Norton's "Canary" technology creates "vulnerability signatures"
100561
Blog: Symantec technology creates new protection for Internet Explorer users.
501371
Ziff Davis - Security researchers at Immunity say they have discovered several vulnerabilities in Darwin, the Unix core of Mac OS X.
435582
Blog: Updates address some critical vulnerabilities in the popular browser.
153432
rPath linux has issued an update to their packages for PHP, PHP-MySQL and PHP-PGSql to correct issues that could make it possible for a remote user to gain unauthorized access.   his fixes some vulnerabilities, where some have unknown impacts and others can be exploited by malicious users to bypass certain security restrictions or by malicious people to potentially compromise a vulnerable system.   References and links to the update information can be found in their original advisory.
43324
Botnet surprise A critical vulnerability has been identified in Adobe's Acrobat and Reader software which affects Internet Explorer users.â¦
145780
Symantec&#39;s Security Response has issued a warning about three new &quot;serious&quot; vulnerabilities discovered in the Windows operating system.
86222
In brief Exploit circulating for unpatched vuln
316820
The purpose of this article is to analyze a public exploit in a lab environment, see the alerts generated by an intrusion detection system, and then do some packet analysis of the malicious binary in order to better understand it.
391424
Adds what Symantec calls "threat interceptor" defense to prevent execution of malicious code enabled through a drive-by download.
385943
Security specialist Symantec has admitted to a number of vulnerabilities in its firewall and gateway products. The weaknesses make them liable to denial of service attacks and other compromises.
364679
In a curious decision on the part of a security software company, a white paper released today on the Symantec's Web site contains the address of an independent research paper which includes a demonstration of defeating PatchGuard, complete with source code, in an early Windows Vista beta.  The address comes by way of a 16-page reduction of Vista's security technologies.
111115
Blog: The most serious vulnerabilities allow attackers to run code on compromised machines.
90728
A new variant of the Santy worm, which attacks Web pages usuing the PHP bulletin board software, appeared this week. Earlier variants used Google to find vulnerable Web pages; the new
481693
Symantec Corp. researchers are working on a pair of projects to give Norton users a better idea of whether the Web sites they visit or the files they download are trustworthy.
233929
Ziff Davis - Anti-Santy-Worm V4 attempts to patch vulnerable Web forum software but might cause denial-of-service attacks.
635724
In a new post on his blog, Christian Wenz mentions the latest results of the SANS Institute's Top 20 Internet Security Attack Targets list which both includes a new entry ("Users") and several mentions of PHP and PHP-related applications.   Of course you can debate how such a Top list came together and what the real value behind that is, but there are two specific points in this year's list that I found quite interesting.   There's two targets for the PHP community to worry about - sysadmin/hosting and things developers need to keep in mind. Items on these lists include:  Always test and deploy patches and new versions of PHP as they are released Use Intrusion Prevention/Detection Systems to block/alert on malicious HTTP requests. Consider using Apache's mod_security to block known PHP attacks If you use PHP, migrate your application to PHP 5.2 as a matter of urgency. Encode all output using htmlentities() or a similar mechanism to avoid XSS attacks  You can check out the full information over on the SANS Institute website.
611813
A tool has been posted online that can apparently crack Vista's activation process by applying brute force -- and lots of time -- to come up with valid product keys. But the author is now telling users it's wrong to use it.