Security: Vulnerabilities


In Brief

Highly critical IE vulnerability lacks patch; new attacks reanimate mobile AV

Does Open-Source Software Mean Better Security?

Setting the open-source security record straight

Best Practices: Patch Management

To more rapidly test patches and keep network configurations from drifting, keep a closer watch on every device’s configuration

In Brief

Blame unusable security, not users; Apple worm; high-speed IPS

In Brief

Antivirus and browser vulnerabilities, unsubscribe may be unwise

Thwarting Next-Generation Denial-of-Service Attacks

Domain name registrar copes with DoS spike

In Brief

Top 20 Windows/Unix vulnerabilities, Microsoft flaws and fixes

Q&A: Using Business Rules to Tackle Vulnerabilities

Identifying business assets to aid threat mitigation

In Brief

Human error and security; AOL's two-factor authentication; September viruses

In Brief

RealPlayer and JPEG vulnerabilities; security insurance

Patch or Perish: Symantec Notes Dramatic Increase in Threats

Symantec's assessment of system vulnerabilities in the first half of this year shows a dramatic increase in the number and potential destruction of security threats.

In Brief

Banks help ID thieves; unified security appliances; server security

In Brief

Symantec grabs @Stake; JPEG vulnerabilities; Mozilla holes; Sniffer worm

Case Study: Outsourcing Network Management and Security

How one company found an outsourcer able to manage its network equipment and offer cogent security advice

Case Study: Law Firm Isolates Potential Threats

Office uses one-stop monitoring for attacks and vulnerabilities

In Brief

Most unsolicited e-mail originates in U.S., survey finds; securing storage; name-dropping attacks

Security Briefs

Sun Solaris/Apache, Netscape/Sun, Winamp Vulnerabilities

Briefs

More XP SP2 woes, fraud awareness survey, Can-Spam's failure

CA Jumps into Anti-Spyware Market

Acquisition of PestPatrol signals single-console management of viruses, spam, and spyware may not be far away.

New Technology Combats Zero-Day Attacks

Exploits expected to get worse, putting even more pressure on security managers