EC delivers ContentGuard concerns
555927
The European Commission has formally notified Microsoft Corp and Time Warner Inc of its objections to the companies&#39; proposed joint ownership of ContentGuard Inc.
74744
The &quot;highly critical&quot; vulnerabilities stem from a flaw in IE&#39;s drag-and-drop feature and in the browser&#39;s security zone.
320458
Web servers may be vulnerable to attack, security company warns.
452393
It is no secret that enterprise networks are increasingly under attack from a variety of sources that are difficult to thwart. To address the problem, many are turning to outside security providers, which is driving  the rapid evolution of new safeguarding technologies, according to  research conducted by the Yankee Group.
479970
Blog: Researcher finds a basic cookie handling error that could compromise Windows PCs.
266717
At the risk of breaching Internet civility, a European Web portal is offering its visitors a weapon against spam: a screensaver program that tries to choke spam servers by flooding them with junk traffic.
322278
An unpatched server at the University of Colorado may have compromised information on up to 45,000 students and recent alumni. The patch, which fixed a vulnerability in a Symantec AV console, had been issued but not yet applied.
363195
DRM software stops digital files from being copied and has already seen heavy investment from Time Warner, Microsoft and Sony. Before the buy-out in April, the majority owner of ContentGuard
661352
Ziff Davis - Vulnerabilities in LibTIFF and Xpdf could allow remote system compromise.
728050
According to this security release from Secunia, there's a cross-site scripting vulnerability with the Travelsized CMS package (PHP-based) in the main index file.   David Vieira-Kurz has discovered some vulnerabilities in Travelsized CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.   The problem comes from the input parameters "page" and "langauge" not being verified and sanitized. Users are encouraged to go in and manually edit the source to correct the problem as there is no patch currently posted as of yet. You can get complete information about this issue from the full Secunia report.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
104663
Worried about spyware? spam? "spim"? AOL wants to set your mind at rest. Also: Putting patches in place.
42081
Blog: Popular add-ons could have their update process hijacked by man-in-the-middle attacks.
542850
A directory reversal within "flat" extensions could lead to system profile attacks.
435582
Blog: Updates address some critical vulnerabilities in the popular browser.
357182
In a new post to his blog, Chris Hartjes, spurred on by an article in the latest edition of php|architect magazine (covering protecting your code), has shared a few opinions starting with a certain paragraph near the end.   To start, I will focus on the paragraph above. What I get out of that is that if only your source was closed and hidden from prying eyes, it would not have bugs in it. Which is, of course, total nonsense. Code has bugs because it's open and they feel safer? There are two kinds of bugs: application bugs (which is the code I would write) and system bugs (in this case, bugs that that appear from PHP itself). I'm sorry, but there is nothing I can do if there is a bug in PHP that causes my application to crash except to point this bug out to the people who have the ability to fix it.   He goes on to talk more about how protection like this (the article talks about using the IonCube Encoder) will not stop someone if they're really determine to get at the code underneath the encryption. His only suggestion is to make an application good enough that people wouldn't want to try to steal it as much and would rather pay for their version.   Encode your stuff if you want, but be aware that the minute you choose to do that you are telling your customers "I don't trust you" and I have a hard time understanding a business model that assumes people are going to want to steal the stuff you sell.
373998
Content-recognition software could address a major entertainment industry concernâ songs and videos being posted on the Web without permission.