flaw in news
Microsoft patches flaw - after seven years
News The flaw, which lies in the Microsoft Server Message Block (SMB) protocol, was addressed on Tuesday in Microsoft security bulletin MS08-068. The flaw could enable an SMB Relay attack, which would allow... [14 Nov 2008]
Android security hole gets patched up
News The researchers - Charlie Miller, Mark Daniel and Jake Honoroff of Independent Security Evaluators - called the Android web browser flaw serious, but Google said its severity was mitigated by Android's design, which... [03 Nov 2008]
Google working on browser patch for Android flaw
News A flaw exists in the Google-led Android mobile platform that could let users be tricked into visiting malware-laden websites and unwittingly have their keystrokes recorded, The New York Times has reported. [28 Oct 2008]
Virtual worlds under siege from cyber crime
News A virtual illness wiped out entire servers of users in World of Warcraft in 2005 when a design flaw allowed the disease to spread throughout low level players. The in-game economies of virtual worlds are being hijacked... [28 Aug 2008]
Firefox extension to protect from wireless hacks
News Perspectives also protects against attacks that exploit a recently exposed flaw in the DNS system, which translates web addresses into numerical IP addresses, said Dave Andersen, a computer science professor at Carnegie... [27 Aug 2008]
Ubuntu patches flaw
News Ubuntu became the latest Linux vendor to patch a vulnerability in the open-source operating system's kernel that could have left the door open for hackers to find their way into users' machines. In an email sent last night, the Linux... [26 Aug 2008]
OpenID at risk due to DNS flaw, claims researcher
News Robin Wilton, a corporate architect for federated identity at Sun, described OpenID's reliance on the integrity of the Domain Name System (DNS) as a "multi-factor problem" in light of the discovery of a fundamental flaw... [14 Aug 2008]
Microsoft's 'Patch Tuesday' targets six critical flaws
News Versions of Office are affected by this flaw, including Office XP Service Pack 3 (SP3), and Office 2003 SP2 and SP3. Microsoft has released six critical patches for August's 'Patch Tuesday', including a fix for six... [13 Aug 2008]
Apple releases patch for critical flaw
News Apple released a security update yesterday to users of its Tiger and Leopard operating systems to address a critical Domain Name System flaw, along with a dozen other updates. The DNS flaw, which was... [01 Aug 2008]
RIM patches PDF security hole
News RIM has released a patch for a security flaw in BlackBerry Enterprise Server, which exposed corporate networks to hackers via a maliciously crafted PDF document. The flaw affected the BlackBerry... [23 Jul 2008]
RIM warns on BlackBerry PDF flaw
News RIM is warning businesses to disable the function that allows a BlackBerry to read PDF files until an update can be issued, after a security flaw was found in the company's software. A 'high' severity... [17 Jul 2008]
Corporations riddled with security holes
News Open Secure Shell (SSH) buffer management flaw below version 3.7.1: Some SSH servers are running a version of OpenSSH which is known to be vulnerable to a buffer management vulnerability that can allow attackers to stop... [19 Jun 2008]
Facebook under attack: The spam and phishing threat
News Kelly explained the hack attacks included non-specific threats, such as edge-of-network penetration attempts and application flaw exploits, and more specific threats such as phishing attacks against users, in the form of... [23 Apr 2008]
Apple patches up Safari
News The company released the patches this week after a number of vulnerabilities were discovered in the browser recently, including one which allowed a security expert to take control of a MacBook Air at the CanSecWest security conference in... [18 Apr 2008]
QuickTime flaw could fuel Second Life stealing
News Researchers have shown how exploiting a flaw within QuickTime could allow an attacker could steal from other users in Second Life. In this case, researchers exploited a recent flaw within RTSP tunnelling. [18 Feb 2008]