Recent articles by Dan Kaplan

Apple iCal vulnerability offers malware risk

Apple iCal vulnerability offers malware risk

Three vulnerabilities in Apple's iCal personal calendar application could enable remote attackers to install malicious code on victim's machines.
Dan Kaplan May 22 2008 9:56AM Security
Phishers turn to legit sites to steal information

Phishers turn to legit sites to steal information

Normally, phishers have a short window of opportunity in which to conduct their attacks before service providers take the rogue sites offline. Now, they have found a new way to lengthen their assaults.
Dan Kaplan May 22 2008 9:56AM Security
Debian random key generator flaw could persist

Debian random key generator flaw could persist

Even though a vulnerability in the OpenSSL library used to generate key pairs on Debian-based Linux distributions has been fixed, IT administrators will be hard-pressed to ensure each key is unbreakable, a security researcher said this week.
Dan Kaplan May 21 2008 8:55AM Security
Investigators take down mass phishing ring

Investigators take down mass phishing ring

Thirty-eight people, including a host of U.S. residents and foreign nationals, have been charged in connection to two international phishing operations that preyed on unsuspecting bank customers, investigators announced Monday.
Dan Kaplan May 20 2008 1:43PM Security
Team of Spanish hackers arrested

Team of Spanish hackers arrested

Spanish authorities charged a team of young hackers with infiltrating more than 20,000 web pages, including one belonging to NASA.
Dan Kaplan May 20 2008 8:32AM Security
Microsoft investigates new Internet Explorer zero-day

Microsoft investigates new Internet Explorer zero-day

A security researcher said he has located a zero-day vulnerability in a printing feature on Internet Explorer that could allow remote attackers to execute malicious code.
Dan Kaplan May 19 2008 12:02AM Security
PCI standard version 1.2 expected out in October

PCI standard version 1.2 expected out in October

The organisation charged with directing the Payment Card Industry Data Security Standard (PCI DSS) announced the second version of the credit card protection guidelines is scheduled for an October release.
Dan Kaplan May 16 2008 10:00AM Security
A study in contrast: TJX and Hannaford

A study in contrast: TJX and Hannaford

Dan Kaplan May 12 2008 12:01PM Security
Microsoft to push out four patches in May

Microsoft to push out four patches in May

Microsoft announced late Thursday that it plans to push out four patches, three to address critical vulnerabilities, in Tuesday's monthly security update.
Dan Kaplan May 12 2008 10:09AM Security
Rare SCADA vulnerability discovered

Rare SCADA vulnerability discovered

Researchers have discovered a rare bug in a Windows-based control software package used by as many as one-third of the world's industrial plants.
Dan Kaplan May 9 2008 10:05AM Security
Fake P2P media files lead to adware attack

Fake P2P media files lead to adware attack

Researchers at McAfee said they have detected the largest outbreak of malware in three years, an infection impacting hundreds of thousands of users whose machines contain poisoned media files.
Dan Kaplan May 8 2008 9:53AM Security
Yahoo and McAfee team to secure search results

Yahoo and McAfee team to secure search results

McAfee and Yahoo have joined forces to cleanse search results and identify websites that may be malicious in nature.
Dan Kaplan May 7 2008 10:21AM Security
A reason not to celebrate: Spam turns 30

A reason not to celebrate: Spam turns 30

Happy birthday, spam. Saturday marked 30 years to the day when the first spam email was delivered.
Dan Kaplan May 5 2008 10:59AM Security
From Interop: Be mindful of vendors' motives

From Interop: Be mindful of vendors' motives

IT security vendors' sole purpose is to generate revenue -- not offer complete security -- and they will only create solutions to stop dangerous threats when they are incentivised to do so, the principal security strategist for IBM Internet Security Systems said Wednesday at Interop in Las Vegas.
Dan Kaplan May 1 2008 10:36AM Security
From Interop: Securing Wi-Fi must be priority

From Interop: Securing Wi-Fi must be priority

As the use of Wi-Fi by businesses becomes more pervasive, IT departments must rethink their wireless security strategy to combat threats, a panel said Tuesday at the Interop conference in Las Vegas.
Dan Kaplan May 1 2008 10:36AM Security
Securing Wi-Fi must be priority

Securing Wi-Fi must be priority

As the use of Wi-Fi by businesses becomes more pervasive, IT departments must rethink their wireless security strategy to combat threats, a panel said Tuesday at the Interop conference in Las Vegas.
Dan Kaplan Apr 30 2008 2:19PM Security
Another Apple QuickTime bug reported

Another Apple QuickTime bug reported

US-CERT has issued an alert concerning a new zero-day vulnerability in the Apple QuickTime media player.
Dan Kaplan Apr 25 2008 12:32PM Security
After breach, Hannaford details IT security remodel

After breach, Hannaford details IT security remodel

Hannaford Bros. plans to implement millions of dollars of new technology that will effectively overhaul its IT security infrastructure and allow the recently breached supermarket chain to exceed data security requirements, the company and industry experts said.
Dan Kaplan Apr 24 2008 10:00AM Security
XSS flaw on Obama page sends visitors to Clinton site

XSS flaw on Obama page sends visitors to Clinton site

The battle between Democratic presidential hopefuls Barack Obama and Hillary Rodham Clinton extended to cyberspace when a prankster over the weekend exploited a cross-site scripting (XSS) vulnerability on the website of the Illinois senator to redirect traffic to Clinton's homepage.
Dan Kaplan Apr 23 2008 10:11AM Security
Clothing retailer settles with FTC over credit card breach

Clothing retailer settles with FTC over credit card breach

The Federal Trade Commission has approved a final consent order that settles charges an online clothing retailer failed to properly secure its customers' personal information.
Dan Kaplan Apr 22 2008 10:00AM Security

Log In

  |  Forgot your password?