Security News

More Firefox URI handling security hiccups 04 Sep 2007 16:18 GMT
Mozilla has not quite fixed the security hiccups with URI protocol handling in Firefox. According to Billy Rios and Nate McFeters, the two security researchers behind the exposure of protocol abuse in popular Web browsers, Firefox is still vulnerable to a remote command injection flaw that...
Source: ZDNet

China denies its military hacked Pentagon network 04 Sep 2007 13:00 GMT
For the second time in two weeks, China finds itself denying allegations that state-sponsored hackers have attacked another country's computers.

Source: Computerworld

Pfizer confirms third breach involving employee data since June 04 Sep 2007 13:00 GMT
For the third time since June, Pfizer has disclosed a data breach involving sensitive information about employees. As many as 34,000 workers were affected this time.

Source: Computerworld

Firefox still vulnerable to attacks from protocol-handling bugs 04 Sep 2007 13:00 GMT
Even though it was patched twice in July, Mozilla's Firefox browser is still vulnerable to attacks exploiting protocol-handling bugs, according to security researchers.

Source: Computerworld

Cisco plans to blend two NAC schemes 04 Sep 2007 13:00 GMT
Customers will be able to buy Cisco's NAC appliance -- the NAC option most of its customers opt for first -- and later migrate to itsnetwork-based NAC Framework architecture without having to swap out as many elements.

Source: Computerworld

Indian bank site back online after malware attack 04 Sep 2007 11:55 GMT
After putting its compromised site on blocks Friday to give IT staff time to get the better of a serious security breach, the Bank of India has restored its Web presence and says that the problem has been contained.

Source: Computerworld

Free gift offers dupe thousands into revealing data 04 Sep 2007 09:52 GMT
A cache of personal data derived mainly from U.S.-based PC users has been found lurking on a server in France along with various malware tools, and some experts suspect that it was stockpiled by an online theft ring specializing in financial crime.

Source: Computerworld

Custom-built botnet steals eBay accounts 04 Sep 2007 08:50 GMT
A sophisticated multi-stage attack by identity thieves appears to have significantly compromised eBay and perhaps PayPal as well.

Source: Computerworld

HITB - Expert finds 'stupid' vulnerabilities in Oracle 11g 03 Sep 2007 10:24 GMT
The latest version of Oracle Corp.'s flagship database offers better security than earlier versions, but develo...