Microsoft Security Response Center
99 Stories
Microsoft warns of thieving Word docs
News A security hole could allow a Word document to steal files from Windows PCs.
Microsoft to hackers: Don't publish code
News Microsoft, whose software has been at the center of several recent high-profile security incidents, has decided to turn up the heat on those the company considers at least partially responsible: security firms and hackers who release sample programs to exploit software flaws.
Microsoft offers patches to ward off ActiveX attacks
News In rare out-of-cycle security update, Microsoft fixes hole that put IE users at risk of attacks via ActiveX and other controls.
Tags: Data security, Authentication and encryption, Security, Vulnerability, Attack, Web Application, Microsoft Internet Explorer, patch management, researcher, Microsoft Visual Studio
Microsoft says security programs are paying off
News Company releases progress report on three programs launched a year ago to identify security holes and patch them faster.
Tags: Data security, PC security, Authentication and encryption, Security, Sourcefire Inc., Vulnerability, Software Update, Microsoft Internet Explorer, exploit code, security bulletin
Microsoft denies fault in hacks
News Attacks that have compromised half a million Web sites are not due to any new or unknown flaws in Microsoft IIS or SQL Server, according to the company's security response team.
Tags: Security, Hacking, Microsoft Corp., Microsoft SQL Server, Malware, Site, Attack, Server, Microsoft Security Response Center, JavaScript
Microsoft to seek credit for finding vulnerabilities
News Software giant says it wants credit when it reports security flaws to third-party vendors.
Tags: Security, Software, Microsoft Corp., Vulnerability, software company, Environment, Microsoft Windows XP, Microsoft Security Response Center, responsible disclosure, researcher
Microsoft to tip off partners on security flaws
News The scheme will provide some security companies with details of Microsoft software vulnerabilities prior to the monthly 'Patch Tuesday'.
Tags: Security, Business applications, Software, Microsoft Corp., Juniper Networks Inc., Vulnerability, software company, security bulletin, Microsoft Security Response Center, network
Microsoft explains seven-year patch delay
News The software giant says that fixing the flaw earlier would have broken customer network applications.
Tags: Security, Business applications, Server Message Block, Microsoft Corp., Sir, Server, program manager, Microsoft Security Response Center, network, researcher
Fake Microsoft security e-mail hides malware
News Piggybacking on Microsoft's Patch Tuesday, a fake notification mailing that looks remarkably legitimate is spreading a Trojan virus.
Tags: Viruses and worms, Microsoft Corp., Malware, Security, Microsoft Host Integration Server, software company, e-mail, software, patch management, Steve Lipner
Microsoft irons out security patch
News Fixes glitches in delivery and installation of an update sent out last week in its monthly security bulletin.
Tags: Network security, Security Management, Microsoft Windows
Kernel vulnerability found in Windows Vista
News A flaw in Vista's networking has been found that can crash the system, but no fix is expected until the next service pack.
Tags: Network security, PC security, Microsoft Windows, Microsoft Corp., Service Pack, Buffer-overflow, Vulnerability, Microsoft Windows Vista, operating system, Flaw
Windows cursor patch causing trouble
News Applying Microsoft's fix for a "critical" Windows flaw can cause trouble with audio and networking software on some PCs.
Tags: PC security, Data security, Network security, Security Management, Security applications/tools, Microsoft Windows
Attack code raises Windows DNS zero-day risk
News At least four exploits for vulnerability in the Windows domain name system service were published over the weekend.
Tags: Network security, Security Management, Microsoft Windows, Web servers
Microsoft: Hole exploit endangers all IE versions
News Users of Microsoft's browser are at risk from untrusted as well as trusted sites, as attacks seek to drop password stealers and Trojan horses onto systems.
Tags: Data security, Authentication and encryption, Spam and phishing, Web browsers, Microsoft Corp., Malware, Security, Attack, Password, exploit code
Microsoft deflects charges of worm woes
News Microsoft refuted claims Wednesday that the main Web site for its FrontPage software had been infected by the Nimda virus, despite the antivirus software alarms set off by viewing the site.
