity Management (PIM), Sensitive Information Management and Digital Vault solutions, today announced that one of the world’s largest and most influential global financial institutions has chosen Cyber-Ark’s Privileged Identity Management Suite to secure and manage its privileged identities and application passwords.
This seven figure deal marks another major win [...]
October 28, 2008
Joint Venture to Tackle Software Vulnerabilities
By Alan Harten
According to information issued by the National Institute for Standards & Technology, NIST, up to 92% of all network security vulnerabilities are traced back to software applications.
This coupled with the growing use of enterprise outsourcing of application development can be the key to serious security problems.
Other studies have found that approximately 90% of companies [...]
October 21, 2008
Cyber-Ark announces Inter-Business Vault 5.0
By Alan Harten
In a security market that is beginning to see problems with tried and tested security solutions such as Secure FTP, companies are turning more and more towards alternative ways of keeping data secure.
One such solution is Sensitive Information Management, another comes in the form of PIM or Privileged Identity Management.
Cyber-Ark, a pioneer in this [...]
October 20, 2008
IT initiative of the Year Winner
By Alan Harten
This year’s “IT initiative of the Year” award, at the Security Excellence Awards, has gone to Scyron in recognition of their DEMON Manager software.
DEMON Manager manages the huge amounts of data coming into police and security services.
Modern crime prevention make use of massive amounts of information that may later be used as evidence, this [...]
October 7, 2008
UK Firms Different Storage Needs Than Germans French
By Alan Harten
According to a study from Iron Mountain off site record storage is a system mostly preferred by UK companies rather than their European counterparts.
Over 42% of British companies prefer to keep physical records off site, compared with German companies 11% and the French at 29%.
Of those companies that keep records within reach, the main [...]
October 3, 2008
Veracode Wins Wall Street Journal Technology Award
By Alan Harten
The Wall Street Journal’s Technology Innovation Award has been handed to application security testing company Veracode.
The WSJ gives its tech awards to companies or individuals in the medicine, software, the Internet, wireless and consumer electronics industries.
The awards are made for innovation; in Veracode’s case for its applications that scan binary code looking for vulnerabilities [...]
September 25, 2008
Fortify views Adobe crackers’ approach on Clickjacking as positive
By Storage Expo
Fortify Software, the application vulnerability specialist, says that an informal agreement by the software cracking community to temporarily cease open discussion of the Adobe Clickjacking flaw is a positive move for the IT security industry.
“All responsible security research organisations - ourselves included - will always give the vendor time to respond before discussing the issue, [...]
September 23, 2008
Mu Dynamics Discovers IKEv2 Vulnerability
By Alan Harten
StrongSwan is an open source IPsec-based virtual private network (VPN) solution for the Linux operating system.
IPsec-based VPNs secure corporate VoIP, email, web, IPTV and other IP-based services over public network infrastructures.
On the 16th of this month StrongSwan’s IKEv2 implementation was found by Mu Dynamics to have a very serious and dangerous 0-day vulnerability.
The [...]
September 17, 2008
Fortify Gives Away 360 Software to Universities
By Alan Harten
Fortify Software is turning to old fashioned philanthropic gestures.
One hundred years ago the wealthy factory owner would have built an orphanage or added a new library to a university.
The modern version of that is to offer educational establishments your valuable software program.
Fortify has been doing just that, offering educational establishments around the [...]
September 4, 2008
BullGuard Introduce Security for Online Gamers
By Alan Harten
BullGuard are well established in the user-friendly PC and mobile security market, but now they have taken what seems an obvious and perhaps overdue step and moved into protecting gamers.
With what they claim is the “world’s most advanced dedicated security solution for gamers”, the very simply named “Gamer’s Edition” aims to protect gamers from unpleasant [...]
August 10, 2008
The problem is information insecurity
By Bruce Schneier
Information insecurity is costing us billions. We pay for it in theft: information theft, financial theft. We pay for it in productivity loss, both when networks stop working and in the dozens of minor security inconveniences we all have to endure. We pay for it when we have to buy security products and services to [...]
August 7, 2008
Tier-3 says Adobe warning highlights need for new approach to malware detection
By NStinchcombe
If ever there was a case for the industry to change its approach to malware infection detection, the warning from Adobe about fake Flash downloads is it, says security specialist Tier-3.
“Reports are coming in that Adobe is warning users to beware of fake update downloads for its popular Flash animation software,” said Geoff Sweeney, Tier-3’s [...]
July 10, 2008
Arxan To Assist Federation Against Software Theft
By Alan Harten
Arxan Technologies, a provider of application hardening solutions designed to protect software from tampering and theft, has joined the Federation Against Software Theft as it extends its reach into the European market.
The Federation was the world’s first anti-piracy organisation working to protect the intellectual property of software publishers.
It was formed in 1984 and its [...]
June 26, 2008
Joy Global Shielded From Web 2.0 Hazards
By Rohan Parker
The announcement was made this month by Secure Computing Corporation that the gateway security company would be providing Secure Web(tm) to Joy Global Inc., the mining equipment manufacturer and distributor.
Secure Web, previously known as Webwasher, will allow Joy Global to protect against threats designed with Web 2.0 in mind.
Web 2.0 is the phase [...]
May 29, 2008
Vista’s UAC spots rootkits
By Grant Draper
Vista’s Account Control feature sets itself to one side, compared to any predecessors, by locating rootkits before they actually install.
You can’t get much worse than a rootkit - they install themselves on a system and from then onwards effectively have control, allowing them to do what ever they want, whether that’s deleting information or retrieving [...]
May 29, 2008
Adobe Flash Player Bug
By Grant Draper
Hackers have come across an unpatched bug in the Adobe Flash Player software which is, apparently, very similar to a bug that was patched just last month.
The flaw allowed hackers to install unauthorised software on a victim’s machine and was being used to install botnet programs and password-logging software.
Obviously, from a security point of [...]
May 20, 2008
NinjaProbe To Be Upgraded With Snort IDS
By Rohan Parker
Leader in network monitoring software, Endace Limited, announced today that NinjaProbe is to be upgraded with a new applied watch command center and data mining agent, Snort.
The addition of the Snort IDS (intrusion detection system) will not only mean Endace’s product portfolio will have been reinforced, but so will one of the chief passive [...]
May 16, 2008
Users hit by phony MP3 files
By Dave Nixon
Adware peddlers have found a novel method to deceive users, said security vendor McAfee.
The company stated that it has seen a vast increase in fake MP3 file distribution on peer-to-peer networks.
Even though the files have names that make them appear as audio recordings, they are essentially Trojan horse programs that attempt to install an [...]

