Security


Open Source Needs Better Security Focus, Study Says

The open source software community lags behind the commercial software sector in secure code development, according to a recent study of some commonly used open source packages.

DNS Flaw Unfixed as Experts Argue Protocol

Speculation continues as to what the ultimate systemic Domain Name System (DNS) flaw could be.

Compliance, New Threats Drive Security Spending

Enterprise security is an expensive proposition, one that's likely to get even more expensive as organizations take further steps to protect themselves.

Power Pack 1 Unveiled for Windows Home Server

Update adds product support plus a fix for an infamous bug that has plagued Microsoft's consumer server offering since December.

Research in Motion Issues Fix for BlackBerry PDF Bug

Maker of popular BlackBerry handset issued a patch to plug a vulnerability in its BlackBerry Enterprise Server (BES) solution.

Microsoft's $60B Year-End Revenue Dogged by Search Costs

Microsoft's fiscal fourth-quarter and 2008 year-end financial results were announced in a Webcast on Thursday.

Government, Health Care Web Sites Attacked

A scan of Web servers by Internet security company Finjan Inc. has found more than 1,000 legitimate Web sites that had been compromised by a new wave of attacks in recent weeks.

Oracle Releases Critical Updates

Oracle has released the latest quarterly round of critical patches for all its products.

Sentrigo Offers Help for Database Patching Woes

Sentrigo Inc. released its new Hedgehog vPatch database security software product on Tuesday.

Microsoft Remedies Windows Server Update Glitch

Microsoft confirmed reports of a distribution glitch preventing patch uploading in certain implementations of WSUS programs and provided a solution to the problem.

Windows DNS Patch Strands ZoneAlarm Users

Users of the security program ZoneAlarm encountered a problem accessing the Internet after applying a Microsoft Windows domain name system (DNS) patch described in security bulletin MS08-037.

Word 2002 SP3 Subject to Remote Attacks

Less than 24 hours after its Patch Tuesday release, Microsoft issued a security advisory connected to a possible vulnerability in Word 2002 Service Pack 3.

July Patch Cycle Elicits Some 'Critical' Opinions

On its face, today's July patch release from Microsoft seems to be light one. There are no "critical" or "moderate" ratings this time.

Massive Patch Coming for DNS Vulnerability

Major vendors of domain name system (DNS) servers are making an unprecedented coordinated release of patches for what is being called a fundamental flaw in DNS, a core element of the Internet.

Partners: An 'Essential' Element in Microsoft's SMB Plans

Microsoft used the occasion of its 2008 Worldwide Partner Conference today to announce that November 12 will be the official launch date of Windows Essential Server Solutions, which are all-in-one software solutions for small-to-medium businesses (SMBs) based on Windows Server 2008 and other Microsoft server technologies.

Microsoft Warns of ActiveX Exploit in Access

On Monday, a day ahead of its monthly patch release, Microsoft issued a security advisory specific to its database program in Microsoft Office.

Data Breaches Up in First Half of 2008

Reported data breaches increased sharply in the first six months of 2008, jumping 69 percent compared to the same period last year, according to a study by the Identity Theft Resource Center (ITRC).

Tougher Security Planned for Internet Explorer 8

In the wake of a report suggesting that IE was the least secure Web browser, Redmond on Wednesday touted the security features expected to appear in IE 8.

Microsoft Eyes Consumer Subscription Market With Equipt

Microsoft unveiled a new subscription-based consumer offering that combines an office productivity suite with security and hosted services.

Citibank Hack Shines Light on PCI Compliance

Just two days after the Payment Card Industry (PCI) Security Standards Council announced the deadline for application security compliance and said it would be issuing guidelines for PIN entry devices, court documents have emerged detailing an elaborate plot to hack Citibank's ATM network architecture.

Subscribe on YouTube