Apple Patches iOS Security Hole
Apple released iOS 4.3.4 (4.2.9 for those on Verizon) last week to fix a zero-day vulnerability in the software’s PDF-reading capabilities. It is available as a free download to iPhone, iPod Touch and...
View ArticleApache Warns of Denial-of-Service Attack Vulnerability
A warning has been issued to owners of websites powered by the Apache webserver software of a vulnerability which can be exploited using a relatively low number of requests directed at the server to...
View ArticleTip of the Week: Malware and Websites
WordPress, Joomla!, ExpressionEngine and Drupal are examples of applications that enable website owners to build websites using templates and other handy features. These sites can often require little...
View ArticleAdobe Updates Multiple Vulnerabilities
Last week Adobe released Security Bulletin APSB11-30, which describes multiple vulnerabilities affecting Adobe Reader and Acrobat. An attacker could exploit these vulnerabilities by convincing a user...
View ArticleMicrosoft XML Vulnerability
Attackers are actively exploiting a vulnerability in Microsoft XML Core Services (MSXML) 3.0, 4.0, and 6.0. The flaw was disclosed earlier this month when Microsoft issued its scheduled security...
View ArticleCritical Zero-Day Bug Found in IE
Researchers uncovered active malware attacks that exploit a critical and previously unknown vulnerability in the latest versions of Microsoft’s Internet Explorer (IE) browser. The attacks install a...
View ArticleMicrosoft Security Updates for October 2012
Today, October 9, Microsoft will release seven security bulletins to address twenty vulnerabilities. One of the bulletins has the severity rating of critical, the other six are rated important. The...
View ArticleSkype Fixes Password Reset Mechanism
Skype says it has fixed a flaw in its password reset mechanism; the vulnerability has been known for at least two months, but was not addressed until last week. The flaw allowed anyone who knew a Skype...
View ArticleRecent Critical Vulnerability Alerts from Microsoft
Last week on Patch Tuesday, four critical vulnerabilities were disclosed and addressed by Microsoft in Security Bulletins MS14-064, MS14-065, MS14-066 and MS14-067. Let’s follow up on two of the more...
View ArticleVulnerabilities in Lenovo System Update
(Thanks to Rich Pieri for sharing this news.) Months after Lenovo was found to have installed dangerous software onto its computers, major vulnerabilities were found in Lenovo’s update system, that...
View Article