Columnists: Security Holes That Run Deep
544632
How a seemingly simply Microsoft bug betrayed its author's disdain for a wide range of secure coding principles.
733214
Jon Oltsik cautions that the simmering discontent within the IT community over insecure software is about to boil over.
294425
ZDNet UK: Encryption circles are buzzing with news that mathematical functions embedded in common security applications have previously unknown weaknesses.
93571
A zero-day flaw in Firefox and third-party Windows patches turn up the heat for Net users. Plus: Buyout boom in security.
350344
To see the e-mail I get every day from readers about security issues is to develop a deep discomfort with the state of computing today.
150840
Backdoor drafts, security moms and up-armoring
631259
Eager to tarnish Microsoft's shiny new Service Pack 2, the security press managed to spin the most thin and marginal issues into "gaping holes" and "security craters."
609514
Last weekend's disclosure of an alleged security vulnerability in Microsoft Word 2000, exploited by a new version of an old worm, is raising questions over what constitutes the severity of an exploit. Is it the degree to which we know about it, or the number of systems out there it could possibly hurt?
680558
Jon Oltsik says the explosion in broadband use forces a rethinking of Internet security. But a lethargic vendor response is not a promising harbinger.
103643
Makers of security software question the thoroughness and accuracy of evaluations.
148871
Onslaught of Google bugs continues Google security lieutenants can't get a break. Over the past week, they've taken a public pounding, following reports of at least four previously undisclosed holes that included new cracks in Gmail and weaknesses that jeopardize the privacy of those who rely on the site to organize photos or administer their websites.â¦
607068
As per suggestions contained in the FAQ: Herein lies a report of two identified and as-of-yet uncorrected security flaws in Scoop. &nbsp;Enough detail will be provided to assist admins in investigating and correcting the flaws, but it is the author's hope that the details of the flaws will be sufficiently obscured to prevent abuse by the undesirables. Executive summary: Through the exploitation of various unchecked privileged operations, attackers may be able to perform admin-level actions leading to data loss. &nbsp;Additionally, well-intentioned security measures combined with XSS vulnerabilities can be exercised to simulate admin-level action, resulting in data loss.
737452
The unpatched security hole could be used by a remote attacker to compromise a vulnerable Mac, advisories say.
643950
Businesses have more to worry about with end-user abuse and security lapses, research suggests.
222872
Be afraid: There's no such thing as a secure network.
514413
A trio of ugly situations mean hard times for healthcare organizations too lazy or sloppy to get right with HIPAA requirements. Columnist Jon Espenschied has a secret for making sure you're not next.
656679
Security hole in ePolicy Orchestrator and ProtectionPilot could let an outsider take complete control of a system.