HNS Newsletter Issue 188 - 17.11.2003. http://net-security.org This is a newsletter delivered to you by Help Net Security. It covers weekly roundups of security events that were in the news the past week. ---------------------------------------------------------------- Get Thawte’s NEW Step-by-Step SSL Guide for Apache ---------------------------------------------------------------- In this guide you will find out how to test, purchase, install and use a Thawte Digital Certificate on you Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. Get you copy of this new guide now: http://ad.doubleclick.net/clk;6091061;8369142;h ---------------------------------------------------------------- Table of contents: 1) Security news 2) Vulnerabilities 3) Advisories 4) Articles 5) Reviews 6) Webcasts 7) Conferences 8) Security world 9) Virus news [ Security news ] ---------------------------------------------------------------- RESEARCHERS TO BUILD MODEL OF INTERNET - TO DESTROY IT A team of professors from the University of California-Berkeley and University of Southern California has received a $5.46 million grant to build one of the most realistic models of the Internet - and then wreck it with debilitating hacker attacks. http://www.net-security.org/news.php?id=4000 ORACLE ROW LEVEL SECURITY: PART 1 This paper explores the row level security feature added to Oracle 8i and above, and provides examples. One of the main uses of row level security is to allow all of a company's data to be stored in one database for different departments, or for a hosting company to store data for different companies in one database. http://www.net-security.org/news.php?id=4001 SHOPPERS WARNED OF £110M CARD NOT PRESENT FRAUD The UK's shoppers are being warned to be on their guard after it emerged that Internet fraud is contributing to a £110 million a year racket. http://www.net-security.org/news.php?id=4002 HACKERS REACH DEFENCE FILES: REPORT Hackers have reportedly accessed top-secret files inside the Department of Defence. http://www.net-security.org/news.php?id=4003 PAPER FINDS NEW WIRELESS STANDARD LESS SECURE A new paper by a leading security expert says that the new Wi-Fi Protected Access (WPA) security standard may be less secure, in certain scenarios, than WEP, the wireless standard it was designed to replace. http://www.net-security.org/news.php?id=4004 CRYPTO SYSTEM PROMISES SECURITY OVER FIBER-OPTIC LINES A quantum-key distribution and encryption system developed by Magiq Technologies Inc. and called the Navajo Security Gateway promises unbreakable encryption over existing fiber-optic lines. http://www.net-security.org/news.php?id=4007 AS THE SEASON CHANGES, SO DOES SPAM Spammers have begun targetting those who view the Christmas and holiday season as a time for big spending, the content filtering software firm ClearSwift says. http://www.net-security.org/news.php?id=4008 A PEEK BEHIND THE 'WALLOP' FIREWALL Microsoft Research is looking at how to leverage blogs, RSS feeds, wikis and other social-networking tools. http://www.net-security.org/news.php?id=4009 FBI ON LOOK-OUT FOR FOREIGN GOVERNMENT HACKERS How seriously does the U.S. government take computer intrusion? http://www.net-security.org/news.php?id=4010 COMPUTER VIRUSES NOW 20 YEARS OLD This week computer viruses celebrate 20 years of causing trouble and strife to all types of computer users. http://www.net-security.org/news.php?id=4011 SSL NETWORKING HEATS UP The market is heating up for products that allow secure access to corporate networks based on a widely used browser security technology known as secure sockets layer encryption. http://www.net-security.org/news.php?id=4012 MICROSOFT PREPARES SECURITY ASSAULT ON LINUX Microsoft is preparing a major PR assault over Windows’ perceived security failings in which it will criticise Linux for taking too long to fix bugs, we have learned. http://www.net-security.org/news.php?id=4013 SPAM SLAYER: LAWS WON'T SOLVE EVERYTHING Feds, states take aim at spam, but legislation won't stop the onslaught. http://www.net-security.org/news.php?id=4014 SINGAPORE CLAMPS DOWN ON HACKERS Ultra-strict Singapore has passed some of the world's toughest laws against computer hackers and virus writers, allowing police to arrest suspects before they strike, official documents show. http://www.net-security.org/news.php?id=4015 THE MIND OF A HACKER Marc Maiffret is a hacker. Maiffret started hacking about six years ago, at age 16, when a friend at school introduced him to computers, and he got hooked on a digital-age narcotic: information. http://www.net-security.org/news.php?id=4016 EXPERTS QUESTION WINDOWS PATCH POLICY Microsoft will release a series of security patches after midnight tonight in line with its new policy of releasing patches on a monthly schedule. http://www.net-security.org/news.php?id=4017 KANSAS AUDITORS CRACK 1,000 PASSWORDS The Kansas Health and Environment Department has serious IT security and disaster recovery problems, the state’s legislative auditor has found. http://www.net-security.org/news.php?id=4018 TOP SECURITY OFFICERS FORM THINK TANK A group of top security officers from some of the industry's largest companies will announce Wednesday that they are banding together to form a new global security think tank. http://www.net-security.org/news.php?id=4021 DID HACKERS EXPOSE N-GAGE GAMES? Mobile phone giant Nokia is investigating whether hackers managed to disable security that protects its N-Gage cell phone games. http://www.net-security.org/news.php?id=4022 A VA SCANNER GEEKS WILL LOVE Tenable Network Security's NeVO features impressive vulnerability reports, but lacks administration and management functionality. http://www.net-security.org/news.php?id=4023 HP PUSHES IT MANAGEMENT STRATEGY As part of its "adaptive enterprise" push, Hewlett-Packard on Tuesday announced new services and software for managing information technology operations. http://www.net-security.org/news.php?id=4024 WORLDPAY RECOVERS FROM MASSIVE ATTACK WorldPay's systems are back running normally this week following the most serious and sustained Internet attack on a UK business to date. http://www.net-security.org/news.php?id=4025 SECURE DATA EXCHANGE ON PALM OS 5 This article shows you how to use the Palm OS 5 SSL APIs for secure data communication. http://www.net-security.org/news.php?id=4026 SPAM CLEANING WITH THE BIG BOYS You think you've got spam problems with a hundred or so spam messages a day? Try being an ISP or a business where on a good day you don't get more than a one hundred thousand spam mails a day. http://www.net-security.org/news.php?id=4027 SECURITY A RISK(Y) MANAGEMENT ISSUE “Security is not a technology issue, it is a process issue,” says Meta Group security and risk strategies VP Paul Proctor. http://www.net-security.org/news.php?id=4029 IDENTITY THEFT HITS HOME Hartman advises people to check identity online regularly. http://www.net-security.org/news.php?id=4030 KEEP YOUR SECURITY CHIN UP Agency officials should adopt a positive way of thinking when it comes to addressing system security, according to one expert. http://www.net-security.org/news.php?id=4031 THOUGHT FOR THE DAY: ARE YOUR WINDOWS SECURE? Companies should worry less about migrating to new operating system and concentrate more on its security. http://www.net-security.org/news.php?id=4034 WIRELESS HACKING BUST IN MICHIGAN In a rare wireless hacking prosecution, federal officials this week accused two Michigan men of repeatedly cracking the Lowe's chain of home improvement stores' nationwide network from a 1995 Pontiac Grand Prix parked outside a suburban Detroit store. http://www.net-security.org/news.php?id=4035 REPORT WARNS JOB SEEKERS TO GUARD PRIVACY People who look for work on the Internet may be giving away personal information that could compromise their privacy, according to a report released Tuesday. http://www.net-security.org/news.php?id=4036 PATCHING RHYTHM: START A MONTHLY PATCH PROCESS On the topic of security alerts and patches, Microsoft Corp. is undoubtedly the 800-pound gorilla. http://www.net-security.org/news.php?id=4037 IS CYBERTERRORISM A PHANTOM MENACE? Gartner's information security and risk research director has dismissed cyberterrorism as a "theory." http://www.net-security.org/news.php?id=4038 MICROSOFT'S NEW SECURITY MOJO Recently, Microsoft announced a program to offer rewards in exchange for information leading to the arrest and conviction of those who exploit its flagship Windows product through viruses, worms, and other forms of malicious code. http://www.net-security.org/news.php?id=4039 PRIVACY BIGGER WORRY THAN SECURITY Questions of privacy dominated a panel discussion held at the Security Special Interest Group (SSIG) in Cape Town recently, as members of the audience seemed more concerned about protecting personal information than they were about security. http://www.net-security.org/news.php?id=4040 MANAGING USER ACCOUNTS IN LINDOWS Although Lindows doesn't require user accounts, it's a good idea to create them anyway--here's why and how to do it. http://www.net-security.org/news.php?id=4041 BANKING SCAM REVEALED A detailed analysis of the recent "phishing" scam that targeted Citibank customers. This paper describes the use of compromised hosts, Website redirection and the specifics of a unique bulk mailing tool that has been repeatedly used in the recent rash of financial email scams. http://www.net-security.org/news.php?id=4042 ATM FRAUD PREVENTION TIPS First National Bank's Card Security Week aims to highlight the predominant fraud issues pertaining to card security. http://www.net-security.org/news.php?id=4043 WILL SECURITY FALLOUT DULL MICROSOFT LONESTAR'S SHINE? Chairman Bill Gates will be walking a fine line, come Comdex 2003. Security can't play second fiddle to the latest Tablet advances this year. http://www.net-security.org/news.php?id=4044 NEW WINDOWS WORM ON THE WAY? With the posting Wednesday of proof-of-concept exploit code for one of the newly discovered vulnerabilities in Windows, the familiar chain of events that often leads to the release of a worm has begun. http://www.net-security.org/news.php?id=4045 GAMESPY WARNS SECURITY RESEARCHER Online-gaming service provider GameSpy Industries acknowledged this week that it had sent an Italian hacker a cease-and-desist letter requesting that he remove advisories and utilities that highlight vulnerabilities in the company's products. http://www.net-security.org/news.php?id=4046 AL-JAZEERA HACKER SENTENCED A Los Angeles-area man has been fined and sentenced to community service for hacking into the Web site of satellite TV network Al-Jazeera during the U.S.-led war in Iraq and rerouting visitors to a page featuring an American flag and the motto "let freedom ring." http://www.net-security.org/news.php?id=4047 CRACKING THE HACKER UNDERGROUND Computer hacking communities and their tools are not hard to find on the net. http://www.net-security.org/news.php?id=4048 CISCO LAUNCHES NEW 'G' WIRELESS DEVICES Cisco Systems Inc. introduced a lineup of new products during its wireless LAN (WLAN) advanced technology event in San Jose, California, on Wednesday which, according to one customer, are necessary for running today's businesses. http://www.net-security.org/news.php?id=4049 STRONG HOLIDAY E-COMMERCE FORECAST TEMPERED BY SECURITY FEARS BSA vice president Bob Kruger said his organization will work with the Better Business Bureau to help educate consumers about ways to protect themselves as they shop online. http://www.net-security.org/news.php?id=4050 BLACKMAIL LATEST SCAM FOR HACKERS The rapid growth of broadband home computer connections may be inadvertently fueling what police suspect could be the start of a new crime wave - cyber-blackmail. http://www.net-security.org/news.php?id=4051 FIRST LOOK AT SBS 2003 SECURITY Meeting the goals of the Trustworthy Computing initiative. http://www.net-security.org/news.php?id=4052 ARE YOU BEING WATCHED ONLINE? Here’s a sobering thought: While you’re looking at your computer, it may be looking back at you. There is easy-to-get, even free, software that lets anybody spy on you, anytime you are on your computer. http://www.net-security.org/news.php?id=4053 ---------------------------------------------------------------- [ Vulnerabilities ] All vulnerabilities are located here: http://www.net-security.org/archive_vuln.php ---------------------------------------------------------------- HP-UX Software Distributor Buffer Overflow Vulnerability http://www.net-security.org/vuln.php?id=3065 HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability http://www.net-security.org/vuln.php?id=3064 UnixWare and Open UNIX Insecure Handling of procfs Descriptors Vulnerabilities http://www.net-security.org/vuln.php?id=3063 Microsoft Frontpage Extensions Remote Command Execution http://www.net-security.org/vuln.php?id=3062 Nokia IPSO Script Injection Vulnerability http://www.net-security.org/vuln.php?id=3061 Microsoft Windows Workstation Service Remote Buffer Overflow Vulnerability http://www.net-security.org/vuln.php?id=3060 Symbol Technologies Default WEP KEYS Vulnerability http://www.net-security.org/vuln.php?id=3059 Eudora "Reply-To-All" Buffer Overflow Vulnerability http://www.net-security.org/vuln.php?id=3058 nCUBE Server Manager Directory Traversal Vulnerability http://www.net-security.org/vuln.php?id=3057 Gaim IRC Local Account Information Leakage Vulnerability http://www.net-security.org/vuln.php?id=3056 DailyDose 1.1 Remote Command Execution Vulnerability http://www.net-security.org/vuln.php?id=3055 ---------------------------------------------------------------- [ Advisories ] All advisories are located at: http://www.net-security.org/archive_advi.php ---------------------------------------------------------------- Red Hat Security Advisory - Updated glibc packages provide security and bug fixes (RHSA-2003:325-01) http://www.net-security.org/advisory.php?id=2716 Conectiva Linux Security Announcement - postgresql (CLA-2003:784) http://www.net-security.org/advisory.php?id=2715 Red Hat Security Advisory - Updated zebra packages fix security vulnerabilities (RHSA-2003:307-01) http://www.net-security.org/advisory.php?id=2714 Red Hat Security Advisory - Updated PostgreSQL packages fix buffer overflow (RHSA-2003:313-00) http://www.net-security.org/advisory.php?id=2713 Mandrake Linux Security Update Advisory - fileutils/coreutils (MDKSA-2003:106) http://www.net-security.org/advisory.php?id=2712 Microsoft Security Bulletin MS02-050 -Certificate Validation Flaw Could Enable Identity Spoofing (329115 revised) http://www.net-security.org/advisory.php?id=2711 SCO Security Advisory - OpenLinux: unzip directory traversal (CSSA-2003-031.0) http://www.net-security.org/advisory.php?id=2710 Conectiva Security Announcement - hylafax (CLA-2003:783) http://www.net-security.org/advisory.php?id=2709 Conectiva Security Announcement - xinetd (CLA-2003:782) http://www.net-security.org/advisory.php?id=2708 Red Hat Security Advisory - Updated glibc packages provide security and bug (RHSA-2003:325-01) http://www.net-security.org/advisory.php?id=2707 Conectiva Security Announcement - mpg123 (CLA-2003:781) http://www.net-security.org/advisory.php?id=2706 OpenPKG Security Advisory - postgresql (OpenPKG-SA-2003.048) http://www.net-security.org/advisory.php?id=2705 Microsoft Security Updates Summary for November 2003 http://www.net-security.org/advisory.php?id=2704 Microsoft Office Security Bulletin Summary for November 2003 http://www.net-security.org/advisory.php?id=2703 Microsoft Windows Security Bulletin Summary for November 2003 http://www.net-security.org/advisory.php?id=2702 Bugzilla Security Advisory - information leak http://www.net-security.org/advisory.php?id=2701 SOT Linux Security Advisory - Updated ethereal package for SOT Linux 2003 (SLSA-2003:51) http://www.net-security.org/advisory.php?id=2700 Red Hat Security Advisory - Updated Ethereal packages fix security issues (RHSA-2003:323-01) http://www.net-security.org/advisory.php?id=2699 Mandrake Linux Security Update Advisory - hylafax (MDKSA-2003:105) http://www.net-security.org/advisory.php?id=2698 HP Security Bulletin - Tru64 UNIX sendmail Potential Security Vulnerability (SSRT3631 revised) http://www.net-security.org/advisory.php?id=2697 HP Security Bulletin - Tru64 UNIX sendmail Potential Security Vulnerability (SSRT3631) http://www.net-security.org/advisory.php?id=2696 Debian Security Advisory - New omega-rpg packages fix local games exploit (DSA 400-1) http://www.net-security.org/advisory.php?id=2695 SUSE Security Announcement - hylafax (SuSE-SA:2003:045) http://www.net-security.org/advisory.php?id=2694 Debian Security Advisory - New epic4 packages fix denial of service (DSA 399-1) http://www.net-security.org/advisory.php?id=2693 Debian Security Advisory - New conquest packages fix local conquest exploit (DSA 398-1) http://www.net-security.org/advisory.php?id=2692 ---------------------------------------------------------------- [ Articles ] All articles are located at: http://www.net-security.org/articles_main.php Articles can be contributed to articles@net-security.org ---------------------------------------------------------------- WEB APPLICATION HACKING: EXPOSING YOUR BACKEND Access to the application must be allowed by firewalls and access control lists, otherwise the application won't work. This inherent trust is precisely what attackers attempt to exploit. http://www.net-security.org/article.php?id=599 MICROSOFT RELEASES SECURITY UPDATES FOR NOVEMBER These new security updates address newly discovered issues in Microsoft Windows, including Internet Explorer. Two of the updates are ranked as "Critical" while one is ranked as "Important" and if you're using the affected software you should install them immediately. http://www.net-security.org/article.php?id=601 ATTACKING THE DNS PROTOCOL This paper whilst containing nothing new on DNS security brings together in one document many strands of DNS security which has been published and reported in many separate publications before. As such this document intends to act as a single point of reference for DNS security. http://www.net-security.org/article.php?id=600 NESSUS SCANNING ON WINDOWS DOMAIN This paper is about using Nessus to scan Windows networks and various scenarios one might encounter. http://www.net-security.org/article.php?id=598 ---------------------------------------------------------------- [ Reviews ] All reviews are located at: http://www.net-security.org/reviews.php ---------------------------------------------------------------- WINDOWS XP HACKS This is probably the single most valuable book about Windows XP you'll ever come across. If you're a complete novice to this version of Windows, you'll have to get more reading material aimed at new users first, but once you get a grip on the basics, this book will open a whole new world of possibilities. http://www.net-security.org/review.php?id=113 RED HAT LINUX POCKET ADMINISTRATOR As it is always with this kind of a pocket reference type of books, you'll either love 'em or hate 'em. They don't hold enough information about the topics they are covering, but on a positive side, they provide a time-saving way to refresh your knowledge on some specific topic. http://www.net-security.org/review.php?id=112 ---------------------------------------------------------------- [ Webcasts ] All webcasts are located at: http://www.net-security.org/webcasts.php ---------------------------------------------------------------- Tripwire for Servers: Overview and Product Demo Organized by Tripwire on 18 November 2003, 11:00 AM PDT http://www.net-security.org/webcast.php?id=124 Secure Your Networks: Wireless Set Up and Security Organized by Microsoft on 18 November 2003, 1:00 PM PT http://www.net-security.org/webcast.php?id=100 Best Practices: Taking Proactive Measures Before The Next Exploit Organized by eEye on 18 November 2003, 2:00 PM EST http://www.net-security.org/webcast.php?id=86 MXtreme Advanced Anti-SPAM Processing Organized by BorderWare on 18 November 2003, 2:00 PM EDT http://www.net-security.org/webcast.php?id=134 Look Inside the Security Readiness Kit (SRK) Organized by Microsoft on 19 November 2003, 8:00 AM PT http://www.net-security.org/webcast.php?id=101 Mitigating Risk: Prepare your Network for the next attack Organized by Microsoft on 19 November 2003, 11:30 AM PT http://www.net-security.org/webcast.php?id=102 Healthcare: Deploying & Securing Wireless LANs Organized by AirDefense on 19 November 2003, 2:00 PM ET http://www.net-security.org/webcast.php?id=80 Network Forensics Made Easy Organized by eEye on 19 November 2003, 2:00 PM EST http://www.net-security.org/webcast.php?id=87 Windows 2003 Server Troubleshooting & Disaster Recovery Organized by Microsoft on 20 November 2003, 9:30 AM PT http://www.net-security.org/webcast.php?id=103 ePolicy Orchestrator 3.0 Uncovered Organized by Network Associates on 20 November 2003, 11:00 AM PT http://www.net-security.org/webcast.php?id=83 Tripwire for Network Devices: Overview and Product Demo Organized by Tripwire on 20 November 2003, 11:00 AM PDT http://www.net-security.org/webcast.php?id=121 Expanding Business Relationships through Federated Identity Management Organized by RSA Security on 20 November 2003, 2:00 PM ET http://www.net-security.org/webcast.php?id=133 Closing the Loop in Change Management Organized by Tripwire on 21 November 2003, 11:00 AM PDT http://www.net-security.org/webcast.php?id=126 Using Microsoft Security Tools Organized by Microsoft on 21 November 2003, 11:30 AM PT http://www.net-security.org/webcast.php?id=104 Tripwire for Servers: Overview and Product Demo Organized by Tripwire on 25 November 2003, 9:00 AM PDT http://www.net-security.org/webcast.php?id=125 ---------------------------------------------------------------- [ Conferences ] All conferences are located at: http://www.net-security.org/conferences.php ---------------------------------------------------------------- Cartes & IT Security Congress 2003 Organized by Cartes - 18 November-20 November 2003 http://www.net-security.org/conference.php?id=58 Australian Information Warfare and IT Security Conference 2003 Organized by University of South Australia - 20 November - 21 November 2003 http://www.net-security.org/conference.php?id=23 Austin HIPAA Security and Privacy Conference 2003 Organized by Data Connectors - 21 November-21 November 2003 http://www.net-security.org/conference.php?id=37 Networkers Africa 2003 Organized by Cisco Systems - 24 November-26 November 2003 http://www.net-security.org/conference.php?id=70 Le Salon de la Securite Informatique Organized by Reed Expositions France - 26 November-27 November 2003 http://www.net-security.org/conference.php?id=33 e-Gov Homeland Security Conference 2003 Organized by e-gov - 2 December-3 December 2003 http://www.net-security.org/conference.php?id=76 The Forum on Information Warfare Organized by MIS Training Institute - 3 December-4 December 2003 http://www.net-security.org/conference.php?id=8 IndoCrypt 2003 Organized by Indian Statistical Institute - 8 December - 10 December 2003 http://www.net-security.org/conference.php?id=14 Department of Defense Cyber Crime Conference Organized by Technology Forums - 8 December-12 December 2003 http://www.net-security.org/conference.php?id=28 Infosecurity 2003 Organized by Information Security Magazine /ISSA - 9 December - 11 December 2003 http://www.net-security.org/conference.php?id=3 HITBSecConf2003 Organized by Hack In The Box - 12 December-14 December 2003 http://www.net-security.org/conference.php?id=64 Access Denied 2004 Organized by New Leaf Productions - 11 January-13 January 2004 http://www.net-security.org/conference.php?id=75 IT-Defense 2004 Organized by cirosec GmbH/dpunkt.Verlag - 28 January-30 January 2004 http://www.net-security.org/conference.php?id=56 ---------------------------------------------------------------- [ Security world ] All press releases are located at: http://www.net-security.org/press_main.php Send your press releases to press@net-security.org ---------------------------------------------------------------- Astaro Voted Best Firewall by Linux Enterprise Readers http://www.net-security.org/press.php?id=1840 Cyberguard To Acquire Snapgear, Extending Product Line To Edge Of Enterprise And Adding Embedded Linux Security Technology http://www.net-security.org/press.php?id=1839 Websense High-Performance Content Filtering Solution Receives “Nokia OK” Approval to Interoperate with Nokia’s Line of IP Security Appliances http://www.net-security.org/press.php?id=1838 Information Security in Australia: What You Really Need To Know http://www.net-security.org/press.php?id=1837 Kaspersky Labs Partners With Vanquish to Offer Bundled Anti-Spam And Anti-Virus Software Platforms http://www.net-security.org/press.php?id=1836 Forum Systems and Captus Networks Partner to Provide Web Services Intrusion Detection and Prevention Solution http://www.net-security.org/press.php?id=1835 U.S. Army 5th Signal Command in Europe Extends Websense Commitment with a $1.3 Million Order http://www.net-security.org/press.php?id=1834 Spirent Communications Selects Sniffer Technologies From Network Associates To Expand Network Performance Testing Options For The Enterprise http://www.net-security.org/press.php?id=1833 Qualys Wins InfoWorld 100 Award http://www.net-security.org/press.php?id=1832 GFI LANguard Security Event Log Monitor (S.E.L.M.) 5 Raises the Bar For Event Log Management http://www.net-security.org/press.php?id=1831 Blue Coat Updates Expectations for Fiscal Second Quarter http://www.net-security.org/press.php?id=1830 Royal Mail Selects nCipher to Provide Secure Online Services http://www.net-security.org/press.php?id=1829 Trend Micro GateLock 3000 and GateLock 5000 Remote Appliances Secure Remote and Home Offices http://www.net-security.org/press.php?id=1828 Sybari Software Ranked Number 276 Fastest Growing Technology Company In North America On The Deloitte Technology Fast 500 http://www.net-security.org/press.php?id=1827 Communicator Inc Launches Hub Connex Secure Business Connectivity Suite http://www.net-security.org/press.php?id=1826 Panda EnterpriSecure Antivirus: Unrivalled Protection For E-Mail Systems http://www.net-security.org/press.php?id=1825 Kaspersky Labs Opens a European Virus Research Centre http://www.net-security.org/press.php?id=1824 Neoteris Opens Operations In Benelux Region To Meet Growing Demand For Industry-Leading Instant Virtual Extranet Products http://www.net-security.org/press.php?id=1823 ---------------------------------------------------------------- [ Virus News ] All virus news are located at: http://www.net-security.org/viruses.php ---------------------------------------------------------------- Latest Mimail Worm Dupes Users Into Disclosing Credit Card Details http://www.net-security.org/virus_news.php?id=329 Weekly Virus Report - Mimail.I and Sinala.A Worms; Sdbot.BL and Webber.C Trojans http://www.net-security.org/virus_news.php?id=328 Kaspersky Labs: Virus Top 20 for October 2003 http://www.net-security.org/virus_news.php?id=327 The Voltan Virus Steals Money http://www.net-security.org/virus_news.php?id=326 ---------------------------------------------------------------- Questions, contributions, comments or ideas go to: Help Net Security staff staff@net-security.org http://net-security.org ---------------------- Unsubscribe from this weekly digest on: http://www.net-security.org/subscribe.php The archive of the newsletter in TXT and PDF format is available http://www.net-security.org/newsletter_archive.php ---------------------------------------------------------------- Get Thawte’s NEW Step-by-Step SSL Guide for Apache ---------------------------------------------------------------- In this guide you will find out how to test, purchase, install and use a Thawte Digital Certificate on you Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. Get you copy of this new guide now: http://ad.doubleclick.net/clk;6091061;8369142;h ----------------------------------------------------------------