Cisco confirms HTTP unicode encoding evasion; Microsoft tweaks Patch Tuesday advance notification

Security News Alert This newsletter is sponsored by Arsenal Digital Solutions Automated Off-Site Data Protection for SMBs Would you bet your company on the data saved during your last backup? Statistics show that only 6% of companies suffering a catastrophic data loss will survive beyond two years. And yet many organizations struggle to maintain a regular backup schedule, especially as more and more employees work from remote locations: branch offices, home offices, and while traveling. Join us for a timely, interactive presentation to find out how automated, off-site data protection can help SMBs to meet and overcome their backup, recovery and business continuity challenges. Click here to register today and learn how to protect your mission-critical data! Network World's Security News Alert, 05/17/07 Cisco confirms HTTP unicode encoding evasion:  The U.S. Computer Emergency Response Team (US-CERT) has reported a network evasion technique using full-width and half-width unicode characters that affects several Cisco products. Click here for more. Microsoft tweaks Patch Tuesday advance notification, 05/16/07:  Microsoft is changing the way it documents its monthly security patches. Click here for more. Software piracy hits $40B worldwide, says study, 05/15/07:  Efforts to curb software piracy in China are bearing fruit although the piracy rate remains high, costing vendors billions of dollars in lost revenue, according to a survey paid for by large vendors, including Apple and Microsoft. Click here for more. Don't Overlook Inside Security Threats Research says it's not just vendor hype: Most companies have significant vulnerabilities they're not aware of and vastly underestimate the risk of insider attacks. Watch this Webcast and learn which attacks you need to be worried about, which are the most underestimated threats and much more. Click here to view the webcast. IBM contractor loses employee data, 05/15/07:  An unnamed IBM vendor has lost tapes containing sensitive information on IBM employees, the computer maker confirmed Tuesday. Click here for more. Password policy management feature slipped into Longhorn, 05/15/07:  Microsoft has quietly added a password management feature to Longhorn Server that will let administrators assign password policies based on users and groups regardless of what domain they reside in. Click here for more. Aventail SSL VPNs can be extended to smartphones, 05/16/07:  Aventail SSL VPN gear now supports VPN security for smartphones based on the Windows Mobile operating system. Click here for more.

TODAY'S MOST-READ STORIES: 1. Sweaty e-mails in your future? 2. Top 15 controversial Microsoft quotes 3. Top 10 things Microsoft loves/hates about open source 4. Caption contest: Fence, other side of 5. Sprint Nextel getting ready to pull plug on legacy nets 6. IBM opens sales center in Second Life 7. Force10 says it has Cisco Catalyst killer 8. Gates christens Longhorn Windows Server 2008 9. Analysts squash IBM layoff rumors 10. Father of telecommuting Jack Nilles says security MOST-READ REVIEW: Midtier management tools register high marks

Contact the author: Senior Editor Ellen Messmer covers security for Network World. E-mail Ellen. This newsletter is sponsored by Arsenal Digital Solutions Automated Off-Site Data Protection for SMBs Would you bet your company on the data saved during your last backup? Statistics show that only 6% of companies suffering a catastrophic data loss will survive beyond two years. And yet many organizations struggle to maintain a regular backup schedule, especially as more and more employees work from remote locations: branch offices, home offices, and while traveling. Join us for a timely, interactive presentation to find out how automated, off-site data protection can help SMBs to meet and overcome their backup, recovery and business continuity challenges. Click here to register today and learn how to protect your mission-critical data! BONUS FEATURE IT PRODUCT RESEARCH AT YOUR FINGERTIPS Get detailed information on thousands of products, conduct side-by-side comparisons and read product test and review results with Network World’s IT Buyer’s Guides. Find the best solution faster than ever with over 100 distinct categories across the security, storage, management, wireless, infrastructure and convergence markets. Click here for details. PRINT SUBSCRIPTIONS AVAILABLE You've got the technology snapshot of your choice delivered to your inbox each day. Extend your knowledge with a print subscription to the Network World newsweekly, Apply here today. International subscribers, click here. SUBSCRIPTION SERVICES To subscribe or unsubscribe to any Network World newsletter, change your e-mail address or contact us, click here. This message was sent to: security.world@gmail.com. Please use this address when modifying your subscription. Advertising information: Write to Associate Publisher Online Susan Cardoza Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 Copyright Network World, Inc., 2007