Security log

24.04.2006
No negligence ruled in data theft

U.S. District Judge David Doty in Minnesota ruled last month that Wells Fargo Bank was not negligent in a case of data theft. Two customers had filed a class-action lawsuit against the bank after computers containing customer information, including names and Social Security numbers, were stolen in 2004. Doty ruled that Wells Fargo was not negligent because the information was never misused by the thieves.

Rootkit attacks up

According to statistics from McAfee Inc.'s AVERT Labs group, the number of rootkit attacks detected in the first quarter of 2006 was up 700 percent from a year earlier. AVERT also found that the use of stealth technologies has increased more than 600 percent in just three years.

Security bookshelf

Selecting MPLS VPN Services, by Chris Lewis and Steve Pickavance (Cisco Press, 2006).

Any decent information security professional needs a working knowledge of the most up-to-date networking technologies, such as Multiprotocol Label Switching. The authors are thorough and fairly technical, covering everything from general networking protocols to Dynamic Multipoint VPNs. As a security guy, I especially liked Chapter 7, which discusses security issues within the MPLS VPN environment. This is a must-have title for security professionals and network engineers alike.