Email Alerts
-
Google fixes Gmail zero-day
Google plugged a cross-site scripting flaw that could have been exploited to silently forward emails and contacts from a remote user's account. News | 02 Oct 2007
-
Serious Google Gmail flaw exposes sensitive user data
A cross-site scripting vulnerability in Gmail allows attackers to silently forward emails and view sensitive data. Article | 27 Sep 2007
-
Ask.com toolbar contains 'Highly critical' flaw
Attackers could exploit a serious security flaw in Ask.com's popular Internet Explorer toolbar to execute malicious code on targeted computers, researchers warn. Article | 26 Sep 2007
-
Government warns of dangerous QuickBooks Online flaw
Attackers could exploit two flaws in the popular Intuit QuickBooks Online Edition to cause buffer overflows and download or upload files in arbitrary locations, US-CERT warned. Article | 06 Sep 2007
-
Security update fixes Yahoo Widgets flaw
Attackers could exploit a Yahoo Widgets flaw to run malicious code on compromised Windows computers, but a security update is available. Article | 30 Jul 2007
-
Microsoft July updates for critical Excel, Windows and .NET flaws
Of the six security updates Microsoft released Tuesday, experts expressed the most concern about a critical glitch in the .NET Framework that could leave client machines and Web servers open to attack. Article | 10 Jul 2007
-
ActiveX flaws plague SAP GUI
SAP recently plugged holes in its new SAP GUI to eliminate flaws that could allow an attacker to gain access to a system remotely. Article | 06 Jul 2007
-
Apple tackles a new QuickTime flaw
For the second time in a month, Apple has been forced to fix a QuickTime flaw attackers could exploit to access sensitive system data and run malicious code. Article | 30 May 2007
-
Microsoft investigates new Office zero-day flaw
Attackers could exploit a newly-discovered zero-day flaw in Office 2000 to run malicious code on targeted machines, Symantec warned. Microsoft is investigating the issue. Article | 23 May 2007
-
Microsoft fixes Office 2007 patch issues, releases MOICE
The Microsoft Security Response Center acknowledged that some of the company's May 8 security updates didn't make it to machines running Office 2007 on Windows Vista. Article | 22 May 2007
Security Management Strategies for the CIO