Email Alerts
-
Anatomy of a zero-day: Security researchers face hurdles
Despite industry organizations bringing some order to the software testing process, security researchers say obstacles continue to slow their progress. Article | 19 Apr 2007
-
Oracle patches 36 holes
Oracle Corp. on Tuesday issued patches for 36 holes in the database management system, application server, E-Business Suite and JD Edwards and PeopleSoft software. Article | 18 Apr 2007
-
Microsoft DNS server flaw called dangerous
UPDATE: Microsoft said Sunday that attacks are still limited, but a proof of concept code to exploit the vulnerability is publicly available. Article | 13 Apr 2007
-
Microsoft investigates new Office zero-day flaws
On the same day Microsoft released five security updates for Windows and Content Management Server, McAfee reported possible new zero-day flaws in Office. Article | 11 Apr 2007
-
Microsoft releases four critical patch updates
The security patches Microsoft released Tuesday include four critical fixes for Windows and Content Management Server. One expert described two of the flaws as very wormable. Article | 10 Apr 2007
-
Oracle to patch 37 flaws
Database giant Oracle Corp. offered a preview of its April Critical Patch Update (CPU). Fixes are planned for 37 flaws across its product line. Article | 10 Apr 2007
-
Symantec fixes 'high-risk' flaw in Enterprise Security Manager
Attackers could hijack machines from remote locations by exploiting a flaw in Symantec Enterprise Security Manager (ESM). Kaspersky Lab users also have a flaw to deal with. Article | 09 Apr 2007
-
More Windows patches coming next week
In a preview of next week's monthly patch release, Microsoft said it plans to issue four more Windows updates on top of the ANI fix it rushed out this week. Article | 05 Apr 2007
-
Windows ANI patch problems reported
Some IT administrators are having trouble installing the Windows ANI patch. Meanwhile, the researcher who discovered the flaw said Firefox is also vulnerable. Article | 04 Apr 2007
-
Microsoft releases patch for Windows ANI flaw
Security companies are seeing massive attacks against the Windows ANI zero-day flaw, prompting Microsoft to rush out a fix a week before Patch Tuesday. Article | 02 Apr 2007
Security Management Strategies for the CIO