|
Multifactor authentication |
|
Monday, 21 August 2006 |
This week's Oxygen3 24h-365d has reported the news summarized below.
- TruPreventTM Technologies detect the first worm to use the Microsoft MS06-040 vulnerability (08/14/06).
The behavioral analysis of TruPreventTM Technologies has detected and blocked Oscarbot.KD (CME-482), the first worm that exploits the Microsoft MS06-040 vulnerability to infect systems, allowing a remote attacker to take a series of malicious actions on compromised computers. Given that these technologies detect the worm without the need to have identified it previously, clients that have them installed were protected from the moment Oscarbot.KD first appeared.
- Multifactor authentication (08/15/06)
Today most Internet services require users to authenticate using the simple system of username and password. The emergence of malware specialized in stealing these credentials, such as keyloggers or banker Trojans is giving rise to more widespread use of multifactor authentication.
-Physical information security in corporate environments (08/16/06)
When we talk about IT security we normally refer to logical security i.e. software. However, and particularly in large corporations, more attention should be paid to the physical security of IT systems and the threats to which they are exposed.
- Security update for IBM HTTP Server (08/17/06)
IBM has published a series of security patches to fix a vulnerability in its web server. Users must upgrade IBM HTTP Server versions 1.3.28 and 2.X for Windows and HP-UX platforms, and versions 6.x for Windows. The problem stems from a vulnerability in mod_rewrite, the web server module that allows rules to be established to rewrite URLs on the fly..
- Vulnerabilities in MySQL (08/19/06)
MySQL, the popular open-source database management system, has announced the correction of two vulnerabilities in in the forthcoming 5.0.25 version.
|