Email Alerts
-
Microsoft DNS server flaw called dangerous
UPDATE: Microsoft said Sunday that attacks are still limited, but a proof of concept code to exploit the vulnerability is publicly available. Article | 13 Apr 2007
-
Microsoft investigates new Office zero-day flaws
On the same day Microsoft released five security updates for Windows and Content Management Server, McAfee reported possible new zero-day flaws in Office. Article | 11 Apr 2007
-
Microsoft releases four critical patch updates
The security patches Microsoft released Tuesday include four critical fixes for Windows and Content Management Server. One expert described two of the flaws as very wormable. Article | 10 Apr 2007
-
Oracle to patch 37 flaws
Database giant Oracle Corp. offered a preview of its April Critical Patch Update (CPU). Fixes are planned for 37 flaws across its product line. Article | 10 Apr 2007
-
Symantec fixes 'high-risk' flaw in Enterprise Security Manager
Attackers could hijack machines from remote locations by exploiting a flaw in Symantec Enterprise Security Manager (ESM). Kaspersky Lab users also have a flaw to deal with. Article | 09 Apr 2007
-
More Windows patches coming next week
In a preview of next week's monthly patch release, Microsoft said it plans to issue four more Windows updates on top of the ANI fix it rushed out this week. Article | 05 Apr 2007
-
Windows ANI patch problems reported
Some IT administrators are having trouble installing the Windows ANI patch. Meanwhile, the researcher who discovered the flaw said Firefox is also vulnerable. Article | 04 Apr 2007
-
Microsoft releases patch for Windows ANI flaw
Security companies are seeing massive attacks against the Windows ANI zero-day flaw, prompting Microsoft to rush out a fix a week before Patch Tuesday. Article | 02 Apr 2007
-
Flaws haunt protocol tied to national infrastructure
Also: A weakness is found in Windows settings, Microsoft investigates a new Vista flaw, and flaws are addressed in OpenOffice.org and Firefox. Article | 23 Mar 2007
-
OpenBSD open to remote kernel vulnerability
A flaw in several versions of the popular operating system could give attackers complete control over vulnerable machines. A patch has been released. Article | 14 Mar 2007
Security Management Strategies for the CIO