Brian Prince

With all the buzz over the Conficker worm, it remains an open question at this point just how many enterprises will actually be affected. Between the presence of tools to remove the Conficker infection, a patch for the Windows vulnerability it exploits and general awareness, it seems enterprises should have a good handle on the […]

Law enforcement is still investigating how credit card information belonging to a handful of Symantec customers from the United Kingdom fell into the hands of an identity theft ring. Though speculation has focused on an employee of e4e, a call center in India, a spokesman for Symantec said its own investigation has reached no definitive […]

Google is downplaying potential privacy issues in Google Docs that were recently brought to light. In his blog March 26, Security consultant Ade Barkah published information about three privacy issues in Google Docs tied to the system’s content sharing controls. The most serious of the issues is not described in detail, although he contends that […]

UPDATE: Mozilla has already created a patch for the zero-day vulnerability in its Firefox Web browser uncovered by security researcher Guido Landi-but users will have to wait a while to get it. Attack code for the Firefox flaw was published March 25 on numerous security sites. The code takes advantage of an XSL (Extensible Stylesheet […]

Many enterprises are in the dark when it comes to managing external users of Microsoft SharePoint. Gartner analyst Neil MacDonald estimates as many as 30 percent of SharePoint servers are deployed outside of the management of the IT department, an estimate underscored by a survey of 269 IT managers by Osterman Research that found 31 […]

Much has been written about the Conficker worm’s next big day. On April 1, the worm is expected to evolve yet again, when it blasts out requests to 500 of the 50,000 domains it generates daily in search of an update. Just what that update will do isn’t known; what is known is that Conficker […]

Core Security Technologies has issued an advisory for multiple vulnerabilities affecting HP’s popular OpenView systems and network management software. An engineer from CoreLabs, the company’s research arm, uncovered three vulnerabilities in HP OpenView NNM (Network Node Manager) that can be exploited remotely via buffer overflows to compromise mission-critical servers. Though two of the vulnerabilities are […]

HP is putting the spotlight on securing applications using Adobe Flash with a new code analysis tool. HP’s answer to Flash security is HP SWFScan, a free tool designed to help application developers defend against vulnerabilities before the hackers can get their hands on them. The tool works by decompiling applications developed with Flash to […]

The stock market may be struggling, but the market for purveyors of rogue anti-virus is going strong. In a report, researchers at Finjan offered a peek into the inner-workings of the market for rogue anti-virus. The company focused on a group of cyber-crooks running a rogueware affiliate network that hauled in an average of $10,800 […]

From Microsoft’s Internet Explorer 8 to Apple Safari, popular Internet browsers have taken a bit of a public beating the week of March 16. Even as hackers continue to focus most of their attention on Web applications, exploits targeting the browser always make juicy tidbits for black hats. In Cenzic’s Web Application Security Trends Report, […]

Security researchers have released proof of concept exploit code for an Intel chip flaw that could be abused to compromise computer systems with stealthy rootkits. The attack takes advantage of an Intel CPU caching vulnerability that can be used to get unauthorized access to SMRAM, a protected region of system memory where the system management […]

Microsoft is releasing an open-source tool to help application developers examine the causes behind program crashes. Microsoft plans to unveil the tool, called the !exploitable Crash Analyzer, on CodePlex March 20 at the CanSecWest conference in Vancouver, British Columbia. A Windows debugger extension, the heuristics-based tool is aimed at not only helping developers assess what […]