Record-breaking Microsoft patch day affects all versions of Windows

	Military wants full disk encryption for iPhone, Android smartphones | Can IPS appliances remain useful in a virtual-machine world?
	Network World Security				Forward this to a Friend >>>
	Record-breaking Microsoft patch day affects all versions of Windows Microsoft released a record-breaking number of patches today that affect all versions of Windows and Office -- including its cloud apps -- and addresses some long-standing holes that hackers have been exploiting in the wild. By the numbers: 17 security bulletins fix a whopping 64 holes. These include nine critical patches and eight important. Of the critical patches, five of them have the highest "exploitability index" rating of 1, meaning that the risk of attack is high and the impact of being pwned is also high. Today's Patch Tuesday is a record-breaker in the number of holes fixed. In December, 2010, Microsoft released 17 patches, too, but these fixed a total of 40 holes. Read More WHITE PAPER: Dell Guidelines for Choosing a QSA The independent white paper in this security KnowledgeVault is just one of the resources to help you make the right decision. It details the top 5 questions to ask a prospective QSA firm and offers guidelines on everything from making sure they adequately handle compensating controls to assessing their expertise with virtualization. Learn more. In this Issue Military wants full disk encryption for iPhone, Android smartphones Can IPS appliances remain useful in a virtual-machine world? US police increasingly peeping at e-mail, instant messages Not Star Trek but scientists find better way to see warped space, time Microsoft says Google made 'misleading security claims to the government' Hacker 'handshake' hole found in common firewalls Kerry, McCain introduced online privacy bill Epsilon E-Mail Hack: How You Can Protect Yourself WHITE PAPER: Dell Shelter from the Storm: Data Security for SMBs Small and midsize businesses must deploy cost-effective strategies to improve security and minimize the impact of data breaches. The resources in this Data Security KnowledgeVault will help guide you through six vital steps to get out of reactive mode and build a foundation for a multilayered approach to data security. Learn more. Military wants full disk encryption for iPhone, Android smartphones The US military wants to take no security chances with the smartphones it is deploying. Read More Can IPS appliances remain useful in a virtual-machine world? Intrusion-prevention system (IPS) vendors have not found it easy to recast their appliances for use in the virtual-machine (VM) environment. But now McAfee and Sourcefire claim to have overcome some hurdles, at least with VMware's VM. Read More WHITE PAPER: Quest Software Concept Becomes Reality with Quest In this Quest white paper by the Enterprise Strategy Group, discover a solution that simplifies desktop virtualization implementation and management – while keeping cost and risk low and uptime high. Read now! US police increasingly peeping at e-mail, instant messages Law enforcement organizations are making tens of thousands of requests for private electronic information from companies such as Sprint, Facebook and AOL, but few detailed statistics are available, according to a privacy researcher. Read More Not Star Trek but scientists find better way to see warped space, time The closest I have come to visualizing warped space or time would probably be from Star Trek when crew member would beam up and down from the Starship Enterprise's Transporter room to other planets and dimensions. It was simple and required some imagination but not too much. Read More WHITE PAPER: IBM Managing Data and Application Security Risks This whitepaper shows how organizations can manage data and application security risks cost-effectively by using IBM Tivoli Data and Application Security to reduce costs and improve ROI. It provides examples of IBM customers who have realized the benefit Read Now Microsoft says Google made 'misleading security claims to the government' An attorney for Microsoft has all but called Google a liar. Google bragged that its cloud offering for the government had achieved a top federal security certification when it hadn't, unsealed court documents reveal. Based on this claimed security certification, Google filed a lawsuit against the government last year. Read More Hacker 'handshake' hole found in common firewalls Some of the most commonly-used firewalls are subject to a hacker exploit that lets an attacker trick a firewall and get into an internal network as a trusted IP connection. Read More Kerry, McCain introduced online privacy bill Privacy advocates criticize a bill focused on online data collection introduced Tuesday. Read More Epsilon E-Mail Hack: How You Can Protect Yourself Most of the time I only hear from my credit card companies when I owe them money or when they want to sell me a new service. That's changed; now I'm being bombarded with notes telling me that a company I never heard of has been successfully hacked and these still unknown bad guys now have my name and e-mail address -- and maybe more. Read More
	GOODIES FROM THE SUBNETS Up for grabs from Microsoft Subnet: a 5-day Microsoft Licensing Tricks class teaching negotiation tips; a Polycom system. From Cisco Subnet: 15 copies of Cisco Unity books. Enter here. SLIDESHOWS Internet2's Top 10 firsts and other achievements As Internet 2 celebrates its 15th anniversary, here are 10 major achievements and firsts. MOST-READ STORIES Security researchers exploit logic flaws to shop for free online What would a revamped Cisco look like? Internet2 turns 15. Has it delivered on its promise? Internet2's top 10 firsts and other achievements Cisco VoIP network ousted in Wisconsin school district Microsoft complains Google lied about Apps for Gov't Hacker breaks into Barracuda Networks database Cisco announces 100G Ethernet at AT&T, Comcast Cisco CEO calls for dramatic cuts and a narrowing of priorities 10,000-core Linux supercomputer built in Amazon cloud
	Do You Tweet? Follow everything from NetworkWorld.com on Twitter @NetworkWorld. You are currently subscribed to networkworld_security_alert as lisab509.pcnews@blogger.com. Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy If you are interested in advertising in this newsletter, please contact: bglynn@cxo.com To contact Network World, please send an e-mail to customer_service@nww.com. Copyright (C) 2011 Network World, 492 Old Connecticut Path, Framingham MA 01701 ** Please do not reply to this message. If you want to contact someone directly, send an e-mail to customer_service@nww.com. **