Security: Vulnerabilities


Microsoft Update Onslaught Targets Spyware, Viruses

Experts say Microsoft could be leading the charge for antivirus and anti-spyware software that runs from a single interface

Case Study: Virtual Patches Defend Web Applications

Web-application firewalls protect against unknown attacks

Q&A: Preventing “Applications Gone Wild”

Software can establish a baseline of "normal" application activity, then sound the alarm when an app behaves erratically

In Brief

CSOs concerned by malware and regulations; top IM security predictions; Eudora vulnerability

Control Systems Leave Manufacturers Vulnerable

Manufacturers' inability to patch their computers against every newly discovered virus and worm leaves their systems highly exposed

Defection to More-Secure Browsers? Don't Bet On It

With more-secure browser alternatives now available, will IE go by the boards?

In Brief

2005 security growth areas, tricking code to reveal its flaws, and a mobile-phone virus gets legs

In Brief

Automated bots crawl Internet for spyware, and the NSA talks about securing Mac OS X installations

Q&A: Open Source Network Vulnerability Scanners

Vulnerability management is no longer about maintaining perfectly patched machines.

In Brief

Problems with Adobe Acrobat, Microsoft .NET, and phpMyAdmin

HP Throttles Viruses, Cracks OpenView Identity

The latest security announcements from Hewlett-Packard

In Brief

Charting spyware growth, identity theft at universities, safer Web browsing

In Brief

Microsoft, Solaris vulnerabilities; top spyware threats; IPS use rising

Case Study: Securing Network Bandwidth

A packet-shaping tool can help handle worm outbreaks.

In Brief

Database and Imsecure vulnerabilities, search software flaw enables sophisticated phishing attack

Case Study: Finding and Fixing Security-Related Code Defects

Finding code problems was the challenge; a service provider's analysis held the answer

Microsoft and IBM Hone Security Warning Systems

Better security updates in the offing

In Brief

Microsoft ISA vulnerability may lead to phishing attacks, a new version of MyDoom targets the IFRAME vulnerability in IE, and survey finds bank clients willing to defect over banks’ lack of ID theft protections

In Brief

Highly critical IE vulnerability lacks patch; new attacks reanimate mobile AV

Does Open-Source Software Mean Better Security?

Setting the open-source security record straight