October, 2007:

• Ghosts, goblins and Storm Worm on Halloween
• Hartford Financial Services loses backup tapes
• Reno 911: University of Nevada professor loses memory stick
• Is RBN behind the latest Adobe PDF attacks?
• FTC spam contains keylogging trojan
• McAfee buys ScanAlert in potential $75 million deal
• Visa fines TJX credit card processor
• Hacker accesses names, credit card numbers of Art.com customers
• Kentucky botmaster gets year in prison
• Oct. 29, 2007: Was one World Series team the victim of a DDoS attack?
• Adobe PDF exploits spike
• University of Akron microfilm with personal info of 1974 alumni missing
• Microsoft warns of attacks on Windows URI, URL handling flaw
• Bates College student newspaper uncovers data leak
• LogLogic presents: The Governance Mandates: Managing Risk and Ensuring Compliance
• Social Security numbers of Dixie State College employees and alumni accessible on website for 14 months
• Trend Micro acquires Provilla
• The latest Visa PCI compliance stats are in
• Beware of PDF rootkit-laden spam
• Banks: TJX lost twice as much data as reported
• SC Magazine survey - Preventing a data breach
• The past, present and future of Network Access Control
• Prank costs teen $500,000 in bail
• UPS loses data tape with personal information of 200,000
• Colorado Rockies blame cyberattack for online ticket-sales outage
• Bipartisan Senate cybercrime bill could mean more arrests
• Adobe patches dangerous flaw
• Oct. 22, 2007: MP3 spam arrives
• Memory stick stolen from U of Cincy
• Government hacker may avoid extradition to U.S.
• RealPlayer flaw patched - so patch!
• Mozilla patches eight flaws, two critical, in Firefox
• In-the-wild attacks target RealPlayer zero-day flaw
• Find the stolen laptop, get free beer for life
• Apple SDK release unlocks iPhone security issues
• Nine years’ worth of Louisiana college loan applicant data lost
• MP3 pump-and-dump spam targets inboxes
• Senate bill allows identity theft victims to seek reimbursement; strengthens anti-spyware, keylogger regulations
• A hacker infiltrates “The Hills”
• WhiteHat: 90 percent of websites vulnerable to attack
• Home Depot laptop stolen from manager’s car
• Threat of the Month: Malware
• Oracle releases 51 patches, unveils new vulnerability rating system
• Laptop with employee personal info stolen from Kiski Area School District (Pa.) administrator
• AOL patches flaw with AIM 6.5; experts warn against corporate platform use
• Contrary thinking on content security
• Protecting IP in a world of offshoring
• Weighing the options for securing backup data
• Avoid the PCI hype, but use standard as a rallying point
• Laptops with sensitive TSA contractor data stolen
• Personal information of 159,000 Administaff employees on stolen laptop
• Laptops stolen from TSA contractor contain personal information of 3,930
• Information Security Forum releases free best practices standard
• SecureWorks: Storm worm may be for sale
• Tracking the Symantec-Vontu rumors
• Schwarzenegger shoots down California data-protection bill
• Endace buys MSSP Applied Watch for $5 million
• Montana State University server hacked; officials unsure if data was stolen
• Oct. 15, 2007: The year in phishing
• Fake Microsoft ant-spyware site stealing credit card info
• iPhone, iPod Touch TIFF flaw revealed
• Oracle schedules 51 fixes for Tuesday release
• Ohio administrator loses a week’s vacation over stolen hard drive
• Stolen laptop contains transportation department worker info
• Car contractor blamed for fourth Pfizer breach
• Hackers target Commerce Bank
• U. of Texas students’ personal information available online last month
• TJX shows tact with revised settlement offer
• Exploit for patched Microsoft Word flaw hits the wild
• Microsoft warns of URI handling flaw, says patch on way
• Chipmaker suffers data breach
• Voltage Security and BearingPoint
• PreEmptive Solutions now a Microsoft reseller
• CyberDefender teams with SOS Online Backup
• Global Secure Systems and Peapod merge
• MacLean joins PGP board
• Tizor announces PartnerTrust Program
• Third Brigade extends partner program
• Akbank deploys Actimize
• Cook County, Ill., to deploy Fortinet
• Utimaco to provide key and policy management for Intel technology
• FTC files complaint against alleged weight-loss, human growth hormone spammer
• eBay, U.S. source of most phishing scams
• CompTIA: Security spending to consume more of the IT budget pie
• Why biometric technologies are catching on
• Home to CERT, Carnegie Mellon suffers laptop breach
• Researchers: Hackers could affect presidential election
• Microsoft patches include cumulative Internet Explorer fix
• Former U. of Iowa TA’s laptop stolen; contains personal information of 184 students, graduates
• Phishing for election donations
• Back to basics for securing the human factor
• Secure Development World Conference
• McAfee buys encryption provider SafeBoot for $350 million
• Adobe discloses Reader, Acrobat flaw; can allow remote code execution
• YouTube used to launch spam
• Could PDF spam be on the way back?
• One state goes to SafeBoot
• Oct. 8, 2007: What are your plans for Cyber Security Awareness Month?
• In the driver's seat: the integration of enterprise security and networking operations
• How to get more intelligent about smartphones
• Progress against piracy
• How the WWE stomps out the forgers
• The polls are open - cast your ballot for the 2008 SC Magazine Awards
• Product section: Meeting the challenge of managing access
• The real convergence
• News briefs
• Debate
• 2 minutes on...Do authorities get cybercrime?
• Company news
• Me and my job
• Where are all the CISOs?
• The other integrity is at risk, as well
• Got something to say?
• SANS Security 2008
• SecureGOV
• SecureWorld Expo/ST&D Convergence Series
• ISACA Training Week
• SANS Great Lakes 2007
• Is today's network easier to secure?
• SecureWorks: 90 percent increase in attackers targeting utilities since May
• Homeland Security newsletter error leads to flood of unwanted emails
• Seven fixes planned for Patch Tuesday
• Retail lobby offers alternative to PCI standard
• Apple patches QuickTime for Windows flaw
• Massachusetts regulators mistakenly send out disks with personal information
• Not your usual identity theft victim
• A worthy FTC workshop
• California man arrested for botnet attacks on CastleCops, KillaNet
• Hacked Marin County website prompts shutdown of all California state sites
• Oregon credit report freeze law goes into effect
• How is data lost?
• Whitelisting - White horse or white lie?
• Keep your IM-using employees on a need-to-know basis
• Google patches Gmail message-forwarding flaw
• Compare and contrast - top 10 lists
• Hacker accesses financial info of 14,000 people via Nature Conservancy computer
• Update: 380 more Ramsey County, Minn., workers told their personal information stolen in Ohio
• Former Homeland Security Secretary Ridge launches security consultancy
• Media Motor creator settles spyware charges with FTC
• Oct. 1, 2007: IT-ISAC officials speak out on cybercrime trends
• What would the Godfather think?
• Stolen laptop contains personal data of 800,000 Gap job applicants
• Much work to be done as National Cyber Security Awareness Month begins
• Gap contractor loses laptop with personal information of 800,000 job applicants