Who's Watching the Privileged Users?

*********************************************************************

___________________________ Sponsors ________________________________

Jupiterimages _____________________________________________________________________

********************************************************************* http://esecurityplanet.com/ Wednesday, March 29, 2006

eSecurityPlanet is part of the Earthweb network

All newsletters are sent from the domain "internet.com." Please use this domain name (not the entire "from" address, which varies) when configuring e-mail or spam filter rules, if you use them.

********************************************************************* ********************************************************************* TRENDS *********************************************************************

1. Who's Watching the Privileged Users? Companies trust their priviliged users to keep an eye on other employees, but who's watching the watchers?

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,67mq,3ec4,2ezm,3q9m

------------------------------------------------------------ 2. House Panel Preps ID Theft Law Republicans, Democrats reach accord on legislation targeting data breaches.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,71of,fz75,2ezm,3q9m

------------------------------------------------------------ 3. What We Can Learn from Fed's Cybersecurity The federal government recently got its report card for cybersecurity, and it wasn't a pretty picture. What can corporate IT professionals learn from the feds' mistakes?

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,iwkc,ifxj,2ezm,3q9m

------------------------------------------------------------ 4. Latest IE Exploit Creates Security Scramble UPDATED: A new exploit could defeat Microsoft workarounds.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,4xu3,3l94,2ezm,3q9m

------------------------------------------------------------ 5. IBM Readies 'Virtual' Worm-Detection Big Blue's new worm-detection system is preparing to lure worms, internetnews.com has learned.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,jv3o,dj5y,2ezm,3q9m

------------------------------------------------------------ 6. 3/29: PWSteal-Marlap-B Trojan Steals Info PWSteal-Marlap-B is a Trojan horse that steals sensitive information and sends it to predetermined Web sites.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,3e0k,5649,2ezm,3q9m

------------------------------------------------------------ 7. 3/29: VB-ATA Worm Sends Malware Messages W32/VB-ATA is a worm for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,hleo,af0e,2ezm,3q9m

------------------------------------------------------------ 8. 3/29: Mular-A Worm Spreads Via File Sharing W32.Mular-A is a worm that spreads using the eMule file-sharing program.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,57v2,gljf,2ezm,3q9m

------------------------------------------------------------ 9. Linux Kernel Point Release Fixes Flaws A potential vulnerability is quickly plugged as kernel developers issue the first point release of the 2.6.16 kernel.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,3hfh,h4u8,2ezm,3q9m

------------------------------------------------------------ 10. 3/29: Detnat Virus Infects Executable Files W32-Detnat is a virus that searches network shares and infects executable files.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,13c7,6ivd,2ezm,3q9m

------------------------------------------------------------ 11. 3/29: Loosky-CA Trojan Hides Processes Troj/Loosky-CA is a DLL component helper Trojan for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,ag1p,btny,2ezm,3q9m

------------------------------------------------------------ 12. 3/29: Mytob-HA a Mass-Mailing Worm, Trojan W32/Mytob-HA is a mass-mailing worm and IRC backdoor Trojan for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,j5jf,hfwf,2ezm,3q9m

------------------------------------------------------------ 13. 3/29: DNSBust-L Trojan Links to Server Troj/DNSBust-L is a Trojan for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,6n7l,duv6,2ezm,3q9m

------------------------------------------------------------ 14. 3/29: BankAsh-P Trojan Runs New Software Troj/BankAsh-P is a Trojan for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,hw8g,7xoh,2ezm,3q9m

------------------------------------------------------------ 15. 3/29: RKDepo-A a Trojan Rootkit Downloader Troj/RKDepo-A is a Trojan rootkit downloader for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,chhx,ekw0,2ezm,3q9m

------------------------------------------------------------ 16. 3/28: Welinf-A Virus Infects Files W32-Welinf-A is a virus that infects .vbs, .htm, and .html files with VBS-Welinf-A, a malicious, embedded Visual Basic Script. The threat also has back door capabilities.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,l2ps,bsml,2ezm,3q9m

------------------------------------------------------------ 17. 3/28: VBS-Welinf-A is Malicious Script VBS-Welinf-A is a malicious, embedded Visual Basic Script found in files infected with W32-Welinf-A, a virus that infects .vbs, .htm, and .html files.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,k7ji,ds2u,2ezm,3q9m

------------------------------------------------------------ 18. 3/28: Alcra-F Worm Spreads Via File Sharing W32/Alcra-F is a worm for the windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,4m90,3ox1,2ezm,3q9m

------------------------------------------------------------ 19. 3/28: PWSteal-Marlap Shows Fake Message PWSteal-Marlap is a Trojan horse that displays a fake AOL message and sends confidential information to the attacker.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,6bnz,3j2y,2ezm,3q9m

------------------------------------------------------------ 20. 3/28: Trojan-Textcash Executes CAB File Trojan-Textcash is a Trojan horse that executes a CAB file in Internet Explorer cache folders by exploiting the Microsoft Internet Explorer CreateTextRange Remote Code Execution Vulnerability (BID 17196).

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,bvfi,5l48,2ezm,3q9m

------------------------------------------------------------ 21. 3/28: Backdoor-CYQ Trojan Drops Files Backdoor-CYQ is a remote access Trojan.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,i2a8,ek6p,2ezm,3q9m

------------------------------------------------------------ 22. 3/28: Backdoor-CIP a Remote Access Trojan Backdoor-CIP is a remote access Trojan.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,7vot,b1c2,2ezm,3q9m

------------------------------------------------------------ 23. 3/28: Bancban-OJ Trojan Still in the Wild For the second time in a week, security vendor Sophos has issued an alert for Troj/Bancban-OJ, a Trojan for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,jzu,i6th,2ezm,3q9m

------------------------------------------------------------ 24. 3/28: Hearse-A Trojan Creates Two Files Troj/Hearse-A is a Trojan for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,3zvc,hvkl,2ezm,3q9m

------------------------------------------------------------ 25. 3/28: Singu-AK a Windows Trojan Troj/Singu-AK is a Trojan for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,67jm,811g,2ezm,3q9m

------------------------------------------------------------ 26. 3/28: Drsmartl-S Trojan Downloads Code For the second time in less than a month, security vendor Sophos has issued an alert for Troj/Drsmartl-S, a Trojan for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,9ggi,lgu,2ezm,3q9m

------------------------------------------------------------ 27. 3/28: Drsmartl-X Trojan Runs New Software Troj/Drsmartl-X is a Trojan for the Windows platform.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,2ku2,ijk1,2ezm,3q9m

------------------------------------------------------------

*********************************************************************

/-------------------------------------------------------------------\

Jupiterimages - your search ends here Jupiterimages offers online subscriptions and single image downloads for clipart, Web graphics, photos, footage and music (including flash versions) via a comprehensive network of design-oriented Web sites for industry professionals and individual consumers. See what you're missing. Go to: http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,dh1n,3138,2ezm,3q9m

\--------------------------------------------------------------adv.-/

********************************************************************* PRODUCTS AND SERVICES *********************************************************************

********************************************************************* VIEWS *********************************************************************

1. Updating our Thinking on Software Updates eSecurityPlanet columnist Ken van Wyk looks at the issue of software updates -- particularly the lack there of for mobile devices.

http://nl.internet.com/ct.html?rtr=on&s=1,2c3l,1,ll7n,mfcu,2ezm,3q9m

------------------------------------------------------------

********************************************************************* Earthweb.com's Family of Online Services for IT Insiders *********************************************************************

IT MANAGEMENT http://itmanagement.earthweb.com/ HARDWARE & SYSTEMS http://hardware.earthweb.com/ NETWORKING & COMMUNICATIONS http://networking.earthweb.com/ WEB DEVELOPMENT http://webdeveloper.earthweb.com/ SOFTWARE DEVELOPMENT http://softwaredev.earthweb.com/

Get the latest technical tips, tools, and resources via Earthweb's extensive collection of free e-mail newsletters!

*********************************************************************

You are subscribed to the eSecurity Planet newsletter as news-and-stuff@arconati.us. To unsubscribe from eSecurity Planet please send an email to: u-1a9c1-1b8622a7ba-1768@nl.internet.com

To manage your newsletter subscription preferences, visit this location: http://nl.internet.com/profilepage.html?uid=1b8622a7ba&eid=14137669

To unsubscribe via postal mail, please contact us at:

Jupitermedia Corp. Attn: Newsletter Subscription Dept. 475 Park Avenue South New York, NY 10016

Please include the email address which you have been contacted with.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This email is powered by EmailLabs (http://www.emaillabs.com) Contact us for a FREE demo