Security Management Strategies for the CIO
Email Alerts
-
Zero-day flaw found in Windows Media Player
Attackers could exploit a new zero-day flaw in Windows Media Player to cause a denial of service or launch malicious code. The threat is Microsoft's second zero-day flaw in a week. Article | 07 Dec 2006
-
New zero-day affects Microsoft Word
Microsoft confirmed reports of "limited" zero-day attacks and warned customers to be cautious when opening unsolicited Word attachments. Article | 06 Dec 2006
-
Multiple flaws in Adobe Reader, Acrobat
Updated: Multiple flaws in Adobe Reader and Acrobat could allow attackers to execute malicious commands on victims' computers. A fix is now available. Article | 30 Nov 2006
-
Source code analysis part of DoD's app security plan
The U.S. Navy Network Warfare Command's evaluation of Ounce Labs' source code analysis technology showed how a tool such as Ounce could improve the Department of Defense's application security and reduce project costs. News | 08 Nov 2006
-
Podcast: Expert sees rise in sophisticated attacks
In this edition of Security Wire Weekly, Andreas Wiegenstein, chief technology officer of Virtual Forge discusses why application security attacks are becomming more sophisticated. Article | 30 Oct 2006
-
Secure voting: Source code analysis tool key to absentee ballot system
PostX turned to the Fortify Source Code Analysis tool for help developing an absentee ballot request system for the U.S. Armed Forces. The system allows deployed military personnel to securely request and receive absentee ballot packages via the Web ... Article | 17 Oct 2006
-
Exploit code targets unpatched PowerPoint flaw
Microsoft is investigating reports of a new, unpatched flaw attackers could exploit using malicious PowerPoint files. Proof-of-concept exploit code has been released. Article | 13 Oct 2006
-
Microsoft delivers 10 patches and tool update
Updated: Microsoft released six critical patches and updated a software tool Tuesday, but a technical problem prevented the company from pushing the fixes out via its automated tools. Article | 10 Oct 2006
-
Hijacked consumer machines target the enterprise
Attackers continue to strike gold by targeting consumers who lack the security savvy to address desktop application flaws, according to Symantec Corp. Enterprises ultimately pay the price. Article | 25 Sep 2006
-
New Microsoft Word zero-day exploit discovered
Updated: Trojan.MDropper-Q is exploiting a vulnerability in Microsoft's word-processing application that could allow attackers to take control of certain machines. Article | 05 Sep 2006