News (362)

Image flaw pierces PC security

Six vulnerabilities in a common code that handles an open-source image format could allow intruders to compromise computers running Linux and may allow attacks against Windows PCs as well as Macs running OS X. Read more »

Microsoft warns of 22 new security flaws

Microsoft on Tuesday published 10 software security advisories, warning Windows users and corporate administrators of 22 new flaws that affect the company's products. Read more »

Oracle's oops on security flaw

Oracle accidentally let slip details last week on a security flaw it has yet to patch. Read more »

Microsoft outlines IE7 security plans

Microsoft is tightening up the way its Internet Explorer browser handles HTTPS for version 7, which is used to secure online transactions, in an attempt to give people more protection online. Read more »

Firefox phishing vulnerability discovered

A newly discovered flaw in Firefox could allow cybercriminals to take advantage of Web surfers. Read more »

Security flaw discovered in latest Firefox update

Vulnerability researcher Ronald van den Heetkamp published a directory traversal flaw in Firefox version 2.0.0.12, just hours after Mozilla release the latest version of its browser. Read more »

Mozilla celebrates 10th birthday with a security flaw

The Mozilla Foundation is celebrating what it regards as its 10th anniversary this week. Read more »

Security flaws found in fix for Firefox, SeaMonkey

Mozilla Foundation earlier this week issued a critical fix designed to address vulnerabilities in a recent security update for the Firefox browser and SeaMonkey application suite. Read more »

Web 2.woe: Simple security flaws going unfixed

Web application vulnerabilities are simple to fix -- but they're here to stay and will likely get worse, say security analysts. Read more »

Apple security talk cancelled

Just days before the annual Black Hat security conference in Las Vegas, a talk on Apple's FileVault encryption system has been abruptly cancelled by its presenter. Read more »

More Flaw, Secure News Results

Features (36)

Highly critical flaw affects NetBSD and OpenBSD

A vulnerability that can result in a Denial of Service event, privilege escalation, or remote system access has been shown to exist in two popular Unix brands: NetBSD and OpenBSD. Read more »

Windows' HTML converter vulnerability rated Critical

A problem has been discovered in the way Windows handles HTML file conversion during cut-and-paste. This buffer overrun could allow an attacker to run rogue code. Read more »

New security flaw in Outlook, IE

A Danish security researcher has warned that a recently discovered software flaw could leave user's systems open to malicious code carried on Web pages or in e-mails. Read more »

Who is responsible for security?

A flurry of worm and viral activity on the Internet raises a question more important than who to blame: What do we do about it? Read more »

Develop secure software at the application level

Protect your application from input overflow and underflow attacks, and from other common tactics with these development techniques. Read more »

Ten commandments for the security-conscious programmer

Here are the steps from Builder AU that you should take to keep hackers and other security threats at bay. Read more »

Watch out for IE Local Zone script injection flaw

A flaw in the way Internet Explorer handles some errors, discovered by security company GreyMagic, could result in an attacker being able to read local files on a system or run various scripting commands. Get the details. Read more »

Is Agile development secure?

Agile development methodologies might be the new fad in software design but how much emphasis is there on secure code? Read more »

Linux kernel flaw could trigger DoS incidents

Many Linux servers may be easy targets for DoS attacks because of a flaw in the Linux 2.4 kernel. Read more »

The secrets of open source security

The Linux vs. Windows security debate is a contest of examples, which stand in place of the concepts that comprise a larger, more fundamental question of what the security benefits and detriments are for the open source and closed source development models. Read more »

More Flaw, Secure Features Results

Blog (5)

You've got patched flaws!

Staff [blogs:syslog] -- Patents and Symantec were made to look very silly this week. Microsoft said that open source was a bigger threat than Google and no prizes for guessing which month the final version of Firefox 3 will appear in. Read more »

Anti-Virus software hit with 6 critical vulnerabilities

Staff [blogs:syslog] -- Kaspersky Labs announced over easter that their latest maintenance pack fixes six critical security vulnerabilities in their anti-virus software. The security flaws affect the Anti-Virus 6.0 and Internet Security products, including both the workstation and server editions. Read more »

Lack of turn out shows Linux's crossover

Staff [blogs:syslog] -- This week's Roundup looks at the lack of excitement surronding this year's LinuxWorld conference, Dan Kaminsky has finally revealed the details of his DNS flaw and we take a look at the new features to come in Firefox. Read more »

QuickTime and Firefox combine for insecurity

Nick Gibson [blogs:byteclub] -- A vulnerability in Apple Software's QuickTime media player can be exploited to execute remote javascript code, or by tapping into Firefox's chrome engine can execute remote code of any kind. Read more »

Buffer Overflows still an issue

[blogs:] -- Developers are saying they've heard enough about buffer overflows and they knwo how to prevent them. Ok, then why are we still seeing them? There is still unmanaged code out there, and we still need to pay attention to how we write it. Read more »

Log in


Sign up | Forgot your password?

Blogs

RSS feed

  • Staff Crying, mooning and leaving

    In this week's roundup we see that continuous whining can get results, Linux users get 64-bit Flash and Moonlight previews, the latest in the Yahoo/Microsoft relationship and Senator Conroy ducks and weave in Senate Question Time. Read more »

    -- posted by Staff

  • Brendon Chase Sun eye Web developers with Netbeans 6.5

    Despite the recent employment axe hitting Sun the company has pushed out a new release of its Netbeans open source IDE with an eye to appeal more to Web developers. Read more »

    -- posted by Brendon Chase

  • Renai LeMay BarCamp buzz: Let the hacking continue

    Attending last weekend's BarCamp in Sydney, it was hard to escape the conclusion that a certain "dot-com bust" flavour had seeped into the kool aid previously being drunk by Australia's web 2.0 and early stage start-up sector. Read more »

    -- posted by Renai LeMay

What's on?