icWales - Hackers stole from bank customer

Nailing PIN security

Standards on the way for encrypting data on tape, disk

Microsoft's security patches hit snag

Microsoft's security patches hit snagLatest updates appear to have overwritten a file used to keep track of approved updatesBy Robert McMillan, IDG News ServiceDecember 14, 2005 print thisPrinter Friendly VersionSome users of Microsoft (Profile, Products, Articles) Corp.'s Software Update Services (SUS) may be experiencing a minor annoyance, thanks to a glitch in the company's latest security patches, released Tuesday. The latest update may be changing the status of software updates that had been previously approved by administrators who use the service, according to Microsoft.SPONSORIT STRATEGY GUIDE: BUSINESS PROCESS MANAGEMENT (BPM)Sponsored by BMC SoftwareSPONSORIT STRATEGY GUIDE: SERVICE-ORIENTED ARCHITECTURESponsored by Flashline"If you synchronize your server after December 12, 2005, all previously approved updates may be unapproved and the status may appear as 'updated,' Microsoft said in a note published Wednesday. (http://support.microsoft.com/?kbid=912307)SUS is used by Microsoft administrators to gain more control over which Microsoft software patches get installed on their network. When a patch has been tested and determined to be appropriate for installation, it can be marked as "approved" and then automatically installed on the PCs being managed by the service.Tuesday's glitch disrupts that process.The problem is that the latest updates appear to have overwritten a file that is used to keep track of approved updates, said Russ Cooper, a scientist at security vendor Cybertrust Inc.Microsoft's note lists a number of work-arounds for this issue, but the simplest solution is to simply restore this file, called Approveditems.txt, from a backup copy, Cooper said."This shouldn't be a big problem for anybody because you're backing up that text file, aren't you?" he said. "But if you're not, be prepared to do a bunch of clicking."Microsoft plans to release a script that will reset these settings to a previous state, the company said.

Microsoft's security patches hit snag | InfoWorld | News | 2005-12-14 | By Robert McMillan, IDG News Service

Former company director admits theft of trade secrets

Dealing With Data Theft After the Fact

Aging computers hobble Homeland Security

The Industry Reacts to FFIEC Guidance on E-Banking Authentication

Card skimmers eyed in Sam's Club data theft - Computerworld

Update: Security breach at Sam's Club exposes credit card data - Computerworld

So much stolen data, so little time - IT Security News - SC Magazine UK

Employees leaking trade secrets via email - vnunet.com

Application Security Principles

Police warn employers of data security threats at Christmas

Application Security Industry Consortium Established to Develop Cross-Industry Application Security Guidelines, Measurements and Methodologies

Bleeding Credit Card Numbers

Small Data Breaches Pose Big Identity Theft Risks

Failures of regulatory compliance

The awful truth about compliance

Identity theft: Safeguarding the real you

Security Imperative - Computerworld

Imprivata ties network and building access to one card

IT security leaders set for key roles

Government data need more security

ID theft risk lower in large-scale security breaches, study says - Computerworld

Schneier on Security: Snake-Oil Research

Hackers steal details of 2,000 charity donors - silicon.com

The never expiring password is a wide open back door in corporate networks