Patch Day double-whammy: Oracle plugs 33 database holes
Ryan Naraine: For businesses, today is a Patch Tuesday double-whammy. Just hours after Microsoft shipped six bulletins to cover multiple flaws in Windows and Internet Explorer, Oracle is getting set to release its quarterly batch of Critical Patch Updates with fixes for at least 33 security vulnerabilities. According to Oracle: This Critical Patch Update contains 33 security vulnerability fixes across [...]
Tue Jul 14 14:39:03 PDT 2009
Attack code posted for unpatched Firefox 3.5 flaw
Ryan Naraine: Mozilla’s security response team is scrambling to respond to the release of exploit code for a gaping hole in the latest version of its flagship Firefox browser. The flaw, rated “highly critical by Secunia, puts millions of Firefox users at risk of remote code execution attacks. The vulnerability is caused due to an error when processing JavaScript [...]
Tue Jul 14 13:41:42 PDT 2009
Remote code execution exploit for Firefox 3.5 in the wild
Dancho Danchev: A zero day exploit (Firefox 3.5 Heap Spray Vulnerability) affecting Mozilla’s latest Firefox release has been published in the wild. Through an error in the processing of JavaScript code in ‘font tags’ malicious attackers could achieve arbitrary code execution and install malware on the affected hosts. There’s no indication of its use on a global scale [...]
Tue Jul 14 11:55:56 PDT 2009
[Sponsored]
Tue Jul 14 11:55:56 PDT 2009
MS Patch Tuesday: 9 bulletins, 6 rated critical
Ryan Naraine: Microsoft today released six bulletins with fixes for at least nine documented security vulnerabilities in a range of products that put users at risk of malicious hacker attacks. At least two of the vulnerabilities are currently being attacked in the wild so it’s imperative that Windows users and administrators treat these patches with the highest possible [...]
Tue Jul 14 11:20:45 PDT 2009
Does free antivirus offer a false feeling of security?
Dancho Danchev: Earlier this month, Symantec’s product manager David Hall dismissed free security software as equal alternative to the paid versions, and also described? Microsoft’s free “Microsoft Security Essentials” as “a stripped down version of the OneCare product Microsoft pulled from retail shelves“. Needless to? say that such statements from a competing vendor often come as a direct [...]
Tue Jul 14 02:08:54 PDT 2009
ImageShack hacked by anti-full disclosure movement
Dancho Danchev: During the weekend, ImageShack, among the Web’s top ten most popular free image hosting services got compromised, with the millions of images hosted on it redirected to a single one explaining why it was hacked. The anti-sec group responsible for the compromise describes itself as a “movement dedicated to the eradication of full-disclosure“, has also threatened [...]
Mon Jul 13 14:02:44 PDT 2009
No comments:
Post a Comment