Microsoft investigates leak of "Office" videos
611379
Software giant Microsoft Corp.   said on Tuesday it was investigating how two in-house training  videos made by British comedian Ricky Gervais, creator of "The  Office" television series, appeared on two Web sites.
647942
The effectiveness of a patch issued last September for a Microsoft Word vulnerability, where .DOC files opened in Word 2003 and earlier versions via Internet Explorer or Outlook could enable remote code execution, is being called into question today.
108366
Leak casts light on controversial tactics that may have been employed by the anti-piracy company.
557341
(InfoWorld) - There's now one more reason to be careful about opening Microsoft Office attachments. Microsoft warned Tuesday of a new, unpatched memory corruption error in its word-processing software, and said that it was investigating reports of "limited" attacks that exploit the problem. The bug can be exploited by adding a string of characters in a Word file that can corrupt the PC's memory and allow the attacker to run unauthorized software on the system, Microsoft wrote in a security advisory . The bug affects many versions of the software, including Word 2000, 2002, and 2003, the Word Viewer 2003 and several versions of Microsoft Works. It is rated 'critical' by the FrSIRT Web site, which compiles a list of software vulnerabilities. As automatic security updates have become commonplace, attackers have focused more on developing attacks that leverage this kind of unpatched hole in the software, sometimes called 0day attacks. This trend has forced Microsoft to produce a growing number of software updates in recent months. In particular, hackers turned their attention to Microsoft's Office products, which some researchers consider to be a more fruitful source of bugs than the Windows operating system. "Cybercriminals know that 0days are very valuable and can be used to make lots of money," said Cesar Cerrudo, chief executive officer of security research firm Argeniss, in Parana, Argentina. These vulnerabilities can be exploited to install spyware or dangerous Trojan horse programs, or to add the victim's computer to a network of compromised PCs, called a botnet, which can then be used to send out spam or attack other systems, he said. Microsoft's next set of security updates is due to be released on December 12.
240541
Investigation into media leaks from the boardroom
422749
(InfoWorld) - Microsoft will release six groups of security patches next week, including three critical updates for Windows and Excel users. The critical updates will fix bugs in many different versions of Microsoft's products, including the latest versions of Excel, Windows XP, Vista, and Windows Server 2003, Microsoft said Thursday in a note on its Web site. Online criminals have used flaws in Excel and other Microsoft Office products in limited attacks over the past year. Typically, the attacker will e-mail the victim a maliciously encoded Office attachment. If the document is opened, the hacker can then gain access to the victim's computer. Microsoft isn't releasing further details on the flaws it's fixing until Tuesday, but it rates an update critical if it fixes a vulnerability that could be used by a hacker to remotely install unauthorized software on a victim's computer. Three other less-critical updates are also planned for next week's "Patch Tuesday" security fixes. They include "important" updates for Microsoft Publisher 2007 and Windows XP Service Pack 2 as well as a fix for Windows Vista. In descending order of severity, Microsoft rates updates as critical, important, moderate, or low.
342090
Microsoft says it is working to close a breach of its technology that protects digital files from copying.
171931
Microsoft Corp. is investigating yet another critical flaw in one of its products, this time in two versions of its popular word processing software, Microsoft Word 2000 and Word 2002.
326117
Microsoft Corp., the world&#39;s biggest software company, said it will make the source code for its Office 2003 software available as part of a government security program.
56219
Does Microsoft's official trademark application for Excel signal an infringement crackdown?
724266
YouTube plans to introduce technology to help media companies identify pirated videos uploaded by users.
573034
YouTube's new video fingerprinting technology is designed to help copyright owners identify content uploaded without permission.
734469
(InfoWorld) - With hackers exploiting unpatched vulnerabilities in its Windows and Office software, Microsoft plans to issue 11 security updates next Tuesday. Some of the Office and Windows updates will be for critical flaws that could be exploited by attackers with no action on the part of users. Six of the patches will be for Windows, and four of them will be for Office, MicrosoftÂ said Thursday in a note on its Web site. The 11th update will be for a flaw in Microsoft's .Net framework, which is considered less severe than the critical Windows and Office patches. Hackers have been keeping Microsoft's Security Response Center busy this past month. Microsoft generally issues its security patches on the second Tuesday of every month, but last weekÂ the company was forced to issue a rare, "out-of-cycle" security patchÂ after criminals began exploiting a flaw in Internet Explorer's VML (Vector Markup Language) rendering engine. And security experts have also warned of cyberattacks based on unpatched flaws in PowerPoint, Word 2000 and in an ActiveX control (called WebViewFolderIcon) used by the Windows' graphical user interface software. The WebViewFolderIcon flaw will be patched Tuesday, Microsoft said. Attacks that take advantage of this flaw have been seen on the Internet, the SANS Internet Storm CenterÂ warned earlier this week. Â
292714
(InfoWorld) - There's now one more reason to be careful about opening Microsoft Office attachments. Microsoft warned Tuesday of a new, unpatched memory corruption error in its word-processing software, and said that it was investigating reports of "limited" attacks that exploit the problem. The bug can be exploited by adding a string of characters in a Word file that can corrupt the PC's memory and allow the attacker to run unauthorized software on the system, Microsoft wrote in a security advisory . The bug affects many versions of the software, including Word 2000, 2002, and 2003, the Word Viewer 2003 and several versions of Microsoft Works. It is rated 'critical' by the FrSIRT Web site, which compiles a list of software vulnerabilities. As automatic security updates have become commonplace, attackers have focused more on developing attacks that leverage this kind of unpatched hole in the software, sometimes called 0day attacks. This trend has forced Microsoft to produce a growing number of software updates in recent months. In particular, hackers turned their attention to Microsoft's Office products, which some researchers consider to be a more fruitful source of bugs than the Windows operating system. "Cyber criminals know that 0days are very vulnerable and can be used to make lots of money," said Cesar Cerrudo, chief executive officer of security research firm Argeniss, in Parana, Argentina. These vulnerabilities can be exploited to install spyware or dangerous Trojan horse programs, or to add the victim's computer to a network of compromised PCs, called a botnet, which can then be used to send out spam or attack other systems, he said. Microsoft's next set of security updates is due to be released on December 12.
598861
Software giant Microsoft Corp. MSFT.O   said on Tuesday it was investigating how two in-house training   videos made by British comedian Ricky Gervais, creator of "The   Office" television series, appeared on two Web sites.
629236
Pranksters in recent days have begun posting what they say are leaked builds of Windows 7, the successor to Windows Vista. But the file, according to those who've downloaded it, is bogus.
98461
Microsoft is investigating the appearance of a pirated copy of the eagerly awaited Halo 2 game online.