We continue our series of interviews with Lotus Business Partners. This week, I had the opportunity to interview Roger Matus, CEO and co-founder of InBoxer, Inc. In this very timely in-depth interview, Roger helps us understand some of the issues involved in making sure your organization’s email is archived and can be found in the event of a legal situation.

Read this DominoPower article.

Security holes in online applications may go unfixed because well-intended hackers are afraid to report bugs.

Web applications pose a dilemma for bug hunters: how to test the security without going to jail? If hackers probe traditional software such as Windows or Word, they can do so on their own PCs. That isn’t true for Web applications, which run on servers operated by others. Testing the security there is likely illegal and could lead to prosecution.

A new variant of the Storm Worm (aka Snow Worm) is slamming into email inboxes worldwide as an apparent patch or fix for a recent worm attack.

The latest variant appears to ride on the coattails of worm that Trend Micro calls Nuwar.AOP. The Trojan part of this worm is known as Small (Kaspersky and Trend Micro), Downloader (McAfee), Peacomm (Symantec), and officially by the designation CME (Common Malware Enumeration) 711.

According to Ken Dunham of iDefense, this new variant worm includes anti-security measures to hinder analysis, and sends out copies of itself inside of a password protected ZIP file to evade antivirus detection. Unfortunately, to further evade detection the emails sent are randomized with different filenames, different passwords, and different binaries within the ZIP file.

Canonical, the lead sponsor of Ubuntu, announced that users of Ubuntu 6.06 LTS edition (Long Term Support) can now download and deploy IBM DB2 9. The simplified deployment process and ease-of-use of Ubuntu, combined with IBM DB2 9 data server software, will enable companies to develop and deploy data servers at a lower cost.

Ubuntu 6.06 LTS is freely available, including security updates on servers, with no restrictions on usage. Businesses can now easily download and deploy IBM DB2 9 for Linux from the commercial section of the Ubuntu repository benefiting from the integration that Canonical and IBM have developed.

IBM is looking to offer customers a way of reducing power consumption in the data center by offering System x and BladeCenter systems with low-watt Intel and AMD processors.

At the BladeSystems Insight conference in Savannah, Ga., IBM is scheduled to introduce plans to offer these low-watt processors in its BladeCenter systems and several of its 1U (1.75-inch) and 2U (3.5-inch) System x servers.

The company is also planning to announce that it will offer a version of its BladeCenter H21 system with a 4GB modular flash drive.

IBM said it will be able to make microchips faster and more energy efficient by stacking components on top of each other, a breakthrough that cuts the distance an electrical signal needs to travel.

The technique works by drilling tiny holes through a wafer of silicon and filling them with metal. Components such as memory can then be stacked on top of the main part of the chip, eliminating the need for wires stretching out to the sides.

IBM announced that it has begun a new coalition to accelerate the adoption of Intelligent Utility Network technologies and solutions on a global basis. CenterPoint Energy’s electric transmission and distribution subsidiary, CenterPoint Energy Houston Electric, LLC, is the founding member of a group of utility companies working with IBM on this initiative.

The CenterPoint Energy IUN is based on a service oriented architecture and is built using IBM WebSphere Modeler software, an IBM DB2 database, and IBM WebSphere Portal software.

Oracle next week plans to release fixes for 37 security flaws across all its products, the company said Tuesday.

The fixes will be delivered April 17 as part of Oracle’s quarterly patch cycle. Seven of the bugs are serious and could allow a system running the vulnerable Oracle software to be compromised remotely, the company said in a note on its Web site.

This is the second time Oracle is giving a heads-up on patches. The first such advance notice was in January. Microsoft has been giving customers a similar early warning since late 2004. Both companies have put their patches on a schedule so customers know when to expect them. The early warning is meant to allow for extra preparedness.

Iona Technologies has announced its acquisition of LogicBlaze, a provider of open-source service-oriented architecture technology.

Financial terms of the all-cash acquisition were not disclosed. Iona, based in Dublin, Ireland, with U.S. headquarters in Waltham, Mass., provides SOA infrastructure solutions and is a leader of the open-source Eclipse SOA Tools Project.

Symantec has patched a security hole in its Enterprise Security Manager tool that allows attackers to take control of infected machines.

The company cautioned users in an advisory that all versions of ESM, except version 6.5.3, are vulnerable to a remote code execution attack. The problem, officials at the antivirus vendor reported, is that the ESM agent remote upgrade interface does not authenticate the source of remote upgrade requests–a vulnerability that can be exploited to launch malware via a specially crafted upgrade request.