News (69)

Shell scripting flaw opens OS X to attack

A flaw in the way the Mac operating system handles downloaded files with fake file extensions opens the door to all kinds of nastiness. Read more »

Apple dismisses Safari vulnerability

Safari users are at risk of littering their desktops with malicious software because the browser does not ask for user permission when downloading files. Read more »

Apple Mac OS X patch plugs 31 vulnerabilities

Apple Computer on Tuesday in the US released a security update for Mac OS X to repair 31 vulnerabilities, including a zero-day Wi-Fi hijack flaw. Read more »

Apple security talk cancelled

Just days before the annual Black Hat security conference in Las Vegas, a talk on Apple's FileVault encryption system has been abruptly cancelled by its presenter. Read more »

Apple fixes Safari, scores 5bn iTunes downloads

Apple on Thursday released a new version of Safari for Windows that includes a security fix for a high-profile carpet-bombing desktop attack vulnerability. Read more »

Apple DNS patch not complete

Apple's Domain Name System patch for Mac OS X systems is not completely effective, according to security experts. Read more »

Apple unloads dozens of fixes for OS X

Apple Computer released one of its larger security updates for Mac OS X on Monday, with fixes for 44 flaws. Read more »

Apple QuickTime exploit in the wild

Symantec has found active exploit code in the wild for an unpatched Apple QuickTime vulnerability. Read more »

Apple Mac less secure than Windows in 2007?

During 2007, Apple has patched more than ten times the number of critical vulnerabilities in Mac OS X compared to the number patched in Microsoft Windows. Read more »

Apple OS X flaw exposes Keychain password

Apple has confirmed a security glitch that, in many situations, will let someone with physical access to a Macintosh computer gain access to the password of the active user account. Read more »

Features (8)

Why Apple's iPhone is like a 1981 IBM PC

Is the iPhone just a clunky 1981 IBM PC in a sexy black case? Rupert Goodwins asks some serious questions about its enduring appeal. Read more »

Kerberos vulnerability hits Linux/UNIX versions

The Kerberos Administration daemon (kadmind), which is used in connection with Kerberos authentication, contains a buffer overflow vulnerability in many implementations, mostly affecting Linux/UNIX. Read more »

Should you install the new version of Java?

Sun Microsystems released a new version of Java for Windows, Linux and Solaris recently. Should you rush out to install it? Probably not. Read more »

50 significant moments from internet history

We take you through 50 defining moments of the internet. Read more »

Safe browser an oxymoron?

In November 2003, the CERT Coordination Center first advised Web users to consider using a Web browser other than Microsoft Internet Explorer. Read more »

Windows XP SP2 -- test your applications

Learn about the plethora of security enhancements included in Windows XP Service Pack 2, as well as how these security features could impair the functionality of some applications. Read more »

Six barriers to open source adoption

The benefits of open source software are well known--lower TCO, more choice, and increasing quality and functionality of the code. Several barriers must be overcome before Linux and other open source projects are broadly accepted across enterprises, but they aren't insurmountable. Read more »

J2ME shortcoming opens door for Microsoft

In the war between the world's two biggest platforms, a weakness in one J2ME specification may be opening a window of opportunity for Microsoft that could have a chilling effect on the heat in Java's brew. Read more »

Video (1)

Five services to turn off in Windows XP

Running unnecessary Windows XP services can increase your vulnerability to exploits that might use those services as attack vectors. In this IT Dojo video, Bill Detwiler discusses five services that you should consider turning off and shows you how to disable them. Read more »

Blog (2)

Ubuntu gets jaunty

Staff [blogs:syslog] -- This week's Roundup looks at Ubuntu's new Jaunty Jackalope, new rules of virtualisation, the world of browsers and more. Read more »

QuickTime and Firefox combine for insecurity

Nick Gibson [blogs:byteclub] -- A vulnerability in Apple Software's QuickTime media player can be exploited to execute remote javascript code, or by tapping into Firefox's chrome engine can execute remote code of any kind. Read more »

Log in


Sign up | Forgot your password?

What's on?