The SC Magazine Newswire

December 2, 2008 — Click here to view this newsletter online

Principal Sponsor - HP

"ESG security analyst Jon Oltsik comments, "A slapdash approach to security management is no longer adequate". Find out why in this HP-sponsored webinar based on research with hundreds of security professionals. Click here to discover the latest trends and where you rank"

Click here for more information.

Digital Download - Deflecting data theft, sponsored by netForensics

Date: Tuesday, February 12, 2008
Time: 2:00 p.m. EST/11:00 a.m. PST

A huge issue for all organizations today is the threat of data theft or exposure. In the January issue, the SC Magazine Data Breach Survey revealed just some of the issues surrounding the growing problem of data exposure. We talk to experts about this problem and find out what areas of their information security programs the C-level suite can improve upon to help deflect data thieves.

Featured speakers
Howard A. Schmidt, president and CEO, R & H Security Consulting LLC
Rich Baich, principal, Deloitte & Touche LLP

Click here to register.

Latest News

Oracle patch cycle includes first 11g database fix

Jim Carr January 15, 2008

Oracle today delivered 26 security fixes spanning the company's entire product family, including the first for its new 11g database, as part of its latest quarterly Critical Patch Update (CPU).

Apple unveils QuickTime 7.4, fixes four flaws

Dan Kaplan January 15, 2008

Apple today released its latest QuickTime version to plug four vulnerabilities that, if exploited, could install malicious code on users' machines.

Rogue file-cleaning application targets Mac users

Dan Kaplan January 15, 2008

A bogus file-cleaning application trying to induce downloads by using scare tactics is now targeting the Mac community, researchers said today.

SANS: Multiple-exploit attacks on trusted sites tops '08 threat list

Jack Rogers January 15, 2008

Script-based attacks that cycle through multiple exploits and target trusted websites, increasingly sophisticated botnets, and cyberespionage that uses phishing to steal terabytes of data head SANS Institute's Top 10 list of 2008 security menaces.

Attack injects malicious JavaScript into e-commerce sites

Jim Carr January 15, 2008

A massive attack related to the recent break-in of an internet hosting company has injected malicious JavaScript code into several hundred e-commerce websites and compromised several large web hosting facilities, according to Trend Micro.

MySpace page laced with fake Microsoft update

Dan Kaplan January 14, 2008

McAfee researchers are warning of a new MySpace phishing campaign in which users receive "friend" requests that attempt to infect them with assorted malware disguised as a Microsoft update.

House Oversight panel slams TSA for lax website security

Frank Washkuch Jr. January 14, 2008

A Congressional committee has slammed the Transportation Security Administration (TSA) for giving a no-bid contract to a website developer that failed to implement cybersecurity procedures to protect the personal information of travelers.

JavaScript toolkit hit 10,000 websites in December: Finjan

Frank Washkuch Jr. January 14, 2008

More than 10,000 trusted websites were infected last month by the random js toolkit, elusive crimeware designed to send victims' personal information to attackers via the web, according to Finjan.

Silentbanker trojan dupes bank customers into sending money

Jack Rogers January 14, 2008

A researcher has warned that the Silentbanker trojan apparently is able to circumvent two-factor authorization and inject itself into the middle of ongoing banking transactions, duping bank customers into sending money to attackers while the customer proceeds with what looks like a valid transaction.

Colombian pleads guilty to internet-based ID theft scam

Jim Carr January 14, 2008

A Colombian citizen pleaded guilty to a 16-count indictment involving an internet-based fraud scam to steal the personal information from more than 600 people, according to the U.S. Attorney's office.

Featured White Paper - Protecting Documents in the Enterprise

This white paper will discuss the enormous cost of data breaches, the rising importance of data security, and common misconceptions that exacerbate the problem of protecting your company's most important and confidential information.

Click here for the white paper.

Principal Sponsor - HP

Advertise
For details of how to place an advert in The SC Magazine Newswire, please send a message to Mike Shemesh

Subscribe
If you were sent this by a colleague and wish to subscribe to The SC Magazine Newswire, please click here.

Unsubscribe
To unsubscribe from The SC Magazine Newswire click here.
To manage your entire SC Magazine profile login to your account.

You are subscribed as: $EMAIL$

To contact Haymarket Media for general questions or unsubscribe problems, please e-mail web@haymarketmedia.com

All SC Magazine newsletters are sent from the domain "haymarket.puresendmail.com". When configuring e-mail or spam
filter rules, please use this domain name.

Haymarket Media Inc
114 West 26th St 4th floor
New York, NY 10001

© 2008 Haymarket Media Inc.