Email Alerts
-
Researchers warily watch for Microsoft GDI exploits
Symantec, US-CERT and other security organizations are tracking attempts to exploit the GDI flaw Microsoft addressed last week in its MS08-021 patch bulletin. Article
-
Oracle preps CPU for 41 flaws
Oracle said Thursday that it is prepping a Critical Patch Bulletin (CPU) to address 41 security holes across its product line. News
-
Worst practices: Encryption conniptions
Through the years, SearchSecurity.com's expert contributors have no doubt spent much of their time pointing out a variety of security best practices. But what about the worst practices? In honor of April Fools' Day, network security expert Mi... Tip
-
Misconfiguration issues could have contributed to Hannaford breach
Hannaford takes heat from officials who believe the supermarket chain was slow in disclosing its breach. Meanwhile, one of Hannaford's security vendors gets defensive. Article
-
Misconfigured networks create huge security risks
Security experts say IT pros should be more concerned about the risks created by misconfigured networks than all the flaws and exploit code they read about. Article
-
Researchers trying to exploit latest Microsoft flaws
Researchers set their sights on flaws Microsoft addressed Tuesday in security bulletins MS08-006 and MS08-007. Risks of the first one in particular are underrated, they say. Article
-
Microsoft to release critical updates for Windows Vista, IE, Office
Microsoft on Thursday said it expects to release seven critical updates next week addressing flaws in Microsoft Windows, Internet Explorer and Office. Article
-
Oracle patches serious holes with latest CPU
Vulnerabilities in Oracle Application Server can be exploited remotely to hijack a system, according to Oracle's latest Critical Patch Update. Article
-
Should a Java Runtime Environment (JRE) be kept up to date?
Critical security flaws are often discovered in Java Runtime Environment implementations. Unfortunately, most users don't apply any appropriate patches. Ed Skoudis reveals the security risks posed by a vulnerable JRE. Ask the Expert
-
Inside MSRC: Microsoft tells details about latest security advisories
Microsoft's Christopher Budd examines the public disclosure of a vulnerability in a driver provided by Macrovision and an issue installing updates on Microsoft Windows systems. Column
Security Management Strategies for the CIO