Thursday, February 19, 2009

3 Ways Twitter Security Falls Short; CVS spanked; Hackers break into gov't travel site

All the week's news and views about Security, 02/19/09

3 Ways Twitter Security Falls Short
http://www.networkworld.com/nlsecuritynewsal183108

The popular micro-blogging platform Twitter continues its
explosive growth. Twitter experienced a 900 percent increase in
active users in the last year, according to a recent blog post
from Biz Stone, the company's co-founder. People are
increasingly using it to get breaking news updates, to
collaborate with colleagues remotely, and connect with friends
on an up-to-the-minute basis. Some businesses are using it as a
new promotion and marketing tool.Read full story
http://www.networkworld.com/nlsecuritynewsal183108

Senior Editor Ellen Messmer covers security for Network World.
E-mail Ellen mailto:emessmer@nww.com .

_______________________________________________________________
This newsletter is sponsored by Brocade
Connect, Merge & Manage your IT Resources

The Brocade Fibre Channel HBAs represent a new class of server
connectivity product that is interoperable with the vast
majority of the world's SAN switch ports and that can leverage
Brocade Advanced Fabric Services functionality. As a result,
these HBAs provide high-performance, reliable, enterprise-class
server connectivity.
http://adserver.fattail.com/redir/redirect.asp?CID=288821
_______________________________________________________________

Compare Security Information Management Products.
Get side-by-side product comparisons, buying tips, market trend information, case studies and more with Network World's newly enhanced Security Information Management Product Guide. Visit now.
{TEXT1}
_______________________________________________________________

RELATED EDITORIAL LINKS

CVS spanked for customer privacy failures, pays $2.25 million
to settle HIPAA violations
http://www.networkworld.com/community/node/38684 The largest
pharmacy chain in the U.S., CVS Caremark, today settled Federal
Trade Commission charges it failed "to take reasonable and
appropriate security measures to protect the sensitive financial
and medical information of its customers and employees," in
violation of federal law.

Hackers break into gov't travel site, feed users attack code
http://www.networkworld.com/nlsecuritynewsal183109 A travel
reservations Web site used by several federal agencies was
hacked last week, and shunted unsuspecting users to a malicious
domain, according to information Computerworld has obtained.

Security Vendor Breaches: Fallout Justified
http://www.networkworld.com/nlsecuritynewsal183110 Attendees at
last week's ShmooCon security conference were transfixed when
news broke that a hacker breached part of Kaspersky Lab's U.S.
support site by exploiting a flaw in the site's programming.

Hackers steal thousands of Wyndham credit card numbers
http://www.networkworld.com/nlsecuritynewsal183111 Hackers
broke into a computer at Wyndham Hotels and Resorts last July
and stole tens of thousands of customer credit card numbers, the
hotel chain warns.

Facebook's Privacy Flap: What Went Down, What's Next
http://www.networkworld.com/nlsecuritynewsal183112 Facebook may
have done an about-face with its policies on using user data,
but the social network's struggle to balance business with
privacy is far from over.

ATM hack: Organized crime or market forces?
http://www.networkworld.com/columnists/2009/021709-andreas.html
In November of 2008, a single scam netted more than $9m in a
global automated teller machine heist. According to the FBI the
attackers compromised pre-paid payroll cards from RBS WorldPay
and gift cards, launching a coordinated attack against more than
130 ATMs in 49 cities around the world. The cards were exploited
by "cashers" who withdrew money during a single 30-minute
window. If the preliminary findings of the FBI turn out to be
true, this could represent one of the most organized attacks in
cybercrime history.

Accused rogue admin Terry Childs makes his case
http://www.networkworld.com/nlsecuritynewsal183113 He's been in
jail for seven months now, but former San Francisco network
administrator Terry Childs says he's going to keep fighting to
prove he's innocent of computer crime charges.

Hackers jump on newest IE7 bug
http://www.networkworld.com/nlsecuritynewsal183114 Attackers
are already exploiting a bug in Internet Explorer 7 (IE7) that
Microsoft Corp. patched just last week, security researchers
warned Tuesday.

Sun offers open-source encryption key management protocol
http://www.networkworld.com/nlsecuritynewsal183115 Sun
announced today that it is throwing its hat into the standards
arena, proposing that its open-source key management API be used
as a universal way to allow encrypting devices to communicate
with key management systems.

Symantec to release Endpoint Virtualization Suite this spring
http://www.networkworld.com/nlsecuritynewsal183116 Symantec
Tuesday unveiled Endpoint Virtualization Suite, its set of
server-based tools for controlling and delivering laptop and
desktop application environments through flexible online
provisioning.

Trustwave buys NAC vendor Mirage
http://www.networkworld.com/nlsecuritynewsal183117 Managed
security provider Trustwave has bought up independent NAC vendor
Mirage Networks and will add NAC to the list of services
Trustwave provides.

February giveaways from Cisco Subnet http://www.ciscosubnet.com/
and Microsoft Subnet http://www.microsoftsubnet.com/
Up for grabs: One American Express gift card worth $250 from
Global Knowledge; One Microsoft training course worth $2,995
from Global Knowledge; 15 copies each of the hot book
titlesVoice over IP Security, and CCNA Wireless Official Exam
Certification Guideand 15 copies ofExchange Server 2007 How-To:
Real Solutions for Exchange Server 2007 SP1 Administrators.Get
all the entry details here
http://www.networkworld.com/community/node/38032 .


TOP STORIES | MOST DUGG STORIES
http://www.networkworld.com/nlsecuritynewsal183118 1. Nortel exec issues vague promise to detail its reorganization
http://www.networkworld.com/nlsecuritynewsal183119

2. 9 dirty tricks: Social engineers' favorite pick-up lines
http://www.networkworld.com/nlsecuritynewsal183120

3. Social network sites vary greatly on availability
http://www.networkworld.com/nlsecuritynewsal183121

4. SolarWinds offers free Cisco IP SLA monitoring tool
http://www.networkworld.com/nlsecuritynewsal183122

5. Vodafone to sell second HTC Google phone
http://www.networkworld.com/nlsecuritynewsal183123

6. How to build your own supercomputer
http://www.networkworld.com/nlsecuritynewsal183124

7. Spammers break Hotmail's CAPTCHA yet again
http://www.networkworld.com/nlsecuritynewsal183125

8. Microsoft strives for mobile mindshare with Windows Mobile 6.5
http://www.networkworld.com/nlsecuritynewsal183126

9. Is Cisco short of cash in the U.S.?
http://www.networkworld.com/nlsecuritynewsal183127

10. LiMo's Linux-based mobile OS stack makes gains
http://www.networkworld.com/nlsecuritynewsal183128

11.
MOST-WATCHED VIDEO:
Portable gadget helps visually impaired
http://www.networkworld.com/nlsecuritynewsal183129


_______________________________________________________________
This newsletter is sponsored by Brocade
Connect, Merge & Manage your IT Resources

The Brocade Fibre Channel HBAs represent a new class of server
connectivity product that is interoperable with the vast
majority of the world's SAN switch ports and that can leverage
Brocade Advanced Fabric Services functionality. As a result,
these HBAs provide high-performance, reliable, enterprise-class
server connectivity.
http://adserver.fattail.com/redir/redirect.asp?CID=288821
_______________________________________________________________

ARCHIVE LINKS

Network Security Research Center
http://www.networkworld.com/topics/security.html : For breaking
security news, news analysis, blogs, newsletters, product tests,
and more.

Security Strategies Newsletter
http://www.networkworld.com/newsletters/sec/index.html :
Norwich University Associate Professor M. E. Kabay takes the
long view of security issues and resources for ensuring your
network, computer and facilities remain secure. View the archive
and to sign up for the newsletter here
http://www.networkworld.com/newsletters/sec/index.html
_______________________________________________________________

BONUS FEATURE


Everybody says "Do more with less!" But no one tells you how. We
will and it costs nothing to find out at IT Roadmap Conference and
Expo. Coming to 10 cities in 09 including New York in February,
Denver in March, Chicago in April.
http://www.nww.com/rpgx.jsp?c=XU1PTA1012Z3907 Register now, attend
free.


_______________________________________________________________

PRINT SUBSCRIPTIONS AVAILABLE

You've got the technology snapshot of your choice delivered to
your inbox each day. Extend your knowledge with a print
subscription to the Network World newsweekly, Apply today at
http://www.subscribenw.com/nl2
http://www.networkworld.com/nlsecuritynewsal166186

International subscribers, click here:
http://www.subscribenw.com/dp30
https://www.subscribenww.com/cgi-win/nww.cgi?paid&p=ADP608NW
_______________________________________________________________

SUBSCRIPTION SERVICES

To subscribe to any Network World e-mail newsletters, go
to:http://www.networkworld.com/nl/nl_subscribe.jsp?=NLnl09b
http://www.networkworld.com/nl/nl_subscribe.jsp?=NLnl09b

To unsubscribe to any Network World e-mail newsletters, go to:
http://www.networkworld.com/nlsecuritynewsal180435

To change your e-mail address, go to:
http://www.networkworld.com/nl/nl_changeemail.jsp

Subscription questions? Contact us by replying to this message.

This message was sent to:4bloggermail@gmail.com
Please use this address when modifying your subscription.
_______________________________________________________________

Inquiries to: Network World, Inc., 492 Old Connecticut Path,
Framingham, MA 01701

For advertising information, write Susan Cardoza, VP/General
Manager Online, at: mailto:sponsorships@nwfusion.com

Copyright Network World, Inc., 2009