News (86)

Latest Mozilla releases fix 10 security flaws

The latest releases of the Mozilla and Firefox browsers, along with the Thunderbird e-mail software, fix 10 security issues, including three critical vulnerabilities, according to the Mozilla Foundation, which develops the software. Read more »

More flaws foul security of open-source repository

Six more security flaws are found in the popular program for maintaining code under development. Read more »

IE flaws allow Web ad attack

An adware purveyor has apparently used two previously unknown security flaws in Microsoft's Internet Explorer browser to install a toolbar on victims' computers that triggers pop-up ads, researchers said this week. Read more »

Two flaws embitter Microsoft's Java

Microsoft has released an advisory warning all users of its Windows operating system of two new critical flaws that could allow a malicious attacker to take control of a victim's PC. Read more »

PCs falling victim to Windows flaws

Hackers are actively exploiting two serious security vulnerabilities in Windows, Microsoft warned on Tuesday as it released "critical" alerts about the flaws. Read more »

Crypto researchers abuzz over flaws

Encryption circles are buzzing this week with news that mathematical functions embedded in common security applications might have previously unknown weaknesses. Read more »

Image flaw pierces PC security

Six vulnerabilities in a common code that handles an open-source image format could allow intruders to compromise computers running Linux and may allow attacks against Windows PCs as well as Macs running OS X. Read more »

Security flaws found in fix for Firefox, SeaMonkey

Mozilla Foundation earlier this week issued a critical fix designed to address vulnerabilities in a recent security update for the Firefox browser and SeaMonkey application suite. Read more »

Microsoft denies flaw in Vista

Microsoft has confirmed that Vista can be affected by malware from 2004, but argues this is not a flaw in the operating system. Read more »

Attackers exploit zero-day Windows flaw

A zero-day exploit that takes advantage of a vulnerability in the Windows cursor could be spreading rapidly. Read more »

Features (19)

Who is responsible for security?

A flurry of worm and viral activity on the Internet raises a question more important than who to blame: What do we do about it? Read more »

New security flaw in Outlook, IE

A Danish security researcher has warned that a recently discovered software flaw could leave user's systems open to malicious code carried on Web pages or in e-mails. Read more »

Watch out for IE Local Zone script injection flaw

A flaw in the way Internet Explorer handles some errors, discovered by security company GreyMagic, could result in an attacker being able to read local files on a system or run various scripting commands. Get the details. Read more »

Highly critical flaw affects NetBSD and OpenBSD

A vulnerability that can result in a Denial of Service event, privilege escalation, or remote system access has been shown to exist in two popular Unix brands: NetBSD and OpenBSD. Read more »

Linux kernel flaw could trigger DoS incidents

Many Linux servers may be easy targets for DoS attacks because of a flaw in the Linux 2.4 kernel. Read more »

The secrets of open source security

The Linux vs. Windows security debate is a contest of examples, which stand in place of the concepts that comprise a larger, more fundamental question of what the security benefits and detriments are for the open source and closed source development models. Read more »

ASP.NET security holes

Learn about the recently discovered holes in ASP.NET, and ponder who should be responsible for security. Read more »

VPN users: The weak link in network security?

VPNs made it easier for remote workers to connect to the corporate network. But those remote workers also pose a security risk. Follow these tips to mitigate that threat. Read more »

Bug hunters, software firms in uneasy alliance

Although many software makers promote responsible disclosure, it isn't universally backed by the security community. Critics say it could make security companies lazy in patching. Full disclosure of flaws is better is preferred. Read more »

Windows' HTML converter vulnerability rated Critical

A problem has been discovered in the way Windows handles HTML file conversion during cut-and-paste. This buffer overrun could allow an attacker to run rogue code. Read more »

Log in


Sign up | Forgot your password?

  • Staff Crying, mooning and leaving

    In this week's roundup we see that continuous whining can get results, Linux users get 64-bit Flash and Moonlight previews, the latest in the Yahoo/Microsoft relationship and Senator Conroy ducks and weave in Senate Question Time. Read more »

    -- posted by Staff

  • Brendon Chase Sun eye Web developers with Netbeans 6.5

    Despite the recent employment axe hitting Sun the company has pushed out a new release of its Netbeans open source IDE with an eye to appeal more to Web developers. Read more »

    -- posted by Brendon Chase

  • Renai LeMay BarCamp buzz: Let the hacking continue

    Attending last weekend's BarCamp in Sydney, it was hard to escape the conclusion that a certain "dot-com bust" flavour had seeped into the kool aid previously being drunk by Australia's web 2.0 and early stage start-up sector. Read more »

    -- posted by Renai LeMay

What's on?