Latest security news.
Jobs says Apple will fight iPhone unlocking hacks, 09/18/07: Apple CEO Steve Jobs said Tuesday that it’s his company’s job to stymie hackers who try to unlock the iPhone — the first time the company has officially said it would fight attempts to use the popular device on unauthorized networks.
Video: Security Buzz: What the experts think: Speakers at The Security Standard conference weigh in on what they feel is the biggest security threat today. Featuring: Whitfield Diffie (Sun), Steve Hanna (Juniper), Scott Weiss (IronPort) and Richard Palmer (Cisco).
Data-loss prevention tools on tap from Orchestria, 09/19/07: Orchestria on Wednesday announced its foray into the data-loss prevention market with a hardware and software package designed to help companies prevent sensitive data and intellectual property from leaving the organization without authorization
Fear of insider threats hits home, 09/19/07: The more money that companies spend on securing their IT operations from external attack, the more it seems they become aware that the potential threat posed by their own employees remains their most significant risk.
Obsolete WEP Wi-Fi gets new security shield , 09/19/07: Wi-Fi security vendors are releasing new products to protect customers against weaknesses in the WEP encryption scheme, even though it has been obsolete for years.
Privacy groups: Google’s call for standard not enough, 09/17/07: The U.S. government still needs to block or impose conditions on Google’s acquisition of online advertising server DoubleClick, despite Google’s call for global privacy standards, three privacy groups said Monday.
BigFix announces endpoint-security offering, 09/18/07: Management software maker BigFix on Tuesday announced a new endpoint-protection offering.
Bit9 upgrades endpoint-security offering, 09/18/07: Bit9 on Tuesday announced an upgrade to its endpoint-protection software that implements automatic whitelisting of approved applications and devices.
Enterasys upgrades NAC to handle guest devices, 09/18/07: Enterasys is issuing a new version of its NetSight management suite that lets its NAC system set policies for unmanaged devices such as guest laptops.
Using SAN-enabled certificates for OCS and unified messaging: Microsoft Subnet blogger Alex Lewis says, “There seems to be a limited understanding of certificates that allow Subject Alternative Names.” These allow “a single cert-set for Exchange, OCS and all unified messaging.”
Buzzblog: Security pro warned Ameritrade about leak way back in Jan. ’06: In other words, it started much earlier and went on much longer than has been reported. An IT security pro has e-mails showing he warned Ameritrade repeatedly in Jan. ’06 that customer data had been compromised. His missives were met with assurances that such couldn’t be the case. It was, but 6.2 million clients didn’t find out until last Friday.
Chat with Amazon.com’s CTO live
If ever there were a man that knew how to eek out capacity and secure a data center, it would be Werner Vogels, vice president & CTO of Amazon.com. Join him for a live chat on Monday Oct. 1 from 2 p.m. – 3 p.m. EDT.
