Security Log

Computerworld -

Report: Phishing Hurts E-commerce
Consumers' confidence in the security of online transactions is slipping because of the growth of phishing-related fraud and identity theft, according to Gartner Inc. Three-fourths of 5,000 online consumers surveyed by Gartner in May said they have become more cautious about where they shop online, and one-third reported buying fewer items than they would typically purchase because of security concerns.
Oracle Patches 88 Holes With Update
Oracle Corp. released a bundle of critical security patches for its software last week, fixing 88 vulnerabilities in various products, including its database and application servers and some PeopleSoft and J.D. Edwards applications. A work-around exists for just one of the vulnerabilities, according to Oracle, which recommends applying the patches as soon as possible. The patches, part of Oracle's quarterly security update program, affect versions of its database software from Version 8i onward. Customers covered by Oracle's Extended Maintenance Support or Extended Support plans can download the patches.
DDoS Attacks Top Threat for ISPs
Results of Arbor Networks Inc.'s Worldwide ISP Security Report indicate that 90% of Internet service providers find that "brute force" distributed denial-of-service (DDoS) attacks from bot networks are their single biggest hassle. Rapidly spreading worms and DNS poisoning attacks ranked second and third, respectively, on the list. Just 29% of the ISPs surveyed said they have automated services to counter and trace DDoS attacks. The report was based on survey responses from 36 large ISPs in the U.S., Europe and Asia.

Read more about Security in Computerworld's Security Topic Center.