April, 2007:

• New York State settles with breach notification law violator
• Second Adobe Photoshop flaw disclosed in a week
• CSIA appoints Bennett president
• A model state
• Microsoft: DNS patch likely for May Patch Tuesday
• Jack Valenti, 1921-2007
• Meet President Bennett
• Phishing scheme dupes bank customers into forwarding phone calls
• Cisco warns of NetFlow vulnerability
• Trading in your binoculars for a keylogger
• Websense acquires competitor SurfControl for $400 million
• Flaw in Adobe Photoshop could compromise systems
• QuickTime flaw opens Java-based browsers to one-click attacks; rumors of public exploit circulate
• Virginia is for spammers
• Google sponsored advertising links lead to exploits
• SC Magazine joins the blogosphere
• QuickTime flaw found at CanSecWest also affects Internet Explorer on Vista
• Personal information of 160,000 Neiman Marcus employees breached
• Banks file suit against TJX over breach costs
• Another data breach to report
• A “genius” idea?
• That’s foxy
• Amero sentencing pushed back to mid-May
• Sophisticated web threats flummox most two-factor solutions
• Take their advice, please!
• QuickTime bug exposed at CanSecWest more than just a Safari flaw
• TippingPoint: Contest-winning Safari flaw affects all Java-enabled browsers
• Federal ID theft task force recommends national breach identification law, tougher standards
• If I had a dollar for every federal agency breach in the last year…
• When worlds collide
• Apple patches 25 flaws
• Post DOS Stress Disorder
• Microsoft works against the clock to ready DNS fix for May 8 Patch Tuesday
• Watchfire to open up some product code
• Help remove sicko Virginia Tech scam/malware sites
• The top five reasons why NAC is not enough
• Is an IT risk management program strategic or tactical?
• Spam: Here to stay for now
• CIPA key to keeping students safe on the web
• Hackers, laptop thieves compromise personal information of 17,500 at Ohio State in separate incidents
• Virginia Tech massacre may spawn phishing scams
• Oracle releases 36 patches
• April 17, the new April 15
• Variants of Rinbot worm attack Windows Server DNS flaw
• Let the forensics exam begin
• Money matters: SC Magazine/EC-Council Salary Survey 2007
• Exploits for Windows Server DNS flaw released
• Former CA CEO to pay $800 million in fraud restitution to investors
• When IT security takes a backseat
• Microsoft: Critical security bug in Windows Server DNS Service
• It's back: New 'storm worm' spam run launched
• Flaw in Windows can be exploited with malicious HLP files
• Federal agencies earn C- on FISMA report card
• Paris Hilton, Jenna Jameson image spam scams spread malware
• Cover story: Some enterprises benefiting from the convergence of physical and information security assets
• Flaw in Windows can be exploited with malicious HLP files
• FISMA grades of federal agencies expected today
• Cooperation among departments key to organizational security
• CSOs on the state of the industry
• SC Magazine 2007 Awards
• Microsoft refutes exploit-site reports of Office flaws
• Oracle to release 37 security patches next week
• Dot your Is and cross your Ts
• Product section: Managed security services and forensic tools
• Editorial: Evolving the views of security today
• News briefs
• Debate
• Company news
• 2 minutes on...anonymous web browsing
• Me and my job
• Avoid the rearview mirror
• Say yes to innovation
• CSOs, broaden your organizational focus
• Got something to say?
• Microsoft fixes eight vulnerabilities on second April Patch Tuesday
• Disk with personal information of 2.9 million Georgia residents lost while in possession of breach-prone Affiliated Computer Services
• How the TJX breach may change security awareness
• Symantec fixes Enterprise Security Manager flaw
• Apple issues fixes for AirPort Extreme Base Station
• Symantec's Altiris acquisition complete
• Is Apple raining on Microsoft’s parade?
• Storm worm strikes again on Easter with malicious World War III messages
• USB devices — the lean, mean and portable threat
• Unknown number of victims in Hortica Insurance backup tape loss; laptops stolen from Chicago Public Schools
• Despite patch, Microsoft ANI exploits attack through the weekend
• Sopranos/IT security prediction falls just short
• Who needs your Visa when I got your Warcraft creds?
• Tony Soprano and cybercrime have more in common than you think
• VeriSign: Increased domain name fees for security
• eEye spots pre-Patch Tuesday Windows flaw
• Cut Microsoft a break, just this once
• Audit reveals almost 500 IRS laptops lost or stolen
• Secunia reports Kaspersky vulnerabilities as highly critical
• Hot or Not: Local privilege escalation vulnerabilities
• Enterprises need strategic view of risk management
• Five bulletins planned for post-ANI fix Patch Tuesday
• A sad song: Kaspersky discovers iPod proof-of-concept virus
• Experts say Microsoft should consider change in patching process
• Hackers access personal info of 46,000 University of California, San Francisco students, staff
• Firefox users also vulnerable to ANI attacks
• Racy Britney Spears photos used as ANI exploit lure; few problems reported with early Windows patch
• Yahoo updates to patch Messenger ActiveX vulnerability
• Oh baby, baby…
• Brown out as eEye CEO
• Microsoft releases early ANI fix in GDI patch
• Microsoft saves the world with the ANI patch
• It's a joke: Week of Vista bugs project just a prank
• Pentagon, NASA hacker loses appeal, could face 60 years in prison after extradition to U.S.
• The what, where and how of protecting IP
• The network security food chain
• Month of MySpace bugs kicks off
• Encryption is the last defense for data in a digital world
• Variety of malware attacks Windows ANI flaw before early Tuesday patch
• Exploit in wild for CA storage software flaw
• Microsoft to release ANI patch a week early
• Welcome!