Security Bytes
Enterprise network security
-
Behind the MD5 attack
- R.I.S.C. Associates 30 Dec 2008 -
Nokia to sell security business to Check Point
- R.I.S.C. Associates 22 Dec 2008 -
Cable cuts in Mediterranean kill Internet service in Egypt, other countries
- R.I.S.C. Associates 19 Dec 2008
When the researchers who produced the elegant MD5 attack I wrote about this morning realized the severity of what they had found, they took two highly unusual steps. First, they consulted with ...
In a move that has been anticipated for some time, Nokia on Monday said it has an agreement in place to sell its security business. What did come as a surprise was the identity of the buyer: Check ...
Several undersea cables in the Mediterranean Sea that carry the bulk of Internet traffic between Asia and Europe have been cut, resulting in a massive Internet outage in Egypt and problems in other ...
-
Word documents being used in new attacks on IE XML flaw
- R.I.S.C. Associates 17 Dec 2008 -
Microsoft to release emergency patch for IE XML flaw
- R.I.S.C. Associates 16 Dec 2008 -
Steve Bellovin’s unsparing analysis of the CSIS cyber security report
- R.I.S.C. Associates 15 Dec 2008 -
Microsoft says all versions of Internet Explorer vulnerable to XML attack
- R.I.S.C. Associates 12 Dec 2008 -
Microsoft releases advisory and workarounds for IE 7 XML flaw
- R.I.S.C. Associates 11 Dec 2008 -
Security chief Window Snyder leaving Mozilla
- R.I.S.C. Associates 10 Dec 2008 -
Unpatched Internet Explorer 7 flaw under attack
- R.I.S.C. Associates 10 Dec 2008
The list of things to worry about with the soon-to-be-patched MS08-078 XML data binding vulnerability is getting longer by the minute. The researchers at McAfee's AVERT Labs report that they have ...
Microsoft on Wednesday will release an emergency out-of-band patch for the XML handling flaw in Internet Explorer that has been the target of malware attacks for the last week or more. This is the ...
The recent release of the "Securing Cyberspace for the 44th President" report spawned a flood of analysis and criticism, and much of it was positive and complimentary. I've written before about the ...
The Internet Explorer vulnerability saga continues to unfold. Microsoft late Thursday released more information about the unpatched XML flaw in IE, and confirmed that the vulnerability in fact ...
Microsoft has released a security advisory with a suggested workaround for protecting vulnerable machines against attacks on the unpatched XML vulnerability in Internet Explorer 7 that came to ...
Window Snyder, the head of security at Mozilla, is leaving the company to help found a start-up venture unrelated to security. Snyder has been at Mozilla for more than two years and has been the ...
On the same day that Microsoft patched a slew of vulnerabilities in Office and other products, including Internet Explorer, the tubes were abuzz yesterday with news of a new exploit for IE 7 that ...
-
Google asks for help on Native Client security
- R.I.S.C. Associates 09 Dec 2008 -
Inside the Microsoft SDL and threat-modeling process
- R.I.S.C. Associates 04 Dec 2008 -
VMware drops patch for critical memory corruption flaw
- R.I.S.C. Associates 03 Dec 2008 -
ICANN transfers EstDomains customers to Directi
- R.I.S.C. Associates 01 Dec 2008
Google has been working on a new technology that is designed to help developers create more secure and interesting Web applications that can run on any platform. Known as Native Client, the ...
After being criticized for years for being completely opaque and obtuse about virtually everything that goes on inside the walls in Redmond, Microsoft has swung pretty far in the other direction ...
VMware on Wednesday issued two security advisories, including one that fixes a critical memory corruption vulnerability that affects a wide range of the company's products. The memory corruption ...
After a few delays, ICANN has officially transferred all of the domains that formerly belonged to registrar EstDomains to another registrar in response to EstDomain's president being convicted of ...