Storm botnet stages Fourth of July attacks
Hackers tried to entice users into downloading the Storm bot Trojan on July 4 with a flood of Fourth of July spam containing links to malicious sites, several security companies reported. Read more...

Trojan lurks, waiting to steal admin passwords

MySpace users struggle to overcome cybervandalism

Hackers hijack critical Internet organization sites

Microsoft security fix clobbers 2 million password stealers

Data thieves get focused (but buyers get sloppy)

China quake fake in police custody

Former 'spam king' must pay MySpace $6 million

Obama Campaign Seeks Web-Site Security Help

Researchers urge ransomware victims to try file-recovery app

More Cybercrime and Hacking Stories

Where the truth is: Logs and breach-disclosure laws
A data breach and the ensuing public relations nightmare is something no company wants to deal with. Contributor Anton Chuvakin suggests that keeping good log data could ease the pain if that comes to pass.

Most data breaches discovered too late, study says
An examination of the finding of 500 forensics investigations involving around 230 million records reveals some ugly truths about corporate responses to network data breaches.

Theory and Reality
Stop using Social Security numbers for personal identification, and start encrypting all personal information about people, pleads Frank Hayes.

Six hours to hack the FBI (and other pen-testing adventures)
Penetration testing can reveal weak spots in an enterprise's network and Web systems -- sometimes, "spots" that are big enough to drive a tank through, and on systems the bad guys would kill to get access to. White-hat pen testers dish on some of the more egregious messes they've encountered.

Getting an F and Turning It Into Fun
An audit shows a need for more effective security-awareness training. But how can it be both cheap and entertaining?

Zero Day Threat
In this book excerpt, the authors of Zero Day Threat: The Shocking Truth of How Banks and Credit Bureaus Help Cyber Crooks Steal Your Money and Identity detail how Microsoft missed the boat on cybercrime.

Consumer identity-theft protection services: What works?
Who actually puts a Social Security number on the side of a truck, and do such "identity theft protection" services really work? Our editorial siblings at PC World dug into the six leading firms to see what they can and cannot do for you.

DIY identity-theft protection: A 12-step program
You don't have to spend $100 to $200 a year to defend yourself from identity theft at the level of protection that a paid service offers. You can do almost everything the services do, free. Our friends at PC World have a plan outlined for you.

Opinion: Malware vs. anti-malware, 20 years into the fray
Steven J. Vaughan-Nichols takes stock of the malware/anti-malware landscape nearly 20 years after the very first Internet worm and spotlights how the two sides are approaching the battle.

Stupid hacker tricks, part two: The folly of youth
Sociopathic youngsters who have behaved very, very badly -- and paid for it.

All it takes is a couple hours and about $125 to breathe new life into an old laptop. Here's how. Is Microsoft's Golden Age over? What are Gates' most memorable quotes? Find out in Computerworld's complete coverage of the end of the Bill Gates era at Microsoft. There are some things your CIO definitely doesn't want to hear. Also don't miss the flipside, Five things you should always tell your boss. With its latest version, Mozilla's browser continues to raise the bar for what Web browsers should be.

Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.

More Continuing Coverage After 9/11: Homeland SecurityAsk a Premier 100 IT LeaderBlackBerry Legal BattleData Security BreachesElectronic VotingFirefoxH-1B VisasHP's Boardroom ScandalHandheld DevicesHurricane Katrina AftermathMicrosoft Legal IssuesMicrosoft's VistaOpen SourceRFID TechnologySCO's Linux FightSarbanes-Oxley ActSpamVoice Over IPWi-FiWindows Meta File VulnerabilityWindows XP Service Pack 3

Four years from now, the IT field will be a vastly different place. Will you be ready?

Intercept Spam & Viruses (Source: MessageLabs) Register for a complimentary 30 day trial of MessageLabs' new managed Anti-virus and Anti-spam security solutions. MessageLabs guarantees complete protection against all known and unknown email threats. By providing 24 hour support, your business can increase productivity and decrease risk. Register now for a complimentary trial and receive a free datasheet. Deploying Virtualized NetWare on Linux Whitepaper Toward More Flexible, Next-Generation Collaboration Solutions Driving Business Success Through Workgroup Choice and Flexibility Web Security SaaS: The Next Generation of Web Security The Quest For Competitiveness: Business Mobility And The Agile Organization Spam Spikes: A Real Risk to Your Business Reduce Energy Costs and Go Green Managing Mobility: An IT Perspective Five Ugly Truths about WAFS and Caching Forrester - Optimizing Users and Applications in a Mobile World Real Customers, Real Results Case Study: Golder Associates What Every E-Business Should Know about SSL Security and Consumer Trust Backup and Recovery for Microsoft Exchange Server Seven Steps to Secure and Seamless Field Mobility 2007 Gartner Magic Quadrant Report Not All QSAs Are Created Equal: What You Should Know Before You Buy Demonstrating the Business Value of Mobile Device Management in the Enterprise Simplifying Enterprise File Management Brocade and the File Area Network - A Taneja Group Solution Profile More White Papers

Security management is the process of developing a comprehensive data protection plan. It takes into account all potential threats, the existing network environment, the future needs of the organization, and lays out a multi-tiered blueprint to integrate the security technology needed to combat these threats. CDW can help keep your network and data secure. Client Security Podcast CDW Security Profiler Network Security Reference Guide Visit the CDW Security Management Zone now

E-mail Address: (Required)  Security  Networking Security  Virus and Vulnerability Roundup  Security: Issues and Trends  Infrastructure & Control

"This company's infrastructure group is running a disaster recovery exercise with a reluctant participant: an IT manager who's notorious as..." Read more "It's IT Blogwatch: in which Mozilla's Firefox Web browser continues to gain market share, smashing records as it does so...." Read more "Microsoft today announced new security features for Internet Explorer 8, on the same day that a survey shows that Firefox..." Read more "When I read John E. Dunn's article at TechWorld.com,..." Read more More Security Blogs See all Computerworld Blogs

Free MessageLabs Trial The business risks from email and web use are widespread. But what's the reality of the situation for your business? Complete the short form to find out with a FREE MessageLabs Trial. During the trial, we will monitor all your inbound and outbound email and web traffic and provide you with a complete picture of the risks facing your business every day. Register for this trial now.

In Security Security's important, and risk must be addressed, right? Sure, but watch for four signs your policies go a bit overboard. Click here to read the latest column by Jon Espenschied

Why SaaS is Vital to Email and Web Security Why SaaS is Vital to Email and Web Security Download this webcast, free, compilments of Webroot Software Go to the webcast

Computerworld Executive Bulletin: Building a Robust Antivirus Defense Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing

White Papers Read up on the latest ideas and technologies from companies that sell hardware, software and services. Deploying Virtualized NetWare on Linux Whitepaper Toward More Flexible, Next-Generation Collaboration Solutions Driving Business Success Through Workgroup Choice and Flexibility View more whitepapers

How to Offer the Strongest SSL Encryption Get this white paper now! (Source: Verisign) Learn all the facts about guaranteeing maximum SSL strength to every Web site visitor, regardless of browser type or operating system. Stronger encryption levels keep your business safe from online threats and allow your customers to feel safe transacting on your site. Download this white paper

The Spy Files For Congress to do anything that helps protect consumers and the critical Internet infrastructure as a whole, it must pass laws that require proactive processes to protect computers, not that tell people how to deal with the resulting mess, says Ira Winkler. Click here to read the latest column by Ira Winkler