Security


Fake Microsoft Service Agreement E-mails Mails Used in Java Exploit

A recent phishing campaign that employs a Microsoft e-mail template has been spotted in the wild by researchers.

Security Stalemate

While Microsoft's dedication to software security should be the gold standard for others, it's a war that the company will never win.

UPDATE: Oracle Releases Patch for Java Zero-Day Flaw

Oracle released an update for Java 7 that addresses "3 distinct but related vulnerabilities and one security-in-depth issue affecting Java running in desktop browsers," said the company.

Experts Suggest Disabling Java after Zero-Day Flaw Discovery

Security firm FireEye released information yesterday on a Java flaw that has been seen in targeted attacks in the wild, and has been tested to work on most major Web browsers for both Mac and PC.

Attack of the Clones

Remember that "Pandora's box" that security bloggers and experts were warning about once it was reported that Stuxnet might have come from a government body?

Microsoft Issues Security Advisory for VPN Password Flaw

Microsoft issued Security Advisory 2743314 on Monday to warn users of two tools readily available that can be used to steal passwords from wireless networks and virtual private networks (VPNs).

Microsoft Echoes Security Issue

Microsoft released a security advisory this week warning about an issue that could cause VPN passwords to be stolen, thanks to the work of a couple of hackers.

'Shamoon' Malware May Be Flame 'Copycat'

Security researchers have identified a virus that can steal data from a targeted machine and then rewrite over the master boot record of a computer to make it inoperable.

Small RSA Keys Blocked, Will Trouble Follow?

While malware will have to use a new trick to infect systems, Microsoft's solution may hurt those who have dealings overseas.

Microsoft's Eye in the Big Apple

Big brother asks Microsoft for some assistance.

8 of 9 Microsoft August Bulletins Battle RCE Flaws

Microsoft's monthly Security Update arrived today with nine bulletins addressing 26 vulnerabilities. As with the past few months, remote code execution flaws are targeted in the majority of items.

9 Fixes Scheduled for Microsoft's August Security Update

Microsoft's August Patch Tuesday release will feature nine bulletin items, with five being rated "critical", according to Microsoft's Security Bulletin Advance Notification.

Microsoft Develops Surveillance and Counterterrorism Database System for New York City

Microsoft has announced it has partnered with the New York Police Department (NYPD) to develop a crime prevention and counterterrorism system.

BYOD: The Security Headache

Not only does it not save enterprises money, but it adds a ton of security issues. What's not to like?

Enterprises Have Cloud Trust Issues

According to a recent poll, cloud security still isn't up to the level to handle the data of many enterprises.

Survey: Two-Thirds of IT Pros Say BYOD Connectivity Increases Company Costs

According to a study, 67 percent of IT pros say that bring your own device (BYOD) policies in the enterprise increases the cost to companies.

Going Cloud: Identity Management as a Service

Keeping data secure in the cloud requires a new approach to authentication and authorization.

Can You Trust Public Cloud Security?

The safety of data remains the key reason many enterprises won't use cloud hosting services.

Creating a Cloud Master Plan: 6 Top Priorities

Your guide to 6 key considerations -- including security, storage, Exchange hosting and more -- for moving infrastructure and applications to public, private and hybrid clouds.

Windows 8 Won't Be a Hacker's Paradise

Attackers will have to learn a new trick if they want to hack Windows 8.

Redmond Tech Watch

Sign up for our newsletter.

I agree to this site's Privacy Policy.