Stories by: Tim Greene

Count the World Bank Group among the high-profile organizations suffering major data breaches - maybe.

Anyone with a sharp eye for flawed business logic and a dim view of business ethics can exploit e-commerce Web sites for millions of dollars, security experts told Black Hat attendees.

Corporate IT executives need to create internal task forces today to deal with what can be an expensive threat - litigation, Black Hat attendees were told.

The encryption of Skype VoIP phone calls might not be as secure as you think.

Threats against browsers are getting more sophisticated and branching out into such exotic areas as gaming, experts told attendees at RSA Conference 2008.

Cracking a power company network and gaining access that could shut down the grid is simple, a security expert told an RSA audience, and he has done so in less than a day.

When the city of Madera, California, needed a new voice system, it turned to open-source technology -- not just for the IP telephony but for an entire network-infrastructure overhaul and loads of other functions. All the renovations cost less than half the estimated price of deploying a commercial voice over IP VoIP system alone. This smart, budget-wise use of open source across the network wins the city a 2007 Enterprise All-Star Award.

When the city of Madera, California, needed a new voice system, it turned to open source technology -- not just for the IP telephony but for an entire network-infrastructure overhaul and loads of other functions.

The Storm worm is fighting back against security researchers that seek to destroy it and has them running scared, Interop New York show attendees heard this week.

Digium, whose open source Asterisk IP PBX spawned a host of start-ups that commercialise the software, has bought up one of them because it has a better user interface than Digium's.

MI5 Networks is adding botnet protection to its secure Web gateway appliance, making it possible to detect and block the malicious activity of corporate machines commandeered as launch pads for spam and distributed denial-of-service attacks.