Flaw
2062 Stories
Virtual-machine exploit lets attackers take over host
News The exploit for an VMware flaw uses malicious code running on a virtual machine to let an intruder take over the host operating system.
Tags: Network security, Virtualization, Security, Virtual Machine, VMware Workstation, Tool, Video, VMware Inc., operating system, Flaw
Google fixes Android root-access flaw
News The company says it has already fixed a bug that lets Android phone users run command lines, from any application, with root privileges.
Tags: Security, Mobile, Google Inc., Spokesperson, Flaw, phone, SIM Card, firmware, T-Mobile G1, T-Mobile
Kernel vulnerability found in Windows Vista
News A flaw in Vista's networking has been found that can crash the system, but no fix is expected until the next service pack.
Tags: Network security, PC security, Microsoft Windows, Microsoft Corp., Service Pack, Buffer-overflow, Vulnerability, Phion Information Technologies, Microsoft Windows Vista, operating system
UK Ministry of Defense site carried cross-site scripting flaw
News Ministry admits to security flaw that could have allowed visitors to be redirected to a malicious site.
Tags: Data security, Authentication and encryption, Network security, Security, Spokesperson, Flaw, e-mail, malicious code, Web Site, Network security
Microsoft: Windows 7 not affected by latest flaw
News Following up on a vulnerability disclosed in the last 24 hours, Microsoft says the flaw affects Vista and Windows Server 2008, but not the final version of Windows 7.
Tags: Microsoft Windows, Authentication and encryption, Server Message Block, Security, Vulnerability, Microsoft Windows 7, software company, Flaw, Microsoft Windows Server 2008, Microsoft Windows 2000
Windows 7, Vista zero-day flaw reported
News Security researcher says vulnerability in Windows 7 could lead to an attack causing a critical system error, or "blue screen of death".
Tags: Microsoft Windows, Server Message Block, Microsoft Windows Vista, Zero-day Bug, BSOD, Small And Medium Business, Microsoft Windows 7, Flaw, Microsoft Windows Vista SP1, Microsoft Windows
Apple patches multiple iPhone, QuickTime flaws
News Ten holes in Apple's smartphone operating system and media player software could leave owners open to hacking and phishing attacks.
Tags: Cellular phones, Applications and tools, Apple Inc., Phishing, Apple QuickTime, Web Browser, Flaw, patch management, Apple iPhone, Web Site
Microsoft investigating newly reported IIS flaw
News Software maker says it is looking into a potential vulnerability that could allow attackers to take over machines running older versions of Microsoft's Web server.
Tags: Microsoft Windows, Hacking, Data security, Authentication and encryption, Microsoft IIS Server, Vulnerability, International Data Group, Flaw, information service, IT administrator
Intel motherboards suffer Bios flaws
News Chipmaker releases updates to address privilege escalation holes in a number of its motherboards, and says to its knowledge the flaws have not been exploited.
Tags: Components, Intel Corp., Rootkit, Motherboard, Flaw, BIOS Update, Environment, Server, BIOS, desktop
UK intelligence site breached by hacker
News Intelligence agency has closed up a cross-site scripting vulnerability on its Web site after details of the flaw were published on a hacker forum.
Tags: Authentication and encryption, Data security, Hacking, Spokesperson, Flaw, malicious attack, search tool, Hacker, agency, Web Site
Zero-day flaw found in Web encryption
News Security issue with underlying web encryption protocols TLS and SSL has left many authentication mechanisms open to attack, according to security researchers.
Tags: Authentication and encryption, Business security, Authentication, Business security, Security, SSL, Authentication and encryption, Web Browser, Zero-day Bug, Encryption
Researchers exploit flaws in SSL, domain authentication system
News Dan Kaminsky and Moxie Marlinspike explain how flaws in the way domain names are verified on the Internet could allow attackers to impersonate a site and steal information from unsuspecting Web surfers.
Tags: Network security, Data security, Authentication and encryption, Web sites, Authentication, Security, SSL, Domain Name, Web Browser, Vulnerability
Chink in encryption armor discovered
News An underlying flaw in the OpenSSH encryption protocol has been revealed by academics.
Tags: Authentication and encryption, OpenSSH, SSH, IT Professional, Encryption, Information Security, Flaw, Server, Attacker, RFC
US-CERT warns of SAP vulnerability
News The flaw in the graphical user interface for SAP ERP, reported by U.S.-CERT, has been labeled "highly critical" by Secunia.
Tags: Business applications, Security, SAP AG, GUI, ActiveX Control, Vulnerability, IT Professional, ERP, Flaw, Secunia
Flaw exposes Chrome, Firefox to clickjacking
News Security researchers have discovered a vulnerability that exposes Google's Chrome browser and Firefox 3.0.5 to a clickjacking attack.
Tags: Web browsers, Web sites, Security, Google Chrome, Web Browser, Google Inc., Attack, Spokesperson, Flaw, Clickjacking
