Vulnerability
2868 Stories
Microsoft warns of new server vulnerability
News Software maker says an unpatched flaw in its Web-serving software could offer a hole for malicious code to attack systems.
Tags: Servers, Hacking, Authentication, Microsoft Corp., Microsoft IIS Server, Vulnerability, HTTP Request, Server, information service, Web Site
Microsoft to patch new DirectX hole
News New hole in DirectX could allow an attacker to take control of a computer if the user visits a site and runs a maliciously crafted QuickTime file.
Tags: Microsoft Windows, Software, Security, Security implementation/standards, Windows Vista, Windows XP, Apple QuickTime, DirectX, Vulnerability, Admin User
Microsoft issues critical Windows patches
News Software maker releases five operating-system related updates as part of its monthly Patch Tuesday.
Tags: Microsoft Windows, Microsoft IIS Server, Vulnerability, Microsoft Windows 7, patch management, Microsoft Windows Server, IT administrator, CTO, Qualys Inc., Microsoft Windows
Microsoft patching zero-day Windows 7 SMB hole
News Company warns customers that exploit code for the Server Message Block hole is available and suggests a workaround until a patch is ready.
Tags: Windows 7, PC security, Security, Server Message Block, Trustworthy Computing, TCP, Computer, Microsoft Corp., Windows 7, Vulnerability
Microsoft probing Windows 7 zero-day hole
News One day after Patch Tuesday, researcher warns of unpatched security hole in Windows 7 and Server 2008.
Tags: PC security, Security applications/tools, Server Message Block, Microsoft Corp., NetBIOS, Vulnerability, broadcasting, Spokesperson, Microsoft Windows 7, Server
Microsoft reports attacks using IIS vulnerability
News Flaw that could attack Microsoft's Web server software is now being used to attack machines, the software company reports.
Tags: Business applications, Microsoft IIS Server, Vulnerability, information service, FTP, Microsoft IIS 7.0, Microsoft IIS 5.1, security response communications team, Microsoft IIS 5.0, Attack
Microsoft: Windows 7 not affected by latest flaw
News Following up on a vulnerability disclosed in the last 24 hours, Microsoft says the flaw affects Vista and Windows Server 2008, but not the final version of Windows 7.
Tags: Microsoft Windows, Authentication and encryption, Server Message Block, Security, Vulnerability, Microsoft Windows 7, software company, Flaw, Microsoft Windows Server 2008, Microsoft Windows 2000
Highly exploitable Linux kernel bug found, patched
News The vulnerability, a patch for which has already been made available, affects most versions of the Linux kernel since 2001.
Tags: Security, Linux, Red Hat Inc., Vulnerability, Kernel, Linux Kernel, researcher, blog, Security, Linux
Adobe to fix critical Flash hole next week
News Company expects to have updates late next week for Flash, Reader to fix critical hole being reportedly exploited in attacks.
Tags: Business applications, Adobe Systems Inc., Macromedia Flash Player, Adobe Acrobat Reader, Shockwave Flash, Plug-in, Web Browser, Vulnerability, Apple Macintosh, Adobe Acrobat
Microsoft says security programs are paying off
News Company releases progress report on three programs launched a year ago to identify security holes and patch them faster.
Tags: Data security, PC security, Authentication and encryption, Security, Sourcefire Inc., Vulnerability, Software Update, Microsoft Internet Explorer, exploit code, security bulletin
Microsoft investigating newly reported IIS flaw
News Software maker says it is looking into a potential vulnerability that could allow attackers to take over machines running older versions of Microsoft's Web server.
Tags: Microsoft Windows, Hacking, Data security, Authentication and encryption, Microsoft IIS Server, Vulnerability, International Data Group, Flaw, information service, IT administrator
Windows 7 critical holes fixed in record Patch Tuesday
News In its biggest Patch Tuesday ever, Redmond stitches up a pair of Windows 7 holes, along with fixing up a number of zero-day flaws elsewhere.
Tags: Security Management, Network security, PC security, Server Message Block, Microsoft IIS Server, Security, Microsoft Corp., Vulnerability, Microsoft Windows 7, Server
Businesses overlooking biggest security risks
News Companies are looking in the wrong places to defend against online attacks, according to security training organization Sans.
Tags: PC security, Data security, Spam and phishing, Security, Phishing, Training, Vulnerability, Attack, Web Application, Programming
Microsoft offers patches to ward off ActiveX attacks
News In rare out-of-cycle security update, Microsoft fixes hole that put IE users at risk of attacks via ActiveX and other controls.
Tags: Data security, Authentication and encryption, Security, Vulnerability, Attack, Web Application, Microsoft Internet Explorer, patch management, researcher, Microsoft Visual Studio
Researchers exploit flaws in SSL, domain authentication system
News Dan Kaminsky and Moxie Marlinspike explain how flaws in the way domain names are verified on the Internet could allow attackers to impersonate a site and steal information from unsuspecting Web surfers.
Tags: Network security, Data security, Authentication and encryption, Web sites, Authentication, Security, SSL, Domain Name, Web Browser, Vulnerability
