Virtualization security needed – now!; Google Gadgets can be misused by phishers

Opinion
Aug 20, 20072 mins

Latest security news.

Virtualization security needed – now!, 08/20/07: Experts say it’s only a matter of time before malware writers weasel their way into the core of a virtual server platform. Here’s how to stop them.

Researcher: Google Gadgets can be misused by phishers, 08/17/07: The domain used to host small Google Gadget applications written by Web developers could be misused by phishers, a Web security researcher said Friday.

Privacy breaches force online bill-payment company out of business, 08/17/07: Small mistakes can have big consequences. Last April when a network technician working for Bellevue, Wash.-based Web content-management company Verus failed to set up a firewall properly as part of an online bill-payment service for hospitals, the mistake exposed patient data from at least a half-dozen hospitals across the country.

Google opens click-fraud Web site, 08/17/07: Google has unveiled a Web site “resource center” focused on the thorny issue of click fraud, which many consider a potential threat to the company’s main source of revenue: pay-per-click advertising.

IOS vulnerbility affects ISP routers: Heise Security is reporting of a denial-of-service vulnerability in Cisco IOS that could be exploited to reboot ISP routers.

IOS security feature defends against day zero attacks: Automatic Signature Extraction (ASE) is a new feature in IOS release 12.4(15)T1 that is designed to find and stop worms and viruses on the network, day zero.

Sourcefire acquires ClamAV project, 08/17/07: Sourcefire on Friday announced it has acquired the open-source ClamAV gateway antivirus and antimalware project for an undisclosed price.

Study finds Internet rife with attack codes, 08/16/07: Even seemingly safe web addresses are rife with attack code aiming at vulnerable clients, according to a new study from the Honeynet Project. The study also found that methods such as blacklists can be surprisingly successful in stopping client-side attacks.

EBay says Skype was not attacked, 08/17/07: Skype has not been attacked, eBay said Friday, dispelling rumors that Russian hackers took down its popular online telephony service.