F-Secure warns of critical vulnerabilities   19 Mar 2008 14:53 GMT
Security vendor F-Secure says malformed archive files can cause its own and other vendors' products to break and crash. Security vendor F-Secure has warned of multiple critical vulnerabilities in its own and other vendors' products. The vulnerabilities exist in the way the products respond to malformed...
Source: ZDNet

3Com still seeks Bain-Huawei deal   19 Mar 2008 13:00 GMT
3Com, Bain and Huawei have not yet reached an acquisition deal that would meet U.S. security concerns.

Source: Computerworld

Security Update 2008-002 released   19 Mar 2008 12:11 GMT
Apple yesterday released Security Update 2008-002 (50.5MB) for Mac OS 10.4.11 and 10.5.2. The update, which appears in Software Update, is recommended "for all users and improves the security of Mac OS X." The previous 2008-001 Security Update is incorporated into this update and a restart is...
Source: ZDNet

Pennsylvania pulls plug on voter site after data leak   19 Mar 2008 10:45 GMT
A voter-registration site run by the state of Pennsylvania has been found to leak sensitive personal data about voters, necessitating its shutdown with just a month to go before that state's critical primary.

Source: Computerworld

How they hacked it: The MiFare RFID crack explained   19 Mar 2008 09:43 GMT
Hackers, start your microscopes? The MiFare RFID hack, writes Geeta Dayal, used a few tools not in the arsenal of your average code-duffer. But now that researchers have done the heavy lifting, subsequent cracks will be much, much simpler.

Source: Computerworld

Apple issues mega-monster security update   19 Mar 2008 07:39 GMT
Just a day after a remarkably large Safari update, Apple released a "frighteningly large" security update that patched nearly 90 vulnerabilities in both its own code and the third-party applications it bundles with its Tiger and Leopard operating systems.

Source: Computerworld

Major flaw in State of Pennsylvania online voter registration puts user data at risk   19 Mar 2008 05:03 GMT
Ok security people, we've been talking about it for awhile now, and here it is! Do you remember when you first heard about online voting? Do you remember thinking, geez, that sounds like a really bad idea? Well, your fears are confirmed. The state...
Source: ZDNet

Malware pain for my users   19 Mar 2008 03:48 GMT
While many of my users have run into snags with malware requiring a thorough cleaning (and a few requiring reformatting), most have largely avoided the extensive infestations that plague so many Windows users. By and large, they are a safe bunch of surfers, use Firefox for web browsing, don't...
Source: ZDNet

CanSec West '08 - Pwn2Own contest rules announced   19 Mar 2008 01:13 GMT
The Pwn2Own contest rules were announced recently for CanSecWest '08 coming up next week. Unfortuantely, or fortunately (depending on how you look at it), I won't be able to join in the fun as I will be presenting at Black Hat Europe next week, although...
Source: ZDNet

Someone get me rewrite: Apple delivers monster security update for OS X   18 Mar 2008 21:08 GMT
Apple delivered a security update for Tiger and Leopard Tuesday with at least 80 patches addressing multiple vulnerabilities. You know it's a big patch haul from Apple when you read the advisory and: You're not sure where to begin; You're IMing fellow security...
Source: ZDNet