A "serious security flaw" in Gmail turns Google's e-mail service into a spamming machine, according to a recent security report.
INSERT, the Information Security Research Team, has created a proof of concept that exploits the "trust hierarchy" that exists between mail service providers. By exploiting a flaw in the way Google forwards messages, a spammer can send thousands of bulk e-mails through Google's SMTP service, bypassing Google's 500-address bulk e-mail limit and identity fraud protections.
Read More
Monday, May 12, 2008
Wednesday, May 07, 2008
Microsoft is winning the NAC war, expert says
Why Microsoft is doing it right, ACLs are better than VLANs and the dirty dark corner of NAC (management).
By Julie Bort , Network World , 05/06/2008
Security guru Joel Snyder from Opus One recently starred as the guest of a live Network World chat where he discussed the state of network access control. Snyder says that Microsoft is emerging as one of the clear winners of NAC, but that Microsoft's technology is a foundation from which to build, not an end-all. He also says that those who are anti-NAC simply don't understand the technology. He answered a slew of technical questions from attendees including why ACLs are better than VLANs, the dirty dark corner of NAC (management) and the how and why of 802.1X. What follows is a full transcript
Read More
By Julie Bort , Network World , 05/06/2008
Security guru Joel Snyder from Opus One recently starred as the guest of a live Network World chat where he discussed the state of network access control. Snyder says that Microsoft is emerging as one of the clear winners of NAC, but that Microsoft's technology is a foundation from which to build, not an end-all. He also says that those who are anti-NAC simply don't understand the technology. He answered a slew of technical questions from attendees including why ACLs are better than VLANs, the dirty dark corner of NAC (management) and the how and why of 802.1X. What follows is a full transcript
Read More
Wednesday, April 30, 2008
MS gaining fast in AV-Comparatives tests
Detection rates up 7% in six months, more improvement predicted.
AV-Comparatives have released the results of their latest test of detection rates, pitting 17 scanners already known to perform well against their huge collection of malware. The most improvement over the previous run, which took place in February, was shown by Microsoft, whose score shot up by 7%.
The tests take the form of an on-demand scan over a testset of over 800,000 verified samples, including file and macro viruses, worms, trojans, backdoors and other malware, using 'best possible' settings. Multi-engine product AEC Trustport (which combines detection technologies from Norman, BitDefender and AVG) topped the tables with over 99.64%, with Avira's AntiVir in second place and another multi-engine scanner, GDATA's AVK, in third - both scored over 99%. Symantec and Kaspersky round out the top five, both spotting over 98% of all samples.
Read More
AV-Comparatives have released the results of their latest test of detection rates, pitting 17 scanners already known to perform well against their huge collection of malware. The most improvement over the previous run, which took place in February, was shown by Microsoft, whose score shot up by 7%.
The tests take the form of an on-demand scan over a testset of over 800,000 verified samples, including file and macro viruses, worms, trojans, backdoors and other malware, using 'best possible' settings. Multi-engine product AEC Trustport (which combines detection technologies from Norman, BitDefender and AVG) topped the tables with over 99.64%, with Avira's AntiVir in second place and another multi-engine scanner, GDATA's AVK, in third - both scored over 99%. Symantec and Kaspersky round out the top five, both spotting over 98% of all samples.
Read More
Microsoft Adds Two to Forefront Family
LAS VEGAS -- Interop 2008 -- Microsoft is adding two edge security products to its Forefront line -- next-generation and rebranded versions of its remote network access product and its network edge protection product, the company revealed here today.
The newly christened Forefront Unified Access Gateway (formerly its Internet Access Gateway) and Forefront Threat Management Gateway (formerly Internet Security & Acceleration Server 2006) will be released in public beta versions later this year. Microsoft also announced that it will roll out an updated version of its SharePoint Optimizer for the existing IAG 2007 SSL VPN product next month.
“We wanted to update our naming and branding, and the vision you will see us [following] better over time is the integration and alignment with multiple access solutions across Microsoft” products, says Margaret Dawson, group product manager for Forefront edge products. “We will do a better job of integrating with SharePoint, OWA, mobile, Windows Server, etc."
Read More
The newly christened Forefront Unified Access Gateway (formerly its Internet Access Gateway) and Forefront Threat Management Gateway (formerly Internet Security & Acceleration Server 2006) will be released in public beta versions later this year. Microsoft also announced that it will roll out an updated version of its SharePoint Optimizer for the existing IAG 2007 SSL VPN product next month.
“We wanted to update our naming and branding, and the vision you will see us [following] better over time is the integration and alignment with multiple access solutions across Microsoft” products, says Margaret Dawson, group product manager for Forefront edge products. “We will do a better job of integrating with SharePoint, OWA, mobile, Windows Server, etc."
Read More
Tuesday, April 29, 2008
Microsoft hosts its own police academy
Hundreds of officials from agencies around the world including the FBI, Interpol, state attorneys general, city and county police, and the Air Force are attending a three-day technology training session at Microsoft's Redmond, Wash., campus beginning on Monday.
Microsoft is training the officers how to use technologies that can help them fight cybercrime as well as help them investigate traditional crime with an online component. Nearly 400 people from more than 80 agencies in 35 countries are attending.
Read More
Microsoft is training the officers how to use technologies that can help them fight cybercrime as well as help them investigate traditional crime with an online component. Nearly 400 people from more than 80 agencies in 35 countries are attending.
Read More
Wednesday, April 23, 2008
Microsoft encourages researchers to hack
Microsoft wants to encourage legitimate researchers to investigate its online services for vulnerabilities -- and promises not to sue as long as they submit the bugs they find
Read the Full Story
Read the Full Story
Tuesday, April 15, 2008
30 day countdown until Cisco releases Microsoft-NAP friendly NAC gear
New and Hot subject .....
A story in Network World's Network Access Control newsletter reports that Cisco will have its Microsoft-compatible NAC gear ready in about a month, which should be good news for a lot of potential NAC users who are customers of both vendors. Cisco NAC being compatible with Microsoft network access protection (NAP) means users can deploy NAC without having to also deploy a NAC client. Instead, endpoints using Microsoft Vista and XP with Service Pack 3 can use the built-in NAP
Read More
A story in Network World's Network Access Control newsletter reports that Cisco will have its Microsoft-compatible NAC gear ready in about a month, which should be good news for a lot of potential NAC users who are customers of both vendors. Cisco NAC being compatible with Microsoft network access protection (NAP) means users can deploy NAC without having to also deploy a NAC client. Instead, endpoints using Microsoft Vista and XP with Service Pack 3 can use the built-in NAP
Read More
Thursday, April 10, 2008
Microsoft releases public beta of security console
Microsoft on Tuesday released the first public beta of a centralized management console that will pull together administrative tasks around its collection of Forefront security software for clients, servers and the network edge.
At the RSA Conference, Microsoft released the first test code for Stirling, which it unveiled last summer. Stirling is designed as the knot that ties together Microsoft's Forefront security software – Client Security, Security for Exchange Server, Security for SharePoint, Internet Security and Acceleration Server (ISA), and the Intelligent Application Gateway
Read More
At the RSA Conference, Microsoft released the first test code for Stirling, which it unveiled last summer. Stirling is designed as the knot that ties together Microsoft's Forefront security software – Client Security, Security for Exchange Server, Security for SharePoint, Internet Security and Acceleration Server (ISA), and the Intelligent Application Gateway
Read More
Sunday, April 06, 2008
Microsoft Technology Day( Kuwait)
Really it was a big event, at the Microsoft Technology Day 2008 held on March 30, 2008. There were around 300 attendees, 20 speakers and 42 sessions on various Microsoft technologies.
I have delivered the following sessions.
1- Microsoft Intelligent Application Gateway
2- Microsoft System Center Essential
Speakers were of MVPs, Microsoft employees and trainers from Infocenter Kuwait,
I have delivered the following sessions.
1- Microsoft Intelligent Application Gateway
2- Microsoft System Center Essential
Speakers were of MVPs, Microsoft employees and trainers from Infocenter Kuwait,
Magic Quadrant for Endpoint Protection
Gartner has positioned Microsoft Forefront Client Security in the Challengers Quadrant of the analyst group’s Magic Quadrant for Endpoint Protection Platforms, 2007
21 December 2007
Peter Firstbrook, Arabella Hallawell, John Girard, Neil MacDonald
Gartner RAS Core Research Note G00153291
The stand-alone antivirus market has been replaced with a broader suite of defensive technologies supported by an extensible management platform that can subsume horizontal products, such as data protection and device management capabilities
Read More
21 December 2007
Peter Firstbrook, Arabella Hallawell, John Girard, Neil MacDonald
Gartner RAS Core Research Note G00153291
The stand-alone antivirus market has been replaced with a broader suite of defensive technologies supported by an extensible management platform that can subsume horizontal products, such as data protection and device management capabilities
Read More
Thursday, April 03, 2008
RSA to kick off next week with Microsoft's 'Stirling'
Sunday, March 23, 2008
Microsoft wins 2008 Info Security Products Guide Global Product Excellence Awards for ISA Server 2006 and Forefront Security for Exchange Server
Microsoft wins 2008 Info Security Products Guide Global Product Excellence Awards for ISA Server 2006 and Forefront Security for Exchange Server
Read More
Read More
Microsoft Acquires Security Firm
Komoku technology will be incorporated into Forefront and Windows Live OneCare.
Nancy Gohring, IDG News Service
PC World
Saturday, March 22, 2008; 2:19 PM
Microsoft hopes to beef up its security capabilities with the acquisition of Komoku, a developer of rootkit detection products, announced last week.
Financial terms of the deal were not disclosed.
Microsoft plans to add Komoku's technology into its Forefront and Windows Live OneCare products.Forefrontis Microsoft's suite of enterprise security software that includes malware protection for PCs, security tools for Exchange and SharePoint servers, and gateways that secure remote access to corporate data.
Read The Story
Nancy Gohring, IDG News Service
PC World
Saturday, March 22, 2008; 2:19 PM
Microsoft hopes to beef up its security capabilities with the acquisition of Komoku, a developer of rootkit detection products, announced last week.
Financial terms of the deal were not disclosed.
Microsoft plans to add Komoku's technology into its Forefront and Windows Live OneCare products.Forefrontis Microsoft's suite of enterprise security software that includes malware protection for PCs, security tools for Exchange and SharePoint servers, and gateways that secure remote access to corporate data.
Read The Story
Sunday, March 16, 2008
Trend Micro hit by massive Web hack
Security vendor Trend Micro has fallen victim to a widespread Web attack that splashed malicious software onto hundreds of legitimate Web sites in recent days.
A Trend Micro spokesman confirmed that the company's site had been hacked Thursday, saying that the attack took place earlier in the week. "A portion of our site -- some pages were attacked," said Mike Sweeny, a Trend Micro spokesman. "We took the pages down overnight Tuesday night -- and took corrective action."
Read The Story
A Trend Micro spokesman confirmed that the company's site had been hacked Thursday, saying that the attack took place earlier in the week. "A portion of our site -- some pages were attacked," said Mike Sweeny, a Trend Micro spokesman. "We took the pages down overnight Tuesday night -- and took corrective action."
Read The Story
Thursday, March 13, 2008
Cisco patches two flaws in its Secure Access Control Server
Submitted by Cisconet on Wed, 03/12/2008 - 7:54pm.
Cisco released free software fixes for two sets of vulnerabilities that affect its Cisco Secure Access Control Server (ACS) for Windows User-Changeable Password (UCP) application. The flaws were reported to Cisco by Felix 'FX' Lindner of Recurity Labs.
Read the Story
Cisco released free software fixes for two sets of vulnerabilities that affect its Cisco Secure Access Control Server (ACS) for Windows User-Changeable Password (UCP) application. The flaws were reported to Cisco by Felix 'FX' Lindner of Recurity Labs.
Read the Story
Community Open Day –Kuwait
It is our first community event , and really it was amazing one based on the attendees feedback (a round 150 attendees )
Here is some details about the event
http://www.dotnetboom.net/openday/Default.aspx
Tuesday, March 11, 2008
Security vendors rally around NAP
It is a nice article about NAC solution competition
Security vendors are clamoring to announce their products' compatibility with Microsoft's network access protection, a key security feature of Windows Server 2008.
Foundry Networks
Read More
Security vendors are clamoring to announce their products' compatibility with Microsoft's network access protection, a key security feature of Windows Server 2008.
Foundry Networks
Read More
Microsoft Technology Day
Microsoft Technology Day is being conducted by the Microsoft Experts Community (MSExperts.net) at Kuwait on InfoCenter Dawalia bulding on 30th of march 2008
I will be presenting at the event on the following topics:
1- Microsoft Intelligent application gateway (SSL VPN)
2-Microsoft System Essential 2007
Subscribe to:
Posts (Atom)