Vulnerabilities

Continuous news on hardware and software vulnerabilities from proof of concept to zero day, the dangerous to the novel. Follow the patching topic to narrow your news to emerging fixes.

Digital Stakeout acquires vulnerability scanning firm

Digital Stakeout, an Atlanta-based managed security services company, has acquired ScannerX, a provider of vulnerability scanning and assessment services.

Marcia Savage Apr 1 2005 10:32PM Security

Frenchman fined for exploit-posting exploits

A Frenchman was found guilty in a Paris court yesterday for publishing exploit code of a company's anti-virus product.

David Quainton Mar 9 2005 11:41AM Security

CA catalogue hit by buffer overlow vulnerabilities

Vulnerabilities in CA Licensing software have opened up vast swathes of the CA product catalogue to potential attack. The company has issued patches for the buffer overflow vulnerabilities that allow the insertion of malicious code.

David Quainton Mar 3 2005 5:10PM Security

Fresh MS vulnerability is revealed in Denmark

Staff Writers Jan 14 2005 5:07PM Security

Virus writers approach zero day exploits

Four days was all virus writers needed to take advantage of the latest Internet Explorer vulnerability. Mydoom AG, which sends links to a website unwittingly hosted by an infected PC, has capitalised on a weakness only announced on Friday.

David Quainton Nov 9 2004 12:43PM Security

Kier Group plugs password security vulnerabilities

International building and civil engineering contractor, Kier Group has revamped its global network security by ditching a password-based based remote access system which had become “a major point of vulnerability”.

Rob Jaques Sep 9 2004 10:31AM Security

Black Hat: Vulnerabilities, liabilities, and more

Security professionals attending the Black Hat Briefings in Las Vegas this week left with a lot to think and worry about.

Marcia Savage Jul 30 2004 11:06PM Security

Is reactive patching the answer to protecting against known vulnerabilities?

The time in which it takes hackers to write malicious code to exploit a known vulnerability is rapidly shrinking. The appearance of the Sasser worm in the shortest time ever, just 18 days between the revealing of a Microsoft vulnerability and the beginning of an attack, marks a new low point in the fight against cyber crime. With the protective window of opportunity getting ever smaller, the task of patching vulnerable software is becoming an increasingly endless one.

David Williamson Jun 29 2004 2:58PM Security