Security Management Strategies for the CIO
Email Alerts
-
Experts doubt Russian government launched DDoS attacks
Distributed denial-of-service attacks against Estonian computer systems probably originated from smaller groups in control of botnets rather than the Russian government, experts say. Article | 18 May 2007
-
Microsoft issues critical updates, patches DNS zero-day flaw
Microsoft issued patches to plug 19 holes, including a critical zero-day DNS Server Service flaw as part of its monthly Patch Tuesday bulletin. Article | 08 May 2007
-
Inside MSRC: Microsoft issues further guidance on Exchange update
Microsoft's Christopher Budd explains vulnerabilities affecting Microsoft Exchange and other critical patch updates. Column | 08 May 2007
-
Anatomy of a zero-day: Security researchers face hurdles
Despite industry organizations bringing some order to the software testing process, security researchers say obstacles continue to slow their progress. Article | 19 Apr 2007
-
Microsoft releases patch for Windows ANI flaw
Security companies are seeing massive attacks against the Windows ANI zero-day flaw, prompting Microsoft to rush out a fix a week before Patch Tuesday. Article | 02 Apr 2007
-
US-CERT warns of Windows-Office flaw
Also: GnuPG flaw could compromise signed messages, Mozilla warns of a new Firefox glitch; Apple fixes multiple QuickTime flaws; and WordPress upgrade fixes 'dangerous' flaw. Article | 12 Mar 2007
-
Apple fixes multiple QuickTime flaws
Attackers could exploit multiple flaws in Apple QuickTime to run malicious code and take control of targeted machines, but a security update is available. Article | 06 Mar 2007
-
Google plugs dangerous flaw
An attacker could exploit a hole in Google Desktop to gain access to users' personal files. Google has released a patch, but experts say not all users are receiving it. Article | 21 Feb 2007
-
Microsoft investigates new Word zero-day; Cisco releases firewall patches
Microsoft says Office 2000 and Office XP could be affected. Also, Cisco patches firewall flaws that could be exploited to bypass security restrictions or cause a denial of service. Article | 15 Feb 2007
-
Microsoft fixes zero-day flaws in Word, Office
Twelve security updates from Microsoft fix a range of problems, including a flaw in the Malware Protection Engine and previously-exploited zero-days glitches in Word and Office. Article | 13 Feb 2007