Network Security Roundup for September 17, 2003

TechNewsWorld: Companies Scramble To Patch Software Holes
17-Sep-03 08:13 ET

Story Highlights:
"A series of major software security alerts issued by Microsoft Corp. (Nasdaq: MSFT) over the past two months is causing headaches for corporate system administrators worldwide. Testing new Microsoft patches and rolling them out to affected systems is taking weeks or months at many companies, stretching overworked IT departments and delaying other technology projects."

Full Story on TechNewsWorld

Story Highlights:
"Security researchers on Tuesday detected hackers distributing software to break into computers using flaws announced last week in some versions of Microsoft Corp.'s Windows operating system. The threat from this new vulnerability -- which already has drawn stern warnings from the Homeland Security Department -- is remarkably similar to one that allowed the Blaster virus to infect hundreds of thousands of computers last month."

Full Story on CNN

Story Highlights:
"Microsoft CEO Steve Ballmer said his company was 'humbled' by its security gaffes of the last few weeks, and he promised to improve Windows operating systems to thwart threats. 'We are in many ways humbled by the developments of the last few weeks,' Ballmer said Monday in a speech before the Churchill Club, a Silicon Valley business organization noted for its industry heavyweights. 'Windows is the most popular platform in the world, so every security incident with it is just magnified and magnified and magnified across so many more systems than with any other platform.'"

Full Story on Security Pipeline

PCWorld: Intel (Nasdaq: INTC) Backs Off Security Plan

Story Highlights:
"Intel has announced it was taking steps to ensure that its design for the next generation of computer security components, code-named LaGrande, will be accepted and not vilified by the industry. Speaking at the Intel Developer Forum here this week, Intel executives say LaGrande will be aimed at business users rather than consumers. They also announced plans to make it easier for users to opt out of LaGrande, saying Intel no longer plans to include the LaGrande technology in all of its microprocessors."

Full Story on PCWorld

Story Highlights:
"The past two years have been a wild ride for Adrian Lamo: The 22-year-old has publicly taken credit for tunneling into networks belonging to Yahoo, Microsoft, Excite@Home and WorldCom. But unlike a typical electronic intruder, Lamo would inform the companies exactly how he gained access -- a move which let them repair the security vulnerability he exploited while sneaking in. Some of his targets even went so far as to call him 'helpful' for offering advice."

Full Story on News.com