Q&A: Responsible disclosure of vendor flaws and what it means
5599
Some see vulnerability researchers who publicize flaws as knights in shining armor; others, especially software vendors, say they're only helping the bad guys. In an interview, researcher H.D. Moore justifies what he does.
155358
Help! Flaws in an ActiveX component incorporated in many technical support support packages create a risk of hacking attacks, security watchers warn.â¦
412176
Hacking contest renews the debate over 'responsible disclosure' of system holes.
555292
Online technology retailer Geeks.com displays a security vendor's "Hacker Safe" logo on its Web site. But now it's warning customers of a possible data compromise.
665989
I overheard a long-time hospital client talking to another support vendor today. The hospitalâs patient accounting department was attempting to send patient financial and billing data to a third-party biller. The vendorâs normal Web site was down, and they were trying to come up with an emergency fix.
336252
Issue #8 of the (IN)Secure Magazine has been posted today and includes articles like:  Payment Card Industry demystified Computer forensics vs. electronic evidence SSH port forwarding - security from two perspectives, part two Airscanner vulnerability summary: Windows Mobile security software fails the test Introducing the MySQL Sandbox   Check out insecuremag.com for more or just download the issue directly.
636754
Which search engines are adequately disclosing their paid placement and paid inclusion practices? Which ones are failing to do so?  A new report offers some surprising insights.
458563
Security-minded users can find out faster if their applications need to be patched with a free tool.
556642
I appreciate when a vendor succeeds at developing a very good application. But what I find more admirable is when a vendor recognizes the deficits in its solutions, makes no excuses, and quickly goes back to the drawing board to make that app excellent.ADVERTISEMENTNEW IT SERVICES FROM IBM: EASIER TO BUY AND IMPLEMENTDiscover a simpler, more cost-effective way to get the solutions your company needs to grow more flexible and efficient.
91814
TechWeb - The software maker argues that a vulnerability recently identified is not new but a duplicate of a flaw found in December 2006.
519167
Two years ago, IBM was ordered to produce the source code for its products, which Compuware identified as containing its pirated intellectual property. The code was missing. But lo and behold -- last week, they called and said they had it,&quot; ...
699435
A researcher has posted proof-of-concept code for a zero-day flaw within Mac OS X dealing with its handling of disk image (.dmg) files. The issue causes a memory corruption vulnerability that could allow attackers to execute arbitrary code.
386604
This article discusses the discovery of compromised machines in large enterprise environments, and offers some suggestions on correlating NIDS and HIPS logs to avoid false positives.
239684
Flaw filler Wall Street darling VMware released patches that address multiple vulnerabilities in its products this week.â¦
449710
A security expert has found programming errors in Oracle 11g that left security vulnerabilities.
81452
The leading vendors in the data warehousing market are running scared of new entrants to the market that are offering data warehouse appliances (i.e. pre-integrated hardware, software, storage combinations) that can offer greatly superior performance at a significantly lower price.  In this white paper we will dispel the 'fog of war' that currently pervades the data warehousing landscape, dismissing those question marks that are irrelevant and gratuitous, but highlighting any genuine issues that need to be addressed.
218786
Liar, Liar, and pretexting &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29