News (135)

Apple QuickTime zero-day flaw 'extremely critical'

Security research firm Secunia has reported what it calls an "extremely critical" vulnerability in media-streaming program Apple QuickTime. Read more »

Bumper crop of Microsoft patches on the way

Microsoft customers should brace for an onslaught of security updates. Read more »

Microsoft rushes out 'critical' fix

Microsoft issued a "critical" security fix for Windows on Tuesday in the US, two weeks before its scheduled release date. Read more »

IE plus Firefox equals 'critical' security risk

Firefox combined with Internet Explorer on the same desktop opens up a zero day vulnerability that is highly critical, according to security researchers. Read more »

Microsoft RPC exploit could be a packaged deal

While Microsoft has labeled Thursday's emergency patch MS08-067 as "critical" and provided a rareout-of-cycle fix because its exploit could easily be used as worm on a compromised network, one security researcher doesn't think it will happen that way. Read more »

Exploit code chases two Firefox flaws

Two vulnerabilities in the popular Firefox browser have been rated 'extremely critical' because exploit code is now available to take advantage of them. Read more »

Exploit code makes IE flaw more dangerous

The threat posed by a critical flaw in Internet Explorer has been ratcheted up by the release of a program designed to exploit the vulnerability, security researchers warned on Thursday. Read more »

Exploit code released for Adobe Photoshop flaw

Exploit code that could take advantage of a "highly critical" security flaw in the most recent versions of Adobe Photoshop has been published, a security researcher reported this week. Read more »

Code to exploit Windows graphics flaw now public

A sample program hit the Internet on Wednesday, showing by example how malicious coders could compromise Windows computers by using a flaw in the handling of a widespread graphics format by Microsoft's software. Read more »

Oracle attack code out

Code is in the wild for one of the holes patched by the database firm on tuesday. Read more »

Features (31)

Highly critical flaw affects NetBSD and OpenBSD

A vulnerability that can result in a Denial of Service event, privilege escalation, or remote system access has been shown to exist in two popular Unix brands: NetBSD and OpenBSD. Read more »

Establish a patch management policy

Patch management is an issue that will always plague your organisation's network -- there will always be patches, updates, and security fixes to apply. Read more »

Dreamweaver testing scripts can lead to DB compromise

Get the details on an important flaw in sites developed with Macromedia Dreamweaver. Read more »

Linux kernel flaw could trigger DoS incidents

Many Linux servers may be easy targets for DoS attacks because of a flaw in the Linux 2.4 kernel. Read more »

WMLScripting for smarter wireless content

A great way to learn what tricks WMLScript can perform is to dig in and start hacking. Get started with this test drive from Builder.com Read more »

Labor should promise the kids XO, not XP

Should Labor get into power at the federal election next month, its promised "education revolution" rebate would be better spent on the world's largest single order for Negroponte's XO laptop instead of being a boon for traditional PC retailers and a certain software vendor from Redmond. Read more »

Troubleshoot Apache with these tips

The Apache Web server is well-proven, but can still offer an administrator headaches from time to time when things go wrong. Read more »

Bug hunters, software firms in uneasy alliance

Although many software makers promote responsible disclosure, it isn't universally backed by the security community. Critics say it could make security companies lazy in patching. Full disclosure of flaws is better is preferred. Read more »

The Mobile Future

The next battle for the hearts and minds of internet developers will be fought on the mobile phone. Read more »

Open, closed source security about equal?

Proprietary programs should mathematically be as secure as those developed under the open-source model, a Cambridge University researcher argued in a paper presented in Toulouse, France. Read more »

Blog (3)

Anti-Virus software hit with 6 critical vulnerabilities

Staff [blogs:syslog] -- Kaspersky Labs announced over easter that their latest maintenance pack fixes six critical security vulnerabilities in their anti-virus software. The security flaws affect the Anti-Virus 6.0 and Internet Security products, including both the workstation and server editions. Read more »

QuickTime and Firefox combine for insecurity

Nick Gibson [blogs:byteclub] -- A vulnerability in Apple Software's QuickTime media player can be exploited to execute remote javascript code, or by tapping into Firefox's chrome engine can execute remote code of any kind. Read more »

Builder AU's June book giveaway

Staff [blogs:syslog] -- Help out in the Builder AU forums and win a book! Read more »

Log in


Sign up | Forgot your password?

  • Staff Crying, mooning and leaving

    In this week's roundup we see that continuous whining can get results, Linux users get 64-bit Flash and Moonlight previews, the latest in the Yahoo/Microsoft relationship and Senator Conroy ducks and weave in Senate Question Time. Read more »

    -- posted by Staff

  • Brendon Chase Sun eye Web developers with Netbeans 6.5

    Despite the recent employment axe hitting Sun the company has pushed out a new release of its Netbeans open source IDE with an eye to appeal more to Web developers. Read more »

    -- posted by Brendon Chase

  • Renai LeMay BarCamp buzz: Let the hacking continue

    Attending last weekend's BarCamp in Sydney, it was hard to escape the conclusion that a certain "dot-com bust" flavour had seeped into the kool aid previously being drunk by Australia's web 2.0 and early stage start-up sector. Read more »

    -- posted by Renai LeMay

What's on?