Email Alerts
-
Microsoft doesn't rule out rushed patch for IIS zero-day vulnerability
Software giant dismisses the critical nature of the Internet Information Services zero-day flaw, but doesn't rule out an out-of-band patch. Article | 28 Dec 2009
-
Increase in Gumblar backdoors poses FTP credential problems
Security Researcher explains how to detect the Trojan, but many victimized website owners don't have the technical expertise to fix the problem. News | 20 Nov 2009
-
VeriSign extends DDoS attack protection service
Vendor latches on to the recent high profile DDoS attacks with Web-based monitoring service. News | 15 Sep 2009
-
Microsoft issues IIS FTP advisory, exploit code circulates
Exploit code is circulating for the FTP zero-day flaw in Microsoft IIS Web server. Article | 03 Sep 2009
-
Panda reports fast-spreading rogueware antivirus fraud rakes in millions
Rogueware fake antivirus strains are increasing at a stunning rate. Panda Security reports that this cyber crime bilks users out of about $34 million every month. Article | 29 Jul 2009
-
Kaminsky reveals key flaws in X.509 SSL certificates at Black Hat
Researcher Dan Kaminsky returned to Black Hat with new research on X.509 certificates, explaining an attack method that could enable malicious hackers to spoof legitimate SSL certificates.. Article | 29 Jul 2009
-
Oracle issues quarterly patches, fixes database flaws
The database giant repaired critical flaws in Oracle Database, BEA WebLogic and Oracle E-Business Suite. Article | 14 Jul 2009
-
Latest DDoS attacks extremely unsophisticated, experts say
The denial-of-service attacks that briefly shut down some U.S. and South Korean government websites are not likely being carried out by a professional. Article | 09 Jul 2009
-
Stolen FTP credentials likely in massive website attacks
The latest website attack techniques use stolen user credentials instead of website vulnerabilities to crack websites and spread malware. Article | 03 Jun 2009
-
Microsoft warns of IIS zero-day vulnerability
A zero-day flaw in Internet Information Services (IIS) could be exploited to elevate privileges and gain access to sensitive data. US-CERT warns of active attacks in the wild. Article | 19 May 2009
Security Management Strategies for the CIO