Microsoft addresses 9 security vulnerabilities with 4 "Important" bulletins   08 Jul 2008 18:04 GMT
Microsoft announced 4 "Important" security bulletins today that cover 9 separate vulnerabilities. Of note were vulnerabilities reported in Windows DNS server and client, and within SQL Server. Briefly, the vulnerabilities involve: Cache poisoning and insufficient socket entropy flaws in Microsoft DNS Server A remote...
Source: ZDNet

Microsoft delivers 'important' patches   08 Jul 2008 17:51 GMT
Microsoft on Tuesday delivered seven important patches to fix vulnerabilities in SQL Server, Exchange Server, Vista and Windows Server. Among the details, which were previewed last week. CVE-2008-0085: A vulnerability in the way SQL Server manages memory page reuse. An attacker with database operator...
Source: ZDNet

Apple hasn't learned from past security mistakes   08 Jul 2008 16:33 GMT
* Ryan Naraine is on vacation. Guest editorial by Aviv Raff Apple's Safari for Windows is a nice browser. It really is. It has slick user interface, some pretty cool features, and benchmarks show that it is really fast. But, saying that...
Source: ZDNet

ICANN says hijacking attack due to breach at their registrar   08 Jul 2008 15:46 GMT
As we commented on, ICANN, the group that manages top-level domain TLD naming systems for the web, recently had several of its domains hijacked by a Turkish hacking group.  ICANN has now commented that the hijacking was due to a security breach at the registrar that manages those URLs.  From...
Source: ZDNet

ICANN says registrar was hacked   08 Jul 2008 14:27 GMT
Two weeks after ICANN's own domains were hijacked by Turkish hackers, the International Corporation for Assigned Names and Numbers says it was its registrar -- not ICANN's servers themselves -- that were attacked. On June 26, a number of ICANN sites popped up with this message: ...
Source: ZDNet

The importance of Ratproxy   08 Jul 2008 13:42 GMT
In a way it's a server-side anti-viral, aimed at catching injections of malware as they happen. Thus any Web host which wants to be honest and fight the bad guys can, proactively and in the background. by Dana Blankenhorn
Source: ZDNet

DNS hole prompts synchronized patching effort by IT vendors   08 Jul 2008 13:00 GMT
A cache poisoning flaw that was discovered earlier this year in the Domain Name System protocol was kept under wraps while a group of vendors worked in tandem to develop software patches.

Source: Computerworld

Symantec warns of new Word attack   08 Jul 2008 13:00 GMT
Cybercrooks are actively taking advantage of what appears to be a previously undisclosed security flaw in Microsoft Word, according to an advisory issued by Symantec.

Source: Computerworld

Microsoft plugs nine holes in Windows, DNS, SQL   08 Jul 2008 13:00 GMT
Microsoft today released patches for nine vulnerabilities in Windows, Exchange, SQL Server and the company's DNS server and client software.

Source: Computerworld

MessageLabs secures e-mail backup   08 Jul 2008 13:00 GMT
MessageLabs introduced a managed e-mail backup service that has the same security features built into the company's other products.

Source: Computerworld