News

Operating systems software

• December 13, 2006 13 Dec'06

  Third zero-day found in Microsoft Word

  For the third time in a week, a zero-day flaw has been found in Microsoft Word. Users should be cautious when opening attachments from unknown sources.

• December 11, 2006 11 Dec'06

  IT pros look for ways to lock down IM

  Special Report: To control growing IM threats, administrators are trying to limit which programs can be used or ban the technology altogether. But that's not always possible.

• December 10, 2006 10 Dec'06

  Zantaz buys data classification partner Singlecast

  Email archiving player Zantaz has purchased data classification startup Singlecast, which can categorise and apply policies to data before an email takes up storage space.

• December 10, 2006 10 Dec'06

  Inside the numbers: Messaging (in)security

  In August, SearchSecurity.com surveyed 250 IT pros from a variety of industries about messaging security programs. Here are some of the questions we asked and their responses.

• December 10, 2006 10 Dec'06

  Microsoft suffers third zero-day in a week

  A second zero-day flaw in Word has been uncovered, Microsoft said Sunday. It's the software giant's third zero-day in a week.

• December 05, 2006 05 Dec'06

  New zero-day affects Microsoft Word

  Microsoft confirmed reports of "limited" zero-day attacks and warned customers to be cautious when opening unsolicited Word attachments.

• November 28, 2006 28 Nov'06

  Adware targets Mac OS X

  As F-Secure notes what may be the first example of adware designed for Macs, researcher LMH reports more flaws in the operating system as part of the Month of Kernel Bugs.

• November 21, 2006 21 Nov'06

  Firefox, IE flaw could expose passwords

  A flaw in Firefox 2.0 and IE could affect anyone visiting a Web site that allows user-contributed HTML codes to be added, according to Chapin Information Services.

• November 13, 2006 13 Nov'06

  Firefox antiphishing feature beats Internet Explorer in Mozilla test

  A Firefox automated antiphishing feature beat IE 7 in a test conducted by Mozilla, but analysts say large enterprises should focus on spam blocking software.

• November 07, 2006 07 Nov'06

  Big pay for storage jobs, page 8

  Big pay for storage jobs, page 8

• November 07, 2006 07 Nov'06

  Mozilla fixes Firefox flaws

  Attackers could exploit multiple flaws in Firefox, SeaMonkey and Thunderbird to crash machines, bypass security restrictions and launch malicious code.

• October 31, 2006 31 Oct'06

  Flaw found in Firefox 2.0

  Attackers could exploit the security flaw to crash versions 1.5.0.7 and 2.0 of the browser, according to various security advisories.

• October 31, 2006 31 Oct'06

  Zero-day attacks target Microsoft Visual Studio

  Microsoft has outlined a series of steps users should take to protect their machines from attacks that exploit a new zero-day flaw in Visual Studio 2005.

• October 30, 2006 30 Oct'06

  Instant messaging attacks rise in October

  In October alone, security firm Akonix Systems tracked 88 attacks that used instant messaging programs to spread. Attackers are also exploiting P2P programs.

• October 30, 2006 30 Oct'06

  Firefox fans unfazed by IE 7

  IT administrators like the security improvements in IE 7. But for those who use Firefox, Microsoft's browser upgrade isn't enough to make them switch.

• October 26, 2006 26 Oct'06

  Security Blog Log: The never-ending PatchGuard debate

  This week, security vendor fright over the Windows Vista PatchGuard feature permeates the blogosphere. Is Microsoft the boogeyman, or just misunderstood?

• October 17, 2006 17 Oct'06

  Am I out of luck if I have a "mixed" email system (e.g., Exchange and Notes)?

  That's a "real-life" situation that we run into many times when we've gone out and worked with companies. We might be called in by a company that has both a Microsoft Exchange and a Notes/Domino email system and they want to tie an archive together,...

• October 01, 2006 01 Oct'06

  New exploits target Microsoft's PowerPoint, IE

  Microsoft may have patched the VML flaw in Internet Explorer, but now it faces new threats against the Web browser and PowerPoint.

• September 24, 2006 24 Sep'06

  Hijacked consumer machines target the enterprise

  Attackers continue to strike gold by targeting consumers who lack the security savvy to address desktop application flaws, according to Symantec Corp. Enterprises ultimately pay the price.

• September 14, 2006 14 Sep'06

  Mozilla fixes several Firefox flaws

  Several flaws could be used for man-in-the-middle, spoofing and cross-site scripting attacks. Mozilla has released Firefox 1.5.0.7 to address the problems.

• September 06, 2006 06 Sep'06

  Security Bytes: New flaw in Cisco IOS

  Security news including Cisco, Mozilla hires a former Microsoft strategist to bolster security, a new "pump-and-dump" stock spam campaign is discovered and TippingPoint lists info on new flaws.

• August 28, 2006 28 Aug'06

  Microsoft probes alleged Internet Explorer flaw

  A research group claims attackers could launch malicious code using a flaw in the way Internet Explorer instantiates certain COM objects' ActiveX controls.

• August 24, 2006 24 Aug'06

  Should I back up the operating system files?

  We hear a lot about single-instance storage; single-instance backup. When you start backing up operating system files, you will have the same .DLL, for example, on each of your Windows servers -- you may have 100 servers. I would say, if you have a ...

• August 21, 2006 21 Aug'06

  Update: Microsoft fixes faulty Internet Explorer patch

  Update: Microsoft has fixed a faulty browser fix that enabled an exploitable condition. Souces say a compatibility problem with Systems Management Server delayed the fix.

• August 20, 2006 20 Aug'06

  Twin Trojans use PowerPoint to spread

  Researchers aren't yet sure if troublesome new Trojan horse programs are exploiting a new PowerPoint flaw or the vulnerabilities Microsoft patched Aug. 8.

• July 26, 2006 26 Jul'06

  Mozilla issues critical security updates

  New patches to fix 13 software security flaws, eight of which have been deemed critical.

• July 25, 2006 25 Jul'06

  Netscape.com hit with cross-site scripting attack

  The popular Web portal was hit by a cross-site scripting attack early on 26 July but Netscape says the problem has been addressed

• July 25, 2006 25 Jul'06

  Longhorn on the road to Linux compatibility

  The next version of Windows Server – codenamed Longhorn – will include virtualisation technology that is interoperable with the open source Linux operating system.

• July 24, 2006 24 Jul'06

  Security Bytes: New Microsoft exploits in the wild

  The exploits target issues Microsoft patched earlier this month. Meanwhile, flaws are reported in Oracle for OpenView and a Mozilla Firefox keystroke logger is on the loose.

• July 13, 2006 13 Jul'06

  Trojan targets Microsoft PowerPoint flaw

  Update: The exploit might be tied to an older flaw in Excel. Attackers who exploit the serious flaw could launch arbitrary code. Microsoft says it is investigating.

• December 18, 2005 18 Dec'05

  Trio of trouble: Malcode targets Windows, IM users

  AV firms warn IT shops to guard against Dasher, Bagle and Banbra. Dasher targets a Windows flaw patched in October, while Banbra spreads through IM.

• November 16, 2005 16 Nov'05

  Step 3: GnuPG and WinPT: Setup

• November 16, 2005 16 Nov'05

  Step 2: Public keypairs

• November 16, 2005 16 Nov'05

  Step 4: Encrypting e-mail in WinPT

• September 09, 2005 09 Sep'05

  Sponsor's Editorial - Making marketing more relevant

  Responsys, a premier global provider of on-demand email and lifecycle marketing solutions, has announced Interact 5, the latest version of the company’s email marketing automation software.

• September 05, 2005 05 Sep'05

  IE 7.0 may usher in wave of RSS exploits

  Experts warn that Web-feed enhancements in Microsoft's new Web browser may be just the thing crackers need to compromise networks and private data.

• August 30, 2005 30 Aug'05

  Antivirus can introduce dangerous network security holes into any OS

  AV software is one of the most basic security steps available. It's also yet another gateway for security breaches.

• March 21, 2005 21 Mar'05

  Linux lags Windows in new security report

  A controversial research paper takes a critical look at two popular platforms' track record on vulnerabilities and fixes. In turn, its findings are facing sharp scrutiny as well.

• March 13, 2005 13 Mar'05

  Security Bytes: Turning servers into 'malcode pushers'

  In other news, 'antispyware' company shut down during investigation and new Java Trojan hits alternative browsers.

• February 17, 2005 17 Feb'05

  Do you speak geek: All hail e-mail!

  Test your knowledge of e-mail security with this quiz.

• February 03, 2005 03 Feb'05

  Expect 13 Windows patches, some critical

  Microsoft will release patches Tuesday to fix critical security holes in Windows Media Player, MSN Messenger, Microsoft Office and Visual Studio.

• December 19, 2004 19 Dec'04

  Security Bytes: Be aware of Google Desktop 'glitch'

  Cisco acquires Protego; Hotmail switches to Trend Micro; Red Hat, Mandrakesoft and Gentoo fix flaws.

• September 23, 2004 23 Sep'04

  Multiple strategies guard youth services agency

  Major corporations aren't the only ones who need to protect confidential information, ward off spam and malware, and defend against intrusion. Local youth service agencies must do the same, with far smaller budgets.

• September 22, 2004 22 Sep'04

  Security Bytes: New .jpg attack imminent; CA agrees to pay $225 million for federal violations

  Sanjay Kumar is indicted for securities fraud and conspiracy, while Authorize.Net is knocked offline by massive DDoS attacks.

• March 10, 2002 10 Mar'02

  September 11: How Merrill Lynch recovered

  Merrill Lynch lost two data centres during the 11 September terrorist attacks in New York. The site is now functioning as a...