Aviv Raff posted a public disclosure of a minor security risk that could be a major problem if used in conjunction with another type of problem. It's true that his discovery isn't really one that by itself should keep you up at night, but it's one that I'm surprised...

The Commerce Department is considering deploying digital signatures to make DNS less susceptible to hacking, ComputerWorld reports. Under the proposal, DNS records would be signed by DNSSEC Domain Name and Addressing System Security Extensions. There have been some commitments to the system for the following top-level domains:...

The bottom is falling out of the market for spying on Internet users. Adzilla says it is leaving the North American market to focus on a part of the world with a seemingly limitless appetite for snooping – Asia. Adzilla's home page says: ...

Walmart has done a 180 on its earlier decision to pull the plug on its DRM servers (thereby locking customers' music collection to whatever PC it happened to be on at the time) and decided to keep the DRM servers running - for now. Important Information About Your Digital Music Purchases ...

We tend to say that information security is a small world. Conferences quickly become real-life demonstrations of the principle of six-degrees-of-separation. After a few years working in this industry, you either meet all or are within one hop of all the major players in the space; there just...

It will be a very busy Patch Tuesday for administrators managing Microsoft Windows computer systems. According to Microsoft's advance notice mechanism, 11 security bulletins will drop next Tuesday (October 14, 2008), covering a wide range of serious vulnerabilities. Four of the 11 bulletins are...

Apple has shipped another whopper of a patch to cover a total of 40 documented vulnerabilities affecting the Mac OS X ecosystem. The Security Update 2008-007, available for Tiger and Leopard, covers a range of third-party components and Mac OS X flaws that could users at risk...

Proud owners of ASUS's Eee Box mini PC got more than they bargained for - malware. by Adrian Kingsley-Hughes

The door is being looked at, in other words, while the barnyard door is wide open. So how closely should the government be regulating medical tests that are marketed to consumers? Are warnings good enough? Or is it time for stricter controls? by Dana Blankenhorn

Buried in the flurry of feature-related news surrounding the release of Opera 9.6 is the fact that the update fixes an "extremely severe" vulnerability that could expose Opera users to code execution attacks. According to an Opera advisory, which is not mentioned anywhere in Opera's giddy press...

While the Web swoons over news of Apple's latest $800 market entry, Asustek is planning to launch touchscreen Eee PCs in the first quarter of 2009, which the company expects will help drive sales further, according to Samson Hu, general manager of Eee PC business at Asustek, by way of...

Asus has confirmed and apologized to customers (press release in Japanese; translated version) for shipping malware on the recently introduced Eee Box desktop computer : "According to an email sent out by Asus, PC Advisor reports, the Eee Box's 80GB hard drive has the recycled.exe virus files hidden in...

Candians who vote to re-elect the Conservative government next week will also be voting for an archly pro-copyright agenda. According to the party's official platform released yesterday: A re-elected Conservative government led by Stephen Harper will reintroduce federal copyright legislation that strikes the appropriate balance among the rights of...

How much is spam worth? In the case of a couple who sent millions of spams to a small ISP, $236 million. That's the judgment a federal judge in Iowa levied against the husband-and-wife spamming team of Henry Perez and Suzanne Bartok, IDG reports. Over four months in 2003,...

Somebody is finding some values out there in techland. Symantec on Wednesday said it is acquiring MessageLabs for $695 million in cash. MessageLabs, which offers messaging and Web security services, had about $145 million in revenue for the fiscal year ending July 31. Symantec...

Following the recent release of a PoC demonstrating clickjacking in action, Adobe has released a security advisory offering solutions for customers and IT administrators on dealing with the flaw until they releases a Flash player patch before the end of October. "We have just posted a Security Advisory for...

After years of operation, California based ISP Atrivo/Intercage, a well known Russian Business Network darling, faced the music and was disconnected from the Internet by its upstream provider at the end of September. What happened according to MessageLabs's latest intelligence report, was a brief decline of spam due to the...

[ UPDATE: The details are out. Lots of unresolved clickjacking issues] A security researcher in Israel has released a demo of a "clickjacking" attack, using an JavaScript game to turn every browser into a surveillance zombie. The release of the demo follows last month's...

A federal judge has ruled that an antitrust suit against Apple and A&T over exclusivity deals for the iPhone may move forward, Ars Technica reports. Apple and AT&T signed a five-year exclusive deal but only told consumers they would have to sign up for a two-year...

Here are today's notable headlines. You can get News To Know via email alert and RSS daily: Sam Diaz: AMD to spin off manufacturing. Techmeme Heather Clancy: The color that shall not be named. AMD's Vertal downplays green credentials, plays up efficiency arguments ...