News

• 

  APT attackers are increasingly using booby-trapped RTF documents, experts say

  Booby-trapped RTF documents are one of the most common types of malicious Microsoft Office files that are used to infect computers with advanced persistent threats (APTs), according to security researchers from Trend Micro.

  By Lucian Constantin | 11 May, 2012 00:26

  Tags: trend micro, spyware, sophos, security, Patch management, patches, malware, Exploits / vulnerabilities, Desktop security

• 

  PHP patches actively exploited CGI vulnerability

  The PHP Group has released PHP 5.4.3 and PHP 5.3.13 on Tuesday in order to address two remote code execution vulnerabilities, one of which is being actively exploited by hackers.

  By Lucian Constantin | 09 May, 2012 22:44

  Tags: Web servers, software, security, php, patches, Exploits / vulnerabilities

• 

  PHP working on new patch for critical vulnerability after initial one failed

  The PHP Group plans to release new versions of the PHP processor on Tuesday in order to patch two publicly known critical remote code execution vulnerabilities, one of which was improperly addressed in a May 3 update.

  By Lucian Constantin | 07 May, 2012 21:51

  Tags: Web servers, software, security, php, patches, Exploits / vulnerabilities

• 

  Researcher misinterprets Oracle advisory, discloses unpatched database vulnerability

  Instructions on how to exploit an unpatched Oracle Database Server vulnerability in order to intercept the information exchanged between clients and databases were published by a security researcher who erroneously thought that the company had patched the flaw.

  By Lucian Constantin | 28 April, 2012 03:00

  Tags: applications, databases, Exploits / vulnerabilities, oracle, patches, security, software

• 

  WordPress security update patches external libraries, several vulnerabilities

  The WordPress development team released WordPress 3.3.2 on Friday in order to address several vulnerabilities in the popular blogging platform as well as in three external libraries that are bundled with it by default.

  By Lucian Constantin | 24 April, 2012 02:32

  Tags: Exploits / vulnerabilities, online safety, patches, security, Wordpress

• 

  Oracle to issue 88 security patches

  Oracle is planning to release 88 patches on Tuesday, covering vulnerabilities affecting a wide array of its products, according to a pre-release announcement posted to its website on Thursday.

  By Chris Kanaracus | 13 April, 2012 06:02

  Tags: oracle, patches, Patch management, security, software, Sun Microsystems

• 

  Malware infects Macs through Microsoft Office vulnerability

  Security researchers have encountered new email-based targeted attacks that exploit a vulnerability in Microsoft Office to install a remote access Trojan horse program on Mac OS systems.

  By Lucian Constantin | 30 March, 2012 01:42

  Tags: AlienVault, Exploits / vulnerabilities, Intego, malware, patches, security

• 

  Flash Player 11.2 fixes critical vulnerabilities, adds silent updates

  Adobe released Flash Player 11.2 on Tuesday, addressing two critical arbitrary code execution vulnerabilities and introducing a silent update option.

  By Lucian Constantin | 29 March, 2012 00:11

  Tags: Adobe Systems, applications, Media player software, patches, Patch management, security, software

• 

  Secunia: We don't know how vendors will react to our repackaging their updates

  Security firm Secunia expects a reaction from vendors as it plans to repackage security updates for hundreds of applications into its own proprietary installer and deliver them through the new version of Personal Software Inspector (PSI).

  By Lucian Constantin | 29 February, 2012 06:34

  Tags: data protection, Desktop security, patches, Patch management, rsa, secunia, security

• 

  PHP 5.3.10 fixes critical remote code execution vulnerability

  The PHP Group released PHP 5.3.10 on Thursday in order to address a critical security flaw that can be exploited to execute arbitrary code on servers running an older version of the Web development platform.

  By Lucian Constantin | 04 February, 2012 02:19

  Tags: Exploits / vulnerabilities, patches, security

• 

  Symantec: disable pcAnywhere until fully patched

  Symantec on Tuesday took the dramatic step of advising customers of its secure communications product pcAnywhere to disable it, confirming that a 2006 data breach in which hackers stole its source code had led to a heightened risk of a successful attack.

  By Liam Tung | 27 January, 2012 08:00

  Tags: data breach, patches, pcAnywhere, symantec

• 

  Oracle to issue 78 patches, including 27 for MySQL

  Oracle is set on Tuesday to release 78 security fixes for vulnerabilities in its database, middleware and applications, according to a preview announcement posted to the company's website this week.

  By Chris Kanaracus | 14 January, 2012 03:46

  Tags: mysql, oracle, patches, security, software, Sun Microsystems

• 

  LibreOffice backers want community to join 'bug hunt'

  The organization behind LibreOffice is hoping community members will help it uncover problems with an upcoming release of the open-source office suite via an international "bug hunt" next week.

  By Chris Kanaracus | 22 December, 2011 04:19

  Tags: Apache Software Foundation, application development, applications, Office suites, open source, oracle, patches, security, software, The Document Foundation

• 

  Unpatched Apache reverse proxy flaw allows access to internal network

  A yet-to-be-patched flaw discovered in the Apache HTTP server allows attackers to access protected resources on the internal network if some rewrite rules are not defined properly.

  By Lucian Constantin | 26 November, 2011 00:43

  Tags: Apache Foundation, Exploits / vulnerabilities, Hosted, internet, patches, security, services, software, Web servers

• 

  Google Chrome update addresses high-severity flaw

  Google has released an update for Chrome 15 which addresses a high-risk vulnerability. The security issue is the result of an out-of-bounds memory write in the browser's JavaScript engine.

  By Lucian Constantin | 18 November, 2011 22:36

  Tags: applications, browsers, Google, patches, security, software