Network Security Roundup for July 22, 2003

CNN: 'Phishing' Scams Reel in Your Identity
22-Jul-03 10:21 ET

Story Highlights:
"The Web sites look real and the information sought seems justified. But it's really the latest form of e-mail scam, called 'brand spoofing,' 'carding' or 'Phishing.' The official-looking messages tell recipients that, because of technical problems, billing information and social security numbers for their accounts must be resubmitted."

Full Story on CNN

Story Highlights:
"If there is a heaven, the angels are in for a hell of a time when Jude Milhon, the Internet's real and very earthy patron saint of hacking, shows up."

Full Story on Wired

Story Highlights:
"This Friday marks the end of the 30-day period in which the U.S. Department of Homeland Security hoped it would hire a leader for its cybersecurity division. But there are serious doubts about whether the DHS will be able to hire the right person this week or even in the foreseeable future."

Full Story on Computerworld

IDG.net: DHS Had Little Choice But To Sign Microsoft (Nasdaq: MSFT) Deal, Despite Security Flaws

Story Highlights:
"The fact that the U.S. Department of Homeland Security awarded Microsoft Corp. a $90 million enterprise software deal two days after Bill Gates met with DHS Secretary Tom Ridge in Washington is more than sheer coincidence. It's now a major security headache for a mammoth new agency that security experts say lacks the wherewithal to have considered alternative sources for its software."

Full Story on IDG.net

Story Highlights:
"Storage systems weren't designed with security in mind. They started out as direct-attached, so if the host was secure, the storage was, too. That's all changed."

Full Story on ComputerWorld