<?xml version="1.0" encoding="ISO-8859-1"?>
<?xml-stylesheet type="text/xsl" media="screen" href="/~d/styles/rss2full.xsl"?><?xml-stylesheet type="text/css" media="screen" href="http://feeds.feedburner.com/~d/styles/itemcontent.css"?><!-- generator="FeedCreator 1.7.1" --><rss version="0.91">
    <channel>
        <title>The Tech Herald Security News</title>
        <description><![CDATA[Security News Feed provided by The Tech Herald]]></description>
        <link>http://www.thetechherald.com/security</link>
        <lastBuildDate>Sun, 08 Nov 2009 18:20:01 GMT</lastBuildDate>
        <generator>FeedCreator 1.7.1</generator>
        <atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" href="http://feeds.feedburner.com/thetechherald/security" type="application/rss+xml" /><atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="hub" href="http://pubsubhubbub.appspot.com" /><item>
            <title>Facebook settlement means little in the long run</title>
            <link>http://www.thetechherald.com/article.php/200945/4741/Facebook-settlement-means-little-in-the-long-run</link>
            <description><![CDATA[When the Spam King, sometimes known as Sanford Wallace, got kicked in the teeth with $711.2 million USD in damages, some said this would send a clear message to others following on the same path. Will it really? Will an order from the courts, to a man who has already filed bankruptcy, to pay hundreds of millions in damages, matter in the slightest?]]></description>
            <author>Steve Ragan</author>
            <pubDate>Fri, 06 Nov 2009 19:13:00 GMT</pubDate>
        </item>
        <item>
            <title>Naked Windows 7 vulnerable to Malware if left in default state</title>
            <link>http://www.thetechherald.com/article.php/200945/4740/Naked-Windows-7-vulnerable-to-Malware-if-left-in-default-state</link>
            <description><![CDATA[Sophos did some testing with a retail copy of Windows 7 installed on a clean system. Configuring it to follow the default settings for User Account Control (UAC), and leaving out any anti-Malware protection, Sophos discovered they were able to infect the system with Malware. 

“Unfortunately, despite Microsoft's claims, Windows 7 disappointed just like earlier versions of Windows.]]></description>
            <author>Steve Ragan</author>
            <pubDate>Fri, 06 Nov 2009 17:00:00 GMT</pubDate>
        </item>
        <item>
            <title>Adobe patches Shockwave Player</title>
            <link>http://www.thetechherald.com/article.php/200945/4739/Adobe-patches-Shockwave-Player</link>
            <description><![CDATA[Adobe released patches for five vulnerabilities this week, addressing critical issues discovered in its Shockwave Player. According to Adobe, Shockwave Player versions 11.5.1.601 and earlier are impacted. 

Nicolas Joly, of VUPEN Security, discovered all but one of the five vulnerabilities disclosed by Adobe. The first one, according to a VUPEN Security advisory, centers on an invalid index when handling certain Shockwave content.]]></description>
            <author>Steve Ragan</author>
            <pubDate>Fri, 06 Nov 2009 16:30:00 GMT</pubDate>
        </item>
        <item>
            <title>SSL flaw allows man-in-the-middle attacks</title>
            <link>http://www.thetechherald.com/article.php/200945/4738/SSL-flaw-allows-man-in-the-middle-attacks</link>
            <description><![CDATA[A vulnerability in the SSL protocol is causing a bit of stir after it was discovered that the flaw would allow an attacker to inject themselves into the authenticated SSL communications path and execute commands. Compounding the issue is the fact that once the attack has started, both the server and the browser generally have no idea that their session has been hijacked.]]></description>
            <author>Steve Ragan</author>
            <pubDate>Fri, 06 Nov 2009 16:10:00 GMT</pubDate>
        </item>
        <item>
            <title>The Pirate Bay effect causes piracy related sites to surge</title>
            <link>http://www.thetechherald.com/article.php/200945/4723/The-Pirate-Bay-effect-causes-piracy-related-sites-to-surge</link>
            <description><![CDATA[The number of new file-sharing sites hosting pirated copyrighted content skyrocketed over the last three months, according to McAfee's Q3 Threats Report. The attempted closure of the infamous Pirate Bay site spawned clones and scams as criminals used the hype to spread Malware. 

"The attempted shut down of The Pirate Bay led to an explosion of similar sites, many of which are malicious," said Dave Marcus, director of security research and communications for McAfee Labs.]]></description>
            <author>Steve Ragan</author>
            <pubDate>Tue, 03 Nov 2009 17:31:00 GMT</pubDate>
        </item>
        <item>
            <title>Facebook password scam circulates online</title>
            <link>http://www.thetechherald.com/article.php/200944/4693/Facebook-password-scam-circulates-online</link>
            <description><![CDATA[Update 2:

Just a quick note that these emails are now using both MySpace and Facebook.
Update: 

Cloudmark, a security vendor reviewed in the past by The Tech Herald who focuses on email-based threats, said they are sill seeing evidence of this scam.
Cloudmark said they first noticed the malicious emails on Monday, just before 4PM EST.]]></description>
            <author>Steve Ragan</author>
            <pubDate>Tue, 03 Nov 2009 16:59:00 GMT</pubDate>
        </item>
        <item>
            <title>M86 Security snatches up Finjan in undisclosed deal</title>
            <link>http://www.thetechherald.com/article.php/200945/4722/M86-Security-snatches-up-Finjan-in-undisclosed-deal</link>
            <description><![CDATA[M86 Security, previously known as Marshal8e6 after a 2008 merger of 8e6 Technologies and Marshal, has acquired security vendor Finjan in a deal that is mostly undisclosed. This recent merger will combine all of Finjan’s gateway and SaaS-based solutions into M86’s line of Web and Email protection offerings. 

At the time the deal was announced, the overall purchase price and source of funding was not released. However, while the details are mostly in the dark, M86 has had a busy year.]]></description>
            <author>Steve Ragan</author>
            <pubDate>Tue, 03 Nov 2009 16:58:00 GMT</pubDate>
        </item>
        <item>
            <title>Profile: PhoneFactor – a free twist to two-factor authentication</title>
            <link>http://www.thetechherald.com/article.php/200945/4720/Profile-PhoneFactor-–-a-free-twist-to-two-factor-authentication</link>
            <description><![CDATA[Recently, we talked to a company that covers security from a different perspective. They offer a service that enables two-factor authentication with a device that almost everyone on the planet has, a cellular phone. While others can offer this service as well, this company starts with a free offering, and then as a business grows, they can pay to add more coverage. 

PhoneFactor is a two-factor authentication security provider based in Overland Park, Kansas.]]></description>
            <author>Steve Ragan</author>
            <pubDate>Mon, 02 Nov 2009 21:33:00 GMT</pubDate>
        </item>
        <item>
            <title>Ten things to keep in mind when evaluating remote users</title>
            <link>http://www.thetechherald.com/article.php/200945/4719/Ten-things-to-keep-in-mind-when-evaluating-remote-users</link>
            <description><![CDATA[When it comes to the workplace, IT has to deal with remote users. It’s a fact of life, and one of the reasons why endpoint security consumes a good deal of time and effort from the IT department. Jeff Hughes from Lumension recently gave us a list of ten things to consider during security evaluations of remote users. 

If you’re reading this, there’s a good chance you’re doing so on a laptop. Laptops are a considerable part of an IT department’s budget, and are everywhere.]]></description>
            <author>Steve Ragan</author>
            <pubDate>Mon, 02 Nov 2009 21:30:00 GMT</pubDate>
        </item>
        <item>
            <title>Second Facebook attack discovered sending 500 emails per second</title>
            <link>http://www.thetechherald.com/article.php/200944/4705/Second-Facebook-attack-discovered-sending-500-emails-per-second</link>
            <description><![CDATA[Facebook users are being targeted for the second time this week thanks to a new Phishing campaign kicked off yesterday. This new attack uses a two layer approach, the first goal is to rob a user of their Facebook username and password and then get them to install a variant of the ZBot Trojan. 

Earlier this week, we brought you the story of an email making rounds online that contained a malicious attachment.]]></description>
            <author>Steve Ragan</author>
            <pubDate>Thu, 29 Oct 2009 17:00:00 GMT</pubDate>
        </item>
    </channel>
</rss>
