Brian Prince

Core Security Technologies is unveiling an open-source tool called Core Grasp Aug. 2, which is aimed at protecting Web applications from attack. Researchers from CoreLabs will be presenting the tool, which was created with an eye towards preventing SQL-injection attacks for applications written in PHP, at the Black Hat conference in Las Vegas. By exploiting […]

Yahoo is urging users of Yahoo Widgets to upgrade to address a vulnerability hackers can exploit remotely to take control of a compromised system. According to researchers at the French Security Incident Response Team, the issue is caused by a buffer overflow error in the “YDPCTL.YDPControl.1” (YDPCTL.dll) ActiveX control when processing malformed arguments passed to […]

Researchers at Core Security Technologies have donned their black hats and are preparing a presentation about a new database attack vector that relies solely on the inherent characteristics of the indexing algorithms. The attack, which will be demonstrated Aug. 1 against the MySQL database engine at Black Hat USA in Las Vegas, affects database management […]

Core Security Technologies has released a new version of its flagship enterprise security assurance testing tool. With the tool, dubbed Core Impact v7, the Boston-based company is taking aim at social engineering attacks threatening end users and their applications. The new capabilities include an automated client-side RPT (rapid penetration test) methodology implemented with easy-to-use wizards […]

Sybase is adding to the encryption and manageability security of Adaptive Server Enterprise in a new version of the companys relational database management system. In ASE 15.0.2, announced July 30, customers can encrypt individual columns with a single command, and need not encrypt a full table or the entire database. “The reason to do encryption […]

Call it a case of who was on first first. Officials at CyberDefender and Crawler traded barbs recently over a press release issued July 27 about Crawlers Spyware Terminator 2.0 and Web Security Guard. In the release, Crawler officials stated that the real-time anti-spyware protection in Spyware Terminator coupled with Web Security Guards Internet threat […]

Secure Computing saw its second-quarter revenues jump by nearly 50 percent compared to the same period last year. According to the companys earnings report, announced July 26, its quarterly revenues totaled $57.6 million, compared to $38.7 million during the same period last year and an increase of roughly $3.8 million over the first quarter. “Q2 […]

Security vendors McAfee and Secunia are each offering new freeware aimed at protecting users. McAfee announced the release July 26 of Rootkit Detective, a tool to help users clean their machines of the most notorious types of weapons hackers have at their disposal. Rootkits can be difficult to detect because they activate before an operating […]

iPhone. Whether enterprises are prepared or not, it has arrived. Less than a month into its release, Apples multimedia, Internet-enabled phone has already received criticism regarding security, highlighted by attempts to unlock the iPhone for networks other than AT&T and a well-publicized exploit crafted by Independent Security Evaluators, Baltimore-based security testers. It is only natural […]

Officials at Untangle are planning a face off between open-source and proprietary anti-virus products at the LinuxWorld Conference and Expo in August. Untangle, a provider of open-source network security tools, is hosting “The Untangle AV Fight Club,” a head-to-head competition between open-source Clam Antivirus (ClamAV) and proprietary products from SonicWall, McAfee and others. The test […]

“Pump-and-dump” spammers have found a new package for their scam: Excel files. Commtouch researchers reported the appearance of pump-and-dump spam in Excel files for the first time on July 21. The spam promotes stocks in file attachments with names such as “invoice20202.xls,” “stock information-3572.xls” and “requested report.xls.” “Excel is a logical progression from older formats, […]

SonicWall is releasing the latest version of its newly acquired Aventail Secure Sockets Layer VPN remote access platform to help businesses manage security threats and control remote access. The July 23 release, which features smart-phone support, comes on the heels of SonicWalls recent acquisition of Aventail, which closed July 11. SonicWall officials said the platform […]