Secure advanced Web server for Unix
Hiawatha is a secure and advanced Web server for Unix. It features a rootjail, the ability to run CGIs under any UID/GID you want, prevention of SQL injection and cross-site …
First Windows 7 zero-day bug confirmed by Microsoft
The first Windows 7 vulnerability has been confirmed by Microsoft – a denial of service vulnerability in the Server Message Block (SMB) protocol that cannot be used to …
Malicious “Balance Checker Tool”
TrendLabs warns about spam messages with the subject “Your credit balance is over its limits” professing to be from Vodafone and Verizon Wireless. The email states …
(IN)SECURE Magazine issue 23 released
(IN)SECURE Magazine is a free digital security publication discussing some of the hottest information security topics. Issue 23 has been released today. Table of contents …
Most security products fail to perform
Nearly 80 percent of security products fail to perform as intended when first tested and generally require two or more cycles of testing before achieving certification, …
Safe online shopping tips
Cyber Monday, one of the busiest days of the year for online shopping, is quickly approaching (Nov. 30), and a new national survey from ISACA shows employees plan to spend the …
Week in review: cyber war, SQL injection, spam evolution, Apple and Microsoft patches
Here’s an overview of some of last week’s most interesting news, interviews and articles: Cyber war is coming, the impact could be huge Admiral Mike McConnell, …
Serious Adobe Flash vulnerability
Foreground Security discovered a critical vulnerability in Adobe Flash. This vulnerability allows the same-origin policy of Adobe Flash to be exploited to allow nearly any …
WordPress 2.8.6 security release
WordPress 2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, …
Biggest website security weaknesses
WhiteHat Security released a report assembled from real-world website security data, is a high-level perspective on major website security issues that continue to compromise …
Apple Safari 4.0.4 patches critical vulnerabilities
Safari 4.0.4 includes improvements to performance, stability, and security. ColorSync An integer overflow exists in the handling of images with an embedded color profile, …
Real-world data on software security initiatives
Cigital and Fortify Software released the Building Security In Maturity Model for Europe or “BSIMM Europe,” an application of the industry’s first-ever set …