Security


Japan, U.S., China Leading Sources of Web Attack Traffic

Japan, the United States and China topped the list of countries from which Internet attack traffic originates in a recent report by Akamai Technologies Inc. The three countries accounted for more than 60 percent of attack-oriented Internet traffic.

Buyer Beware with Virtualization Technology

As hackers continue to focus their attention on virtualized environments, those looking to adopt virtualization technologies should proceed with caution, according to report from InfoWorld.

September Patch To Fix Windows GDI Exploit and More

Redmond on Tuesday rolled out four critical fixes, as expected, for as many as eight remote code execution exploits for various Windows applications.

Cisco Warns of ASA, PIX Flaws

Cisco Systems Inc. last week warned of multiple vulnerabilities in its Cisco ASA 5500 Series and Cisco PIX security appliances that could trigger denial of service (DoS) or result in information disclosure.

Microsoft Makes Major Virtualization Splash

Microsoft kicked off its virtualization push with a number of product announcements, including a key virtual management tool.

Microsoft Updates IE Patch Due to VML Flaw

Microsoft this week released an update to a 2007 Internet Explorer patch covering Internet Explorer 5.01, Internet Explorer 6 and Internet Explorer 7.

Microsoft Announces SP1 for Forefront Client Security

The software giant this week released its first service pack for Forefront Client Security, a member of its Forefront family of security products.

Web Sites Rife with Unpatched Vulnerabilities

Although the overall number of vulnerabilities being discovered in software appears to be leveling off or even dropping, two recent reports on Web security say that the overwhelming majority of Web sites studied still have unpatched vulnerabilities that could expose visitors to malicious code.

BitLocker Password Exploit Is 'Very Unlikely,' Sisk Says

Redmond responded on Wednesday to an independent security vendor's discovery of a hard-drive encryption vulnerability affecting Microsoft's BitLocker function, Intel/HP's BIOS and several other products and programs.

Troubles in Terrorist Database

A variety of technical flaws in an upgrade of the system that supports the government's terrorist watch list has drawn congressional fire and raised concerns that the entire system might be in jeopardy.

Security Software: How Suite It Is

The writing's on the wall, it seems, for purveyors of security point solutions. Gone is the day of the best-of-breed anti-virus, firewall, e-mail security or encryption vendors. These days, it's a security suite play.

Browser Security Gets Focus in ZoneAlarm 8.0 App

Check Point Software Technologies today released a new solution to address Internet security woes.

Red Hat Hacked, Company Issues Security Advisory

In a sign that hackers have no problem taking advantage of open source solutions, Linux-based product distributor Red Hat issued a "critical" security advisory on Friday, saying that its servers had been compromised.

UPDATED: Microsoft Tool Helps Filter SQL Injection Attacks

Microsoft on Thursday released an improved security filter for its Internet Information Service (IIS) Web server that is designed to help thwart SQL injection attacks.

Microsoft Tool Helps Filter SQL Injection Attacks

Microsoft released an improved security filter for its Internet Information Service Web server that is designed to help thwart SQL injection attacks.

Vulnerability Management Needed for Security, Study Says

Companies can avoid attacks and minimize security cost overruns by practicing IT vulnerability management, according to a July study published by the Aberdeen Group.

Microsoft Unveils 'Ultimate' Support Service

Microsoft rolled out the highest level of its enterprise support programs to date, adding a new offering called "Microsoft Services Premier Ultimate."

Emmett's Integration Security Quiz o' Doom

Security and integration are far from mutually exculsive. Which is why it might help to know a little something about password authentication, asymmetric cryptography, server security, IPsec...

VMware's Updates Cause Problems, CEO Apologizes

Yesterday, August 12, was a blow-out day for some users of VMware's ESX 3.5 and ESXi 3.5 virtualization products, especially if they had applied the latest product updates called "Update 2."

SQL Injection Attacks on the Rise

MessageLabs reports that the number of SQL injection attacks spiked sharply last month.

Subscribe on YouTube