Computer Security Global Security Mag Online anti virus spywares job oofers telecom and network security

INTERNATIONAL
LOGICAL & PHYSICAL SECURITY

Next Issues
Subscriptions
Publicity

Google

 Flux RSS
 

Starting in September, this section will include information on IT security training courses (intrusion tests, standards, risk management etc.) as well as information on training courses devoted to storage, archiving etc.  [...more]

For start-ups or established companies about to launch a new product, our web-based Marcom strategy package provides 4 weeks of worldwide coverage for an exceptional price starting at €800 excl. VAT.
This service is tailor-made to each customer’s requirements and is based on a dedicated white paper available online in the PRIME TIME section of our website home page during the 4-week period.
- Week 1: your company profile or new-product presentation
- Week 2: an interview with a member of your company’s management team
- Week 3: an interview with a consultant or systems integrator to provide an in-depth review of your technology
- Week 4: an interview with one of your beta test clients or a potential customer to explain the advantages of your technology from a customer point of view  [...more]

Feature
The workforce today is a mobile one, working where and when they choose – fact. Indeed, many organisations have even started issuing laptops in preference to the standard desktop PC. However, as (...) [...more]
Cloud Computing is all the rage, but while most enterprise IT departments are eager to explore the possibilities offered by decentralized infrastructure and applications, they are also deeply (...) [...more]
The security issues around Facebook, Twitter and such have become a hot issue in recent years: most security conferences and expos currently list some Web 2.0-related presentation, or list social (...) [...more]
In an era when the UK Government itself acknowledges that total security of data is impossible, and the Information Commissioner has described data as a potential “toxic liability” to an (...) [...more]
Stephen Howes, CEO GrIDsure, the safer alternative to PINs and passwords, explains why we will see incidents like this becoming more frequent if service providers continue to rely on static PINs (...) [...more]
It’s every CIO’s nightmare: critical business data lost, stolen or maliciously exposed to a major breach of security systems or policy. Worryingly the frequency of major security failures, the (...) [...more]
With new Web threats constantly emerging, it’s hard enough just keeping pace with change. So is there a way to nullify threats and stop potential attacks before they begin? Gidi Cohen, CEO and (...) [...more]
It’s interesting to note that Cloud computing has topped Gartner’s “Top 10 Strategic Technologies for 2010.” They define a strategic technology as “one with the potential for significant impact on the (...) [...more]
This article will look at how best to manage the security issues social networking brings to business and if a company decides to stop staff using social networking how can it monitor this and (...) [...more]
Effective IT risk management increases network security, reduces management costs and achieves greater compliance. The challenge is in identifying where IT risks are and a repeatable process to (...) [...more]

Latest News
  •   Business News   Thursday 11 March
      Break the Victorinox code and win £100,000
    Calling all computer whizzes, programming champions and coding kings: imagine a storage device that thinks it’s a hard drive and is completely un-hackable. Don’t think it is possible? Prove Victorinox wrong by breaking the code and win £100,000. The Secure Pro is the new biometric encrypted storage device created by Victorinox, makers of the iconic Swiss Army Knife. It will be making its first European appearance on 25th March 2010 in Victorinox’s flagship store in London and is just begging (...)   
  •   Security Vulnerability   Thursday 11 March
      Vigil@nce: Adobe Flash, file reading
    SYNTHESIS OF THE VULNERABILITY An attacker can create a malicious Flash application, which indicates file fragments to a CIFS/SMB share. Severity: 2/4 Consequences: data reading Provenance: document Means of attack: 1 proof of concept Ability of attacker: specialist (3/4) Confidence: unique source (2/5) Diffusion of the vulnerable configuration: high (3/3) Creation date: 04/03/2010 IMPACTED PRODUCTS Adobe Flash Player DESCRIPTION OF THE (...)   
  •   Security Vulnerability   Thursday 11 March
      Vigil@nce: CUPS, privilege elevation via lppasswd
    SYNTHESIS OF THE VULNERABILITY A local attacker can modify the LOCALEDIR environment variable, in order to generate a format string attack in lppasswd, leading to the execution of privileged code. Severity: 2/4 Consequences: administrator access/rights Provenance: user shell Means of attack: no proof of concept, no attack Ability of attacker: expert (4/4) Confidence: confirmed by the editor (5/5) Diffusion of the vulnerable configuration: high (3/3) (...)   
  •   Security Vulnerability   Thursday 11 March
      Vigil@nce: OpenSSL, denial of service via Kerberos
    SYNTHESIS OF THE VULNERABILITY When OpenSSL supports the Kerberos key exchange, and when the server application is in a chroot jail, an attacker can send a special ClientHello message, in order to stop the application. Severity: 2/4 Consequences: denial of service of service Provenance: internet client Means of attack: 1 attack Ability of attacker: technician (2/4) Confidence: confirmed by the editor (5/5) Diffusion of the vulnerable (...)   
  •   Product Reviews   Thursday 11 March
      Secure mobile access to the cloud with StoneGate Virtual SSL VPN 1.4
    Stonesoft, a provider of integrated network security and business continuity solutions, introduces the new StoneGate SSL VPN Virtual Appliance, SSL VPN 1.4 and SSL-1060 for secure mobile and remote access. The StoneGate SSL VPN solution is for organisations that need to provide controlled yet flexible remote access for their employees, partners or customers. The solution enables organisations to share information freely and yet have full control over who accesses the information, when (...)   
  •   Security Vulnerability   Thursday 11 March
      Vigil@nce: PostgreSQL, denial of service via JOIN
    SYNTHESIS OF THE VULNERABILITY An authenticated attacker can create a query containing numerous JOINs, in order to stop PostgreSQL. Severity: 1/4 Consequences: denial of service of service Provenance: user account Means of attack: 1 attack Ability of attacker: technician (2/4) Confidence: confirmed by the editor (5/5) Diffusion of the vulnerable configuration: high (3/3) Creation date: 10/03/2010 IMPACTED PRODUCTS PostgreSQL DESCRIPTION OF THE (...)   
  •   Market News   Thursday 11 March
      Cancer Research UK Relocates Data and Applications with Interxion
    Interxion, an European provider of carrier-neutral colocation data centre services, announced that Cancer Research UK, the world’s leading charity dedicated to beating cancer through research, is locating its mission-critical data and applications in Interxion’s London data centre. Cancer Research UK spent £355 million on research in 2008/09, funding the work of 4,800 world-class scientists, doctors and nurses. The IT department’s core purpose is to enable Cancer Research UK to beat cancer (...)   
  •   Opinion   Thursday 11 March
      Fortify warns that smartphone app developers must embrace secure code development strategies
    Fortify Software has warned that developers of applications (apps) for smartphones such as the Apple iPhone and Google Android must embrace the principles of secure code development, otherwise the integrity of users’ mobile phone data could be seriously at risk. The warning from the software security authority comes after researchers at Rutgers University in the US have developed a proof-of-concept rootkit capable of compromising most aspects of a smartphone. "The researchers have (...)   
  •   Security Vulnerability   Wednesday 10 March
      Zscaler Protects Against Internet Explorer Zero Day Attack
    References: CVE-2010-0806Microsoft Security Advisory (981374) Impact : Remote code execution Affected Software: Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Non-Affected Software Microsoft Internet Explorer 8 Description Microsoft has released a security advisory (981374) detailing a new, unpatched vulnerability in Internet Explorer (IE), which is being used in targeted attacks. The vulnerability is caused by an invalid pointer reference and impacts IE 6 & 7, (...)   
  •   Product Reviews   Wednesday 10 March
      Intego releases Virusbarrier X6 Dual Protection
    Intego, the Mac security specialist, today announced the release of VirusBarrier X6 Dual Protection, featuring the latest version of its acclaimed anti-malware and network security software together with BitDefender Antivirus 2010 so Mac users can protect their Windows installations. VirusBarrier X6 now provides comprehensive protection from both malware and network threats. VirusBarrier X6, the latest version of Intego’s anti-malware and network security program, includes new (...)   
  •   Security Vulnerability   Wednesday 10 March
      Vigil@nce: Cisco Unified Communications Manager, denials of service
    SYNTHESIS OF THE VULNERABILITY An attacker can use SCCP, SIP or CIT messages, in order to generate denials of service on Cisco Unified Communications Manager. Severity: 2/4 Consequences: denial of service of service Provenance: intranet client Means of attack: no proof of concept, no attack Ability of attacker: expert (4/4) Confidence: confirmed by the editor (5/5) Diffusion of the vulnerable configuration: high (3/3) Number of (...)   
  •   Security Vulnerability   Wednesday 10 March
      Vigil@nce: Apache httpd, information disclosure via SubRequest
    SYNTHESIS OF THE VULNERABILITY When Apache httpd uses a SubRequest and a multi-threaded MPM, session data can be returned to another user. Severity: 2/4 Consequences: data reading Provenance: internet client Means of attack: no proof of concept, no attack Ability of attacker: expert (4/4) Confidence: confirmed by the editor (5/5) Diffusion of the vulnerable configuration: high (3/3) Creation date: 03/03/2010 IMPACTED PRODUCTS Apache httpd (...)   
  •   Malware Update   Wednesday 10 March
      Barrucada: Twitter Makes Its Red Carpet Debut For Celebrities And Criminals
    Barracuda Networks Inc. released its Barracuda Labs 2009 Annual Report, revealing data from three areas: Twitter trends and tracking, Web threats and trends, and email spam and viruses. The report drills down into 2009’s fastest growing social networking application Twitter, and reviews growth drivers, usage trends and the overall Twitter crime rate. Barracuda Labs analyzed more than 19 million Twitter accounts, both legitimate and malicious, for frequency and content of tweets, (...)   
  •   Malware Update   Wednesday 10 March
      AVG Research Study Reveals More Than 40 Percent of World’s Malicious Websites are Hosted in the United States
    AVG Technologies, makers of the world’s most popular free anti-virus software, today unveiled the results of a research study which shows that – contrary to popular opinion – most malicious websites are hosted on US servers and not in other countries like China. The AVG research study is based on the analysis of threats reported during the last 6 months from AVG’s 110 million worldwide users of its LinkScanner web security product. The research indicates an increase in malware serving web (...)   
  •   Business News   Wednesday 10 March
      French Pavilion secures top spot at Infosecurity
    In 2010, the French Trade Commission UBIFRANCE in London will present 10 innovative French companies on the French Pavilion at the Infosecurity trade show, which will take place at Earl’s Court (in London) from 27 to 29 April 2010. These French companies will showcase their proven expertise in IT security, covering broth products and services. France is home to numerous, internationally renowned players that specialise in protecting high-integrity networks and in supplying IT security (...)   

    • News D-1 |  News D-2 |  News D-3 |  News D-4 |  News D-5 |  News D-6 |  News D-7
    The lectors of our magazine are IS security managers, IS directors and other security professionals.
    Thank’s to all our sponsors
    - GOLD SPONSOR
     [...more]









    ProWebSerenity

    home mail ?
    Home Contact About Prowebserenity

     
    Stay informed with Global Security Mag newsletters
    copyright® 2007 S.I.M. Publicité