Wednesday, April 1, 2009

Conficker activation passes quietly, threat isn't over; UltraDNS service knocked offline by attack

All the week's news and views about Security, 04/01/09

Conficker activation passes quietly, but threat isn't over
http://www.networkworld.com/nlsecuritynewsal189745

By Sumner Lemon

An expected activation of the Conficker.c worm at midnight on
April 1 passed without incident, despite sensationalized fears
that the Internet itself might be affected, but security
researchers said users aren't out of the woods yet.Read full
story http://www.networkworld.com/nlsecuritynewsal189745

Senior Editor Ellen Messmer covers security for Network World.
E-mail Ellen mailto:emessmer@nww.com .

_______________________________________________________________
This newsletter is sponsored by Oracle
The Cost of Securing your Database

Former Gartner analyst and founder of security consulting firm
Securosis, Rich Mogull will explain how to make the most of IT
security and compliance dollars by ensuring your databases are
secure. Learn concrete tips and recommendations in this Live
Webcast Thursday, April 16, 2009 at 2:00 p.m. ET/11:00 a.m. PT.
entitled "Cost-Efficient Security and Compliance." Register
Today.
http://adserver.fattail.com/redir/redirect.asp?CID=293714
_______________________________________________________________


Create Your Own Agenda at IT Roadmap. Customize a day of learning
just for yourself! Attend IT Roadmap Conference & Expo and
explore new solutions and examine new technology across 10 relevant
areas of IT. Security, Virtualization, SaaS, VoIP, Green IT and
more. 10 U.S. cities in '09. Next up.. NYC-Feb, Denver-March,
Chicago-April. Select your city, register and attend free!
http://www.nww.com/rpgx.jsp?c=XU1PTA1014Z3905

_______________________________________________________________

RELATED EDITORIAL LINKS

UltraDNS service knocked offline by attack
http://www.networkworld.com/nlsecuritynewsal189746 NeuStar
confirmed that its UltraDNS managed DNS service was knocked
offline for several hours Tuesday morning by a distributed
denial of service attack.

Blocking Conficker domain names: Will it work?
http://www.networkworld.com/nlsecuritynewsal189747 On the eve
of Conficker.C's expected activation date, April 1, more than
100 providers of top-level domains around the world are trying
to block the registration of tens of thousands of domain names
that the Conficker worm could start using Wednesday to get
botnet instructions.

FAQ: Conficker clock ticks toward April 1 deadline
http://www.networkworld.com/nlsecuritynewsal189748 When a
computer worm reaches the critical mass necessary to make it
onto last Sunday's 60 Minutes, you know it's either a
once-in-a-blue-moon threat or something that's been hyped beyond
belief.

Conficker's patch gambit exposed by researchers
http://www.networkworld.com/nlsecuritynewsal189749 One
technique deployed by the Conficker worm is to patch vulnerable
Microsoft-based computers it has invaded. But University of Bonn
researchers recently discovered that the Conficker patch is
sufficiently different than the official Microsoft patch, giving
security firm Qualys the opportunity to fine-tune its scanner to
pinpoint computers where Conficker lies hidden under its own
protective patch.

Conficker Set to Strike: Protect Yourself with These Tips
http://www.networkworld.com/nlsecuritynewsal189750 Security
watchdogs warn that millions could be affected by the Conficker
worm tomorrow - unfortunately this is not in an April Fool's Day
joke. Over 9 million PCs are already infected and a new variant
of the virus could threaten those who didn't patch their PCs
with the latest security updates.

What you need to know about the Conficker worm
http://www.networkworld.com/nlsecuritynewsal189751 If you've
been paying attention to general computer news, you may have
read about the Conficker worm, and what may (or may not) happen
to Windows PCs that are infected with Conficker on April 1. The
worm has received a lot of attention, leading more than a few
Mac users to ask about the worm's impact on OS X. Mac security
maker Intego received so many inquiries that the company added a
Conficker entry to its blog.

Cloud Security Alliance formed to promote best practices
http://www.networkworld.com/nlsecuritynewsal189752 A group
calling itself the Cloud Security Alliance announced its
formation Tuesday, with eBay and ING as founding members.

Fools and jokers coming to a network near you
http://www.networkworld.com/nlsecuritynewsal189753 While there
is little known about the origins of April Fools' Day, the list
of gags go on and on and this year is certain to add to the list
of potty-themed Wii games, scratch-and-sniff Web sites and
police-finding mobile applications.

Fedora 11 beta posted with new security, developer features
http://www.networkworld.com/nlsecuritynewsal189754 The Fedora
Project released a beta of the next version of its free Linux OS
with new security, desktop and developer features that provide a
glimpse of the direction Red Hat could take with its enterprise
Linux distribution.

Fidelis spies data leakage via social networking sites
http://www.networkworld.com/nlsecuritynewsal189755 Fidelis
Security Systems is looking to help enterprises monitor and
block specific content that employees might try to post in
social networking arenas.

Fraud in Canadian firms mostly an 'inside job'
http://www.networkworld.com/nlsecuritynewsal189756 Who is the
most likely suspect for fraud in Canadian organizations?

China denies cyber spy network charges
http://www.networkworld.com/nlsecuritynewsal189757 China on
Tuesday denied suggestions it could be involved in a
cyberespionage ring that attacked computers worldwide from
servers mostly based in the country.

Video: Europe probes online tracking methods
http://www.networkworld.com/nlsecuritynewsal189758 European
Commission officials launch investigation into the growing use
of deep packet inspection techniques that let broadband
providers track online activity, even if consumers delete
tracking cookies.

Training needed to quell breaches
http://www.networkworld.com/nlsecuritynewsal189759 As many
highly publicized security breaches demonstrate, sometimes the
greatest threat to an organization comes from within when
well-meaning employees make mistakes such as losing an
unencrypted laptop or posting personally identifiable
information online.

Network World on Twitter http://twitter.com/NetworkWorld Get
our tweets and stay plugged in to networking news.


TOP STORIES | MOST DUGG STORIES
http://www.networkworld.com/nlsecuritynewsal189760

1. Conficker on April 1st: Eve of destruction or big joke?
http://www.networkworld.com/nlsecuritynewsal189761

2. Mobile Skype: The end of cellular as we know it
http://www.networkworld.com/nlsecuritynewsal189762

3. Top 10 technology skills
http://www.networkworld.com/nlsecuritynewsal189763

4. Conficker's patch gambit exposed by researchers
http://www.networkworld.com/nlsecuritynewsal189764

5. The 10 worst Microsoft product names of all time
http://www.networkworld.com/nlsecuritynewsal189765

6. Deep computer-spying network touched 103 countries
http://www.networkworld.com/nlsecuritynewsal189766

7. Feds give $50 billion IT services deal a second try
http://www.networkworld.com/nlsecuritynewsal189767

8. Preparing for the Pre: Palm and Sprint must get it right
http://www.networkworld.com/nlsecuritynewsal189768

9. Seven reasons MPLS has been wildly successful
http://www.networkworld.com/nlsecuritynewsal189769

10. Fake security software scammers jump on Conficker
http://www.networkworld.com/nlsecuritynewsal189770

http://twitter.com/NetworkWorld

MOST-WATCHED VIDEO1. Students learn through robot battles
http://www.networkworld.com/nlsecuritynewsal189771


_______________________________________________________________
This newsletter is sponsored by Oracle
The Cost of Securing your Database

Former Gartner analyst and founder of security consulting firm
Securosis, Rich Mogull will explain how to make the most of IT
security and compliance dollars by ensuring your databases are
secure. Learn concrete tips and recommendations in this Live
Webcast Thursday, April 16, 2009 at 2:00 p.m. ET/11:00 a.m. PT.
entitled "Cost-Efficient Security and Compliance." Register
Today.
http://adserver.fattail.com/redir/redirect.asp?CID=293714
_______________________________________________________________

ARCHIVE LINKS

Network Security Research Center
http://www.networkworld.com/topics/security.html : For breaking
security news, news analysis, blogs, newsletters, product tests,
and more.

Security Strategies Newsletter
http://www.networkworld.com/newsletters/sec/index.html :
Norwich University Associate Professor M. E. Kabay takes the
long view of security issues and resources for ensuring your
network, computer and facilities remain secure. View the archive
and to sign up for the newsletter here
http://www.networkworld.com/newsletters/sec/index.html
_______________________________________________________________

BONUS FEATURE


The Need for an Adaptive Threat Management Architecture - Live
March 31. Create a more secure and efficient network. Find out how
in this Live Webcast, "The Need for an Adaptive Threat Management
Architecture." Join us on Tuesday, March 31, 2009, at 1:00 p.m.
ET/10:00 a.m. PT. Get real-world advice from Jon Oltsik, senior
analyst at consulting firm Enterprise Strategy Group. Register
today for this Live Webcast.
http://www.nww.com/rpgx.jsp?c=XU1PTA1012Z4159


_______________________________________________________________

PRINT SUBSCRIPTIONS AVAILABLE

You've got the technology snapshot of your choice delivered to
your inbox each day. Extend your knowledge with a print
subscription to the Network World newsweekly, Apply today at
http://www.subscribenw.com/nl2
http://www.networkworld.com/nlsecuritynewsal166186

International subscribers, click here:
http://www.subscribenw.com/dp30
https://www.subscribenww.com/cgi-win/nww.cgi?paid&p=ADP608NW
_______________________________________________________________

SUBSCRIPTION SERVICES

To subscribe to any Network World e-mail newsletters, go
to:http://www.networkworld.com/nl/nl_subscribe.jsp?=NLnl09b
http://www.networkworld.com/nl/nl_subscribe.jsp?=NLnl09b

To unsubscribe to any Network World e-mail newsletters, go to:
http://www.networkworld.com/nlsecuritynewsal180435

To change your e-mail address, go to:
http://www.networkworld.com/nl/nl_changeemail.jsp

Subscription questions? Contact us by replying to this message.

This message was sent to:4bloggermail@gmail.com
Please use this address when modifying your subscription.
_______________________________________________________________

Inquiries to: Network World, Inc., 492 Old Connecticut Path,
Framingham, MA 01701

For advertising information, write Susan Cardoza, VP/General
Manager Online, at: mailto:sponsorships@nwfusion.com

Copyright Network World, Inc., 2009