January, 2007:

• Sony BMG settles with FTC
• TJX faces lawsuits; congressman wants FTC investigation into hacking, data loss
• Is there a fifth zero-day vulnerability in Microsoft Word?
• MessageLabs: Phishing emails outnumber virus, trojan email attacks
• People on the move: Appointment at St Bernard Software
• People on the move: Appointment at SonicWall
• People on the move: Appointment at International Information Systems Security Certification Consortium
• People on the move: Appointment at McAfee
• People on the move: Appointment at Crossbeams Systems
• The Month: MI5 launches insecure email system for terror alert updates
• The Month: UK's Fraud Act becomes law mid-January
• Letter: Right to privacy is being eroded
• Letter: A picture can say more than words
• Letter: The hidden dangers of the iPhone
• The Month: ThreatStats - An overview of the most widespread dangers lurking behind your computer screen
• The Month: Industry Round-up
• Malware superpowers
• The Poll
• Threat of the month: Blackjacking
• Analysis
• The Month: Global snapshots - Google under pressure in Iraq; Brazilian hackers team up with Russians
• The Month: The quote
• The Month: Spam in the USA
• The Month: New phishing tool hits the web
• The Month: PayPal launches a Verisign One-Time Password Token
• The Month: DDoS becoming more intelligent and harder to detect
• Data security firms start Payment Card Industry Vendor Alliance
• The security implications of Web 2.0
• Priceline.com, Travelocity, Cingluar settle New York adware suit
• Hackers use trojan to access server with personal information of 70,000 Vermont residents
• South Korean duo arrested, accused of sending 1.6 billion spam emails
• MessageLabs analyst: Put pressure on ISPs to stop malware
• Microsoft releases Windows Vista to consumers
• Symantec acquires Altiris
• Webroot: Windows Vista is more secure, but not secure enough
• TomTom devices infected with trojans
• Apple offering Windows users unpatched QuickTime version
• Microsoft advisory warns exploits targeting newest Word vulnerability
• Apple fixes AirPort flaw
• Another Microsoft Word zero-day flaw found
• Survey: SCMagazine.com - the website that information security professionals recommend
• Cisco reveals three flaws in Internetwork Operating System
• Social Security numbers of 1.3 million Chicago voters distributed to candidates
• Symantec may slash five percent of workforce
• RSA study: Fraud fears keep more than half from banking online
• Hacked personal information from Marshalls, T.J. Maxx parent company used in fraudulent purchases
• Hot or Not: Remote access breaches
• Storm worm still on botnet-building path
• County treasurer accused of funneling $1.2 million to Nigerian fraud scam
• TrustedID launches online personal information check, but will it help or hurt criminals?
• IRS, Kansas City officials search for lost computer tapes
• Apple patches exploited QuickTime flaw after 23-day window
• Academics warn of fingerprint biometrics weaknesses
• Political hackers disfigure website of Gorbachev organization
• Google removes personal information from anti-phishing blacklist
• McAfee update blocks Lotus Notes email
• Image spam is the new embedded link, says Marshal
• Sophos: U.S. still world's spam leader; attackers warm to web threats
• MySpace files suit against alleged spammer
• Keyloggers steal $35,000 from users of federal employee savings program
• Cybercriminals swipe more than $1 million in record phishing scheme
• Storm worm still raging, now with new fake news stories
• Trojan-laden storm worm making landfall in inboxes worldwide
• Microsoft updates Excel patch
• Phishers: Click here, or eBay shuts down
• Sophos: Reports of 'devastating' China-based worm greatly exaggerated
• No slowing growth of image spam in 2006
• Vendors time updates for end-of-month Vista release
• Network of T.J. Maxx, Marshalls parent company hacked, unknown amount of customer credit card information stolen
• Federal guilty plea a done deal, California charges may be dropped against HP private eye
• Fortify acquires Secure Software
• Airports - a threat to mobile security
• Train to prevent social media attacks
• Keep your spam filter up to date for effective email security
• Implementing compliance through privacy policy
• Google cross-site scripting vulnerability found, patched
• California phisher faces century in jail for targeting AOL users
• Sun patches flaw vulnerable to malicious image files
• New VML exploit found, considered unreliable
• Keylogging, phishing, ID theft all surging, says McAfee
• First come, first served
• People on the move: Appointment at DES
• People on the move: Appointment at Frost & Sullivan
• People on the move: Appointment at LANDesk
• People on the move: Appointment at McAfee Avert, Labs and Production Development
• People on the move: Appointment at Fortinet
• Events & Seminars
• Advertising feature: E-crime and the threat of spyware - In association with Webroot
• Advertising feature: SC Breakfast Briefings
• Letter: A Microsoft mystery
• Letter: One size fits none
• Letter: Beware! Pirates at work
• The Month: ThreatStats - An overview of the most widespread dangers lurking behind your computer screen
• The Month: Briefs - Industry round-up
• Threat of the Month: USB U3
• Phishing blues
• The Month
• The Poll
• Analysis
• The Month: Global snapshots - Credit card fraud; pornography at Catholic school; hacking to ransom
• The Month: The Quote
• The Month: Britons invite ID fraud
• Oracle releases 51 patches
• Protecting your company's good name outside of the network
• Spammers hijacking legit newsletters
• Hackers attack MoneyGram International server, breach personal info of 80,000 customers
• HP private eye pleads guilty to ID theft, conspiracy charges
• Court orders Movieland.com to limit pop-ups
• Start some good habits this new year
• Got something to say?
• Security tokens coming for eBay's PayPal customers
• New death-threat phishing scams target professionals
• For first time, Oracle announces quarterly patch plans
• Month of Apple Bugs projects reveals highly critical Mac OS X flaw
• News briefs
• Debate
• Sarbanes, Oxley pass torch
• Company news
• Me and my job
• Put on your consulting hat
• It's all about the hierarchy
• Consider trust and reputation risks
• The verdict on Vista
• Sweet sixteen
• CA backup and recovery solution contains flaws
• Guarding the exit
• Fast growing threats
• Vulnerability reported in Snort intrusion prevention system
• Worldwide IT spending to hit $1.5 trillion by end of decade
• New Jersey duo arrested for changing grades with unauthorized network access
• Sophos picks up Endforce, adds NAC to endpoint products
• VeriSign iDefense offers $48,000 for Vista, Internet Explorer 7 vulnerabilities
• 10 ways to a solid ROI
• Patching process
• Good enough for your business?
• Hot or not: Early Vista flaws
• Hacker cracks University of Arizona network, may have breached employee information
• 'Make your own man-in-the-middle attack' online kit found
• Month of Apple Bugs project uncovers vulnerability in flaw-fixing tool
• Yet another Adobe Reader vulnerability discovered
• Postini: Spam, botnet levels soar
• Four fixes from Microsoft on Patch Tuesday, but none for critical Word flaws
• Five predictions for instant messaging security in 2007
• Los Angeles city employees charged with hacking traffic lights over labor dispute
• Singapore man could face 180 years in prison for illegal web access, also charged with fake bomb threat
• Trojans posing as rare Saddam Hussein execution videos
• Pre-Patch Tuesday flaws reported in Microsoft Excel, Internet Explorer 6
• Akonix predicts 2007 IM security drivers
• Product Section: Two staples of information protection
• PayPal, Barclays are phishers' favorites, according to PhishTank
• Microsoft cuts Patch Tuesday release from eight to four fixes
• New executives appointed at McAfee
• Venezuelan teen accused of hacking government sites, posting Chavez, Castro photos
• Finjan: Complex-code attacks to spike this year
• OpenOffice patches Windows Metafile hole
• Opera discloses two fresh flaws
• Phishers using Flash to evade filters
• Adobe Reader flaw more dangerous than thought
• Microsoft to release eight fixes on Patch Tuesday - including three for Office flaws
• Cisco reveals multiple Clean Access flaws
• Bill Hancock, convivial information security pioneer - and amateur stand-up comic - dead at 49
• Cisco acquires IronPort for $830 million
• Late-emerging New Year's scam was December's top virus
• Former Apple engineer patching Month of Apple Bugs-revealed flaws
• Acrobat Reader flaw opens websites to XSS attacks
• Man-in-the-middle phishing scheme targets Amazon.com
• Month of Apple Bugs day two: a VLC media player flaw
• Create a sound compliance framework
• Beyond v1@gr@ - spam's new image
• Is someone listening to your keyboard?
• Match your company policies with your solutions
• Virtualization - the next step in enterprise security
• Exploit released for Windows Mobile flaw
• Google fixes Gmail cross-site request forgery flaw
• QuickTime flaw the first of a month's worth of Apple bugs
• IM threats jump 15 percent in 2006, says Akonix