Security


Excel Bug Prompts Microsoft Advisory

Microsoft is looking into public reports of a vulnerability in Excel that could enable a remote code execution attack by hackers.

Researchers Say Gazelle Browser Offers Better Security

A team consisting of Microsoft Research personnel and university staff members has demonstrated a potentially more secure Web browser called Gazelle.

Q&A: How BeyondTrust Addresses Windows Security

Earlier this month, BeyondTrust released a report on security threats to IT shops running Microsoft software.

Rethinking IE 7's Patching Schedule

Plus, Cooking up a new browser from scratch; baking in security; Adobe Reader flaw discovered.

DNS Still Less than Secure

Exploits for a serious cache-poisoning vulnerability discovered in the DNS last year have begun to appear in the wild, and they have made security researcher Dan Kaminsky a believer in DNS Security Extensions.

Microsoft Ending Equipt Consumer Service

Microsoft plans to discontinue an all-in-one consumer software offering called Microsoft Equipt after April 30.

Hackers Targeting IE 7 After Security Patch Issued

Trend Micro said hackers are targeting a hole in Internet Explorer 7 that was addressed in Microsoft's February security patch issued last week.

Microsoft Joins Group To Stop Conficker Worm, Offers Reward

Problems with the Conficker worm have become so widespread that Microsoft is putting up $250,000 for information leading to the arrest of the worm's author.

Letter to Obama: Consider Open Source

The Collaborative Software Initiative (CSI) today posted an open letter to President Barack Obama on open source software.

February's Patch Contains 'Critical' IE and Exchange Fixes

Redmond's February slate of security bulletins includes four patches -- two deemed "critical" and two "important."

Win7 UAC Debate Nipped With Fix

Plus, Microsoft revamps security portal; printer flaws get fixed; drivers get spammed.

Microsoft Plans To Fix UAC Security in Windows 7 RC

A debate erupted over the effectiveness of the user account control feature in Microsoft's beta release of Windows 7.

Four Security Fixes Planned for Patch Tuesday

Microsoft plans to rollout four security bulletins for this month's patch cycle on Tuesday, with two "critical" items and two "important" patches on the slate.

Microsoft Opens Up Web Sandbox

The source code for Microsoft's Web Sandbox is now available under an open license.

Study: Wi-Fi Networks Help Rapid Spread of Worms

An international team of computer scientists has demonstrated in the lab that it is possible for overlapping Wi-Fi networks in densely populated areas to support the rapid spread of malicious code that could infect an entire city in a matter of weeks.

Internal Security Lapse Seen in Fannie Mae Case

Insider threats to data security via theft or sabotage are sure to rise, especially as companies increase employee layoffs during a bad economy.

Secure Virtual Networks

Joern shows how to design a virtual infrastructure with security in mind.

Who's Afraid of Scareware?

Are you? Bogus pop-ups that hide crippling malware can bring networks to their knees. Here are some methods to stop scareware and fix the damages that it inflicts.

Scareware Creeps

They're out there.

Clickjacking Flaw Hits Chrome and Firefox

Though Microsoft may have gotten ahead of the browser-security curve with RC1 of IE 8, which includes a feature that helps protect against clickjacking attacks, recent developments suggest that other browsers haven't quite caught up yet.

Subscribe on YouTube