8-year-old Windows flaw acknowledged

NetworkWorld.com | Security Research Center | Update Your Profile 8-year-old Windows flaw acknowledged By Jason Meserve Microsoft has finally acknowledged that a 8-year-old Windows flaw is still causing problems; a new database bug has been quashed in OpenOffice.org and Cisco has fixed a hole in its Security Agent for Windows System Driver. Plus, updates from Ubuntu, Debian, Mandriva and Gentoo. Read full story Jason Meserve is Network World's Multimedia Editor and writes about streaming media, search engines and IP Multicast. Check out his Multimedia Exchange Weblog. Check out Jason Meserve and Keith Shaw's weekly podcast "Twisted Pair" SPONSORED BY QUALYS Learn how to Better Secure Your Network Discover how to quickly repair vulnerabilities, reduce the number of false positives and negatives and reduce your total cost of ownership when it comes to network security. Click here to read this whitepaper now. RELATED NEWS: Server Log Analysis of Phishing Web Sites During the last few months, Symantec analyzed several thousands of these log files that highlighted a number interesting and peculiar features. One of these features in question is the distribution of end-user visits over time, from the moment the fraudulent content becomes reachable over the Internet towards its removal. Symantec Security Response blog, 12/03/07. QuickTime Flaw a Potential Threat to Second Life Fans A pair of security researchers demonstrated how the same QuickTime flaw could be used to "pick the pockets" of people engaging in various online games and virtual worlds. Dino Dai Zovi and Charles Miller described how the vulnerability might be leveraged to steal money from people who are members of "Second Life." Washington Post Security Fix blog, 12/03/07. QuickTime Flaw a Potential Threat to Second Life Fans How to Secure Your Computer, Disks, and Portable Drives Perhaps encryption isn't so easy after all, and some people could use a little primer. This is how I protect my laptop. Schneier on Security, 12/04/07. CA: Beacon's reach extends to non-Facebook users If you think that just because you have never signed up for Facebook you're immune to the tracking and collecting of user activities outside of this popular social networking site, think again. IDG News Service, 12/03/07. F-Secure: Malware samples doubled in one year Finnish security vendor F-Secure has collected twice as many malicious software samples this year than it has over the last 20 years, a trend that highlights the growing danger of malicious software on the Internet. IDG News Service, 12/04/07. Shell, Rolls Royce reportedly hacked by Chinese spies Britain's domestic intelligence agency is warning that cybercrime perpetrated by China is on the rise following hacking attacks against Rolls-Royce and Royal Dutch Shell. IDG News Service, 12/03/07. Ron Paul spam traced to Ukrainian botnet Ron Paul is not a botmaster. Security researchers have shut down a network of computers responsible for sending out nearly 200 million spam messages supporting the U.S. presidential candidate last month, and after analyzing the server's software, it's clear that there is no such thing as a Ron Paul botnet, according to Joe Stewart, a senior security researcher with SecureWorks. IDG News Service, 12/05/07. HOLIDAY GIFT GUIDE Find the very best tech holiday gift ideas. '07 ENTERPRISE ALL-STARS Honoring outstanding technology projects. SPONSORED BY QUALYS Learn how to Better Secure Your Network Discover how to quickly repair vulnerabilities, reduce the number of false positives and negatives and reduce your total cost of ownership when it comes to network security. Click here to read this whitepaper now. Get Expert Directory and Identity Training at DEC 2008 Join NetPro, Microsoft and the world's top directory and identity experts for the Seventh Annual Directory Experts Conference (DEC) 2008, the only conference for expert training on Microsoft directory and identity technologies. DEC 2008 runs March 2-5, 2008, at the Hilton Chicago. Register today at: http://www.nww.com/PSA2_1203 Featured reader resource 90% of IT Managers are leaving their company at risk for a DNS ATTACK. Get the tools and resources you need to keep your DNS healthy and secure. Run a DNSreport on your domain today - 56 critical tests run in 8 seconds. Visit www.dnsreport.com to learn more. (apply coupon NWW2007NLA for a 25% membership discount)   12/06/07 TODAY'S MOST-READ STORIES: Green buildings make employees see red Microsoft uses inkblots as password reminders Microsoft pulls plug on potty-mouth Santa Warrior fills vacant CTO role at Cisco Juniper 'Hurricane' in the forecast 'Cisco-is-the-only-vendor-for-me' mindset Network skills in high demand 2007 Cool Yule Tools Gift Guide Sprint could spin off WiMAX division All-in-one firewalls fall short FEATURED BUYER'S GUIDE: Network Monitoring and Management Executive Guide The Security Treadmill This Executive Guide offers interviews with leading, real-world security experts who tell you how to get inside users' heads, fight for a bigger security budget, and whether VoIP security issues are overstated or underrated, and much more. Review this informative guide today. Click Here for More Information IT Buyer's Guides Compare products, get advice, and check out tests and reviews from the experts at Network World. Over 70 categories. Visit now.   To continue receiving NetworkWorld's Security: Threat Alert newsletter, please add @nwfnews.com to your white list. COMPLIMENTARY SUBSCRIPTIONS AVAILABLE As a NW newsletter subscriber you are eligible to receive 50 issues of Network World Magazine, in print or electronic format, free of charge. Sign up for your subscription today: Apply here. International subscribers,click here.   SUBSCRIPTION SERVICES To subscribe or unsubscribe to any Network World newsletter, change your e-mail address or contact us, click here. Terms of Service/Privacy Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 Copyright Network World, Inc., 2007