Brian Prince

Adobe Systems released a patch March 10 for a zero-day vulnerability under attack by hackers. The patch for Version 9 of Adobe Reader and Adobe Acrobat comes a day earlier than the company had planned. Patches for earlier versions of Reader and Acrobat are still slated for March 18. The vulnerability is the result of […]

Microsoft released three security bulletins March 10 for Patch Tuesday, including a patch for a critical vulnerability in the Windows kernel affecting the graphics device interface. According to Microsoft, the Windows kernel does not properly validate input passed from user mode through the kernel component of GDI. The vulnerability could allow hackers to run arbitrary […]

Juniper Networks is pushing an open architecture that provides enhanced visibility and control to help enterprises tackle network security issues. The company has pulled the covers off a number of new upgrades as well as the brand new SRX 3000 Series Services Gateways, which is essentially a slimmed down version of the SRX 5000 line. […]

Google has fixed a glitch in its document-sharing system that caused private Google Docs documents to be shared accidentally. According to Google, fewer than .05 percent of Google Docs documents were affected by the privacy breach. “As we noted in the Google Docs Help Forum yesterday, we’ve identified and fixed a bug where a very […]

With new exploits circulating, Adobe is still on schedule to release a patch Wednesday for a well-publicized zero-day vulnerability affecting Adobe Acrobat and Reader. The patch will be for version 9 of Acrobat and Reader; patches for 7 and 8 of both products will be coming March 18. Users should move quickly to deploy the […]

Apple plugged three security holes in the latest update of its AirPort Base Station and Time Capsule products, including a serious vulnerability in the implementation of the IPv6 Neighbor Discovery Protocol. The aforementioned bug leaves users open to attack via a maliciously crafted message due to improper validation of the origin of Neighbor Discovery messages. […]

A 27-year-old Los Angeles man has been hit with a four-year sentence in connection with his role in infecting as many as 250,000 computers with malware in a plot to steal account data. John Schiefer, who authorities said worked as a security consultant, was sentenced March 4 in Los Angeles federal court after pleading guilty […]

IBM is looking to enhance the data warehousing capabilities of Informix Dynamic Server with a new feature aimed at easing design and deployment. The Informix Warehouse Feature, available now for Informix Dynamic Server 11.5 (IDS), represents an attempt by IBM to address customer concerns around automated tooling for their IDS data warehouses. At the heart […]

Mozilla’s Firefox Web browser has been gaining market share against Microsoft Internet Explorer for years now. However, in 2008 it surpassed IE in a far less glorious category: number of bugs. According to browser vulnerability research by Secunia, (PDF) 115 security vulnerabilities in Firefox were reported in 2008-nearly twice as many as IE and Apple […]

Microsoft plans to push out three security bulletins next week, the most serious of which is meant to squash at least one remote code execution bug in Windows. All three bulletins deal with security bugs in Windows, with the other two addressing what Microsoft characterized as “spoofing” issues. The remote code execution bulletin is rated […]

Last week, the Independent Oracle Users Group reported that most organizations are not keeping up-to-date with patches for the Oracle database. That news did not come as a surprise to most due to the challenges of testing patches. Still, with so many databases out-of-step with the latest patch, the findings pose a key question: What […]

Catbird has updated its virtual security software platform to allow organizations to track virtual machines as they move and ensure security policies are continuously enforced. Its new product, VMShield 2.0, includes technology the company refers to as V-Tracker, which works by assigning a unique identifier to each virtual machine. “This identifier combines the usual attributes […]