PRO+ Premium Content/Information Security magazine

Thank you for joining!
Access your Pro+ Content below.
April 2009

Web browsers remain vulnerable to user mistakes

Many security vendors have sung the same tune over the last couple of years: the browser is not only vulnerable, it's the front line of most cyberattacks. That message couldn't have been any clearer at this year's CanSecWest conference. Two researchers easily exploited zero-day flaws earning themselves thousands of dollars in prize money during a contest sponsored by TippingPoint's Zero-Day Initiative. It took the two young white-hat hackers only a few hours to uncover four critical vulnerabilities and break into systems running Apple Safari, Microsoft's newly released Internet Explorer 8 and Mozilla Firefox. "It's a game of cat-and-mouse and it's going to continue to be a game of cat-and-mouse no matter how many security features are put in," says John Strand, a senior security researcher with Black Hills Information Security. Just a day after one of the two hackers cracked a zero-day flaw in Internet Explorer 8, Microsoft released the browser to the public-- flaw and all. But security experts praised the new browser for its ...

Access this PRO+ Content for Free!

By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.

You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

Features in this issue

  • Tabletop exercises sharpen security and business continuity

    Delaware's Dept. of Technology and Information conducts annual incident response exercises that test the readiness of state agencies to respond to real attacks. Learn how simulated cyberattacks and incident response exercises help organizations prevent future attacks and maintain business continuity.

  • Tying log management and identity management shortens incident response

    Tying log management to user identity shortens incident response and forensics investigation cycles. Learn how compliance has mandated that organizations determine not only when incidents occurred, but who is responsible for unauthorized access.

  • Data loss prevention benefits in the real world

    by  Rich Mogull

    DLP promises strong data protection via content inspection and security monitoring, but real-world implementations can be complex and expensive; these eight real-world lessons help you use DLP to its fullest.

Columns in this issue