Exposing software flaws--no easy job
605168
Security researcher Christopher Soghoian reflects on the hard work that comes after finding a vulnerability.
68684
Image files found on image-hosting sites look harmless, but conceal PHP exploit code.
103643
Makers of security software question the thoroughness and accuracy of evaluations.
5380
Open source is not always the best software.  When it's not, use something else.  Is this complicated?
641298
Reports of vulnerabilities found by some peer-to-peer file sharers prompt patch.
191059
A serious flaw in Google's desktop software could be used to wreak havoc on a victim's PC.
91814
TechWeb - The software maker argues that a vulnerability recently identified is not new but a duplicate of a flaw found in December 2006.
250638
Windows, Linux and Java each fail some basic integrity rules.
176002
Taking the gloves off Software is unstable, full of bugs and bloated. Developers spend so much time adding new features that software testing is a last minute thing. Even the mantra of "designed secure" has failed to really improve the quality of software - just witness the number of day zero attacks against Microsoft.â¦
386604
This article discusses the discovery of compromised machines in large enterprise environments, and offers some suggestions on correlating NIDS and HIPS logs to avoid false positives.
744672
Windows security holes patched; tool to rid PCs of malicious software now available.
601984
Vulnerabilities in healthcare software often go unreported.
763575
Ilia Alshanetsky posts today about the proposed "Month of PHP bugs" that Stefan Esser is proposing:   It would be interesting to see what issues he discovers, hopefully most of them have already been reported to the PHP Security Team, in which case the upcoming 5.2.1 release will provide a resolution path for affected users.   Hopefully, as Ilia states, the bugs will not turn out to be zero-day vulnerabilities and will instead be smaller issues. Either way, a bug-fix patch will probably soon follow.   Either way, I have to look at this as a free security audit of PHP by someone with a clue about security and ultimately, in the long run it will only make PHP better, even if March is going to be rather busy.
337538
How far is too far when it comes to the freedom of software? Plus: Palm slipping, Windows sliding.
164780
Code analysis row after tool identifies 611 defects Security researchers that carried out a code analysis of popular open source browser Firefox using automated tools, have discovered scores of potential defects and security vulnerabilities despite coming to the conclusion that the software was generally well written.â¦
262318
A software developer whose program was accidentally labeled a threat is considering action against the antivirus company.
211581
The seriousness of an already critical flaw in the way a Microsoft component processes JPEG files got ratcheted up a notch this week as exploit code began circulating.