-
Microsoft fixes 19 flaws in seven patches; all are considered critical updates
Microsoft has released its May 2007 security bulletin, which includes seven updates: all are listed as "Critical." Two of the patches affect Microsoft Windows, with one critical patch specific to Internet Explorer. Three of the patches affect Microsoft Office, and include Office for Mac 2004 users. ...
-
One emergency Microsoft patch fixes seven flaws, Vista included
Microsoft issued an emergency out of cycle patch for the animated cursor flaw Microsoft Windows. Microsoft's regular every-second-Tuesday-of-the-month patch cycle was interrupted in March 2007 when the software vendor issued no patches and will resume next week, on Tuesday April 10, 2007. The patch...
-
Windows animated cursor attack: Prevention and cure
There's a new Microsoft Windows vulnerability caused by an unspecified error in the way Windows 2000, XP, and Vista handle animated cursors. Animated cursors allow a mouse pointer to appear animated on a Web site. The feature is often designated by the .ani suffix, but attacks for this vulnerability...
-
McAfee to screen mobile content for malicious code
Today at CTIA in Orlando, Florida, security vendor McAfee announced a new filtering service for mobile service providers to screen unwanted content originating from subscriber cell phones. McAfee says its research shows mobile subscribers are increasingly using their cell phones for social networkin...
-
Symantec announces new mobile security suites
Symantec beefed up its existing enterprise mobile security suite in response to dualmode (cell and wireless Internet) smart phones that have hit the market. The new suite, designed for corporations to roll out to its employees using Windows Mobile technology, includes an antivirus application; a per...
-
Is Windows Vista the most secure operating system?
Jeff Jones, Security Strategy director in Microsoft's Trustworthy computing group, has posted a PDF report showing that in its first 90 days, Windows Vista had fewer vulnerabilities than competing operating systems. He produces a chart illustrating that Windows XP in its 90 days required Microsoft t...
-
Firefox 2.0.0.3 and 1.5.0.11 released
Mozilla today released security updates for Firefox 2 and Firefox 1.5. Security updates for Firefox 1.5 will be available only until April 24, 2007, when Mozilla will stop supporting the earlier version. Mozilla is encouraging current 1.5 users to upgrade to 2.0 soon. Current users of Firefox 2.0 an...
-
Mozilla to beta test its Firefox version 2.0.0.3 security updates
According to Mozilla, everyone who participated in the beta process for Firefox 2 will be offered a prerelease version of the next security and stability update within the next 24 hours. Beta builds and release candidates for browsers often receive wide testing and feedback as part of Mozilla's deve...
-
Trend Micro purchases HijackThis
Trend Micro is now hosting its latest acquisition, HijackThis, on its TrendSecure Web site. Well-regarded as a tool for identifying malware on a computer, HijackThis often is used by technical support individuals to diagnose what's happening on a client's machine. HijackThis is not an antispyware ...
-
Seven Microsoft patches we want today (but won't get)
This month Microsoft did not release any patches within its March 2007 security bulletin, though it did update its Malicious Software Removal Tool. In the space where we'd ordinarily call your attention to important patches from Microsoft, we thought we'd highlight a few important open vulnerabiliti...
-
Free desktop rootkit protection: However, proceed with caution.
Rootkits are tools intended to conceal running processes, files or system data deep within an operating system such as Microsoft Windows. Rootkits can be both benign and malicious, with criminal hackers now starting to use rootkits to hide backdoor Trojans. Successful rootkits install themselves as ...
-
Windows Live OneCare eats Outlook mail for lunch
A recent update to the Microsoft antivirus engine for Windows Live OneCare will quarantine the PST file used to store e-mail messages for Microsoft Outlook, preventing access to messages, appointments, tasks, and journal entries. It affects versions of Outlook, including Outlook 97 and 2000, and Out...
-
Microsoft fixes 20 flaws with 12 patches
Microsoft has released its February 2007 security bulletin, which includes 12 updates: 6 are listed as critical and 6 are listed as important. One of the critical patches is specific to Microsoft's Malware Protection Engine and affects many Windows-related secure components, including the premium Wi...
-
The dark side of crimeware
Speaking before a standing-room-only crowd at the RSA Conference 2007, Eugene Kaspersky, CEO of Kaspersky Labs, discussed several trends regarding malware. First of all, he stated that traditional computer viruses are gone. In 1980, teenagers wrote computer viruses for fun; today, they play computer...
-
Microsoft quietly fixes the antiphishing filter in Internet Explorer 7
If you've disabled the antiphishing filter in Internet Explorer 7, you're not alone. The filter, as it currently works, takes something short of forever to process each site, deciding whether to mark it as safe for viewing or suspect as a potential phishing site. In response, Microsoft has quietly i...
-
Will Outlook 2007 break your e-mail?
Some digital publishers are complaining that the new Microsoft Outlook rolls back design standards by half a decade. The 2007 edition of Outlook, the most popular e-mail client for big businesses, ditches Internet Explorer's technology for that of Word 2007 to display HTML messages.
The result?...
-
A first peek at the new Office 2008 for Mac
Windows users are expecting to find the new Microsoft Office 2007 software in stores by the end of this month. But Mac users will have to wait until the second half of the year to get the new Word, PowerPoint, and Excel, which won't look much like their Windows-only counterparts. Microsoft is callin...
-
Microsoft fixes 10 flaws with 4 patches
Microsoft has released its January 2007 security bulletin, which includes four updates: three are listed as Critical, and one is listed as Important. Three of the updates this month are specific to Microsoft Office, and one includes Mac versions of Office. Microsoft no longer offers technical suppo...
-
Flaws found in antivirus apps from CA, BitDefender, ClamAV, Sophos, and Norton
This week, various independent security researchers have announced new security flaws within software originally designed to keep your PC safe--antivirus products. Here's a list of what's out there and what's currently patched:
CA Anti-Virus: There's a buffer overflow in CA Antivirus 2007, that can...
-
Third new MS Word flaw reported
According to security vendor eEye Digital Security, there's a new buffer-overflow flaw within Microsoft Word that could crash a computer and allow an outsider to run malicious code on a vulnerable PC. Affected versions include Word 2000, Word XP, Word 2003, and the free Word Viewer 2003. Attacks are...
-
Microsoft quietly addresses known Wi-Fi flaw
Earlier this year, security researchers publicized a known flaw with how Microsoft Windows XP SP2 implemented its wireless networking: Windows XP SP2 would automatically scan for wireless networks upon power up, going through a list of known, previously associated networks. On the one hand this make...
-
Microsoft fixes 11 flaws with 7 patches
Microsoft has released its December 2006 security bulletin, which includes seven updates: three are listed as Critical, and four are listed as Important. None of the updates this month are specific to Microsoft Office, despite the appearance of two zero-day exploits within the last week targeting u...
-
Second Microsoft Word zero-day released
There's now a second Microsoft Word zero-day exploit in the wild. According to Microsoft, the software giant is investigating reports of a new zero-day attack barely one week after reporting another. The affected software includes Microsoft Word 2000, Microsoft Word 2002, Microsoft Office Word 200...
-
Microsoft Word zero-day attacks
Software giant Microsoft says it is currently investigating reports of a new zero-day attack on Microsoft Word. The affected software includes Microsoft Word 2000, Microsoft Word 2002, Microsoft Office Word 2003, Microsoft Word Viewer 2003, Microsoft Word 2004 for Mac, and Microsoft Word 2004 X for ...
-
Work in Office 2007? Can't take it with you
Today ushers in a new era for Microsoft Office--and with it, a sweeping set of surprises for users. Businesses now have the green light to download multiuser suites of Word, Excel, PowerPoint, and associated software that will save your work in new, XML-based file formats by default.
Microsoft ho...
|
