Brian Prince

Yahoo has patched a buffer overflow vulnerability in its instant-messaging tool that would have enabled attackers to potentially execute code on a compromised machine. The flaw exists in an ActiveX control that is part of the Yahoo Messenger audio conference control. If exploited, a buffer overflow could cause a user to be involuntarily logged out […]

Quantum Corp. has launched a new version of the StorNext data management software to help customers construct an infrastructure for consolidating resources to cut costs and improve workflow operations. Slated to ship in the second quarter of this year, StorNext 3.0 extends data sharing to servers on the local area network and leverages Quantums data […]

IBM has patched multiple flaws in its Tivoli Provisioning Manager for OS Deployment that allowed attackers to crash the service or execute arbitrary code with SYSTEM priviledges. Tivoli Provisioning Manager for OS Deployment is a network boot server that facilitates central management of networked workstations, implements PXE (Pre-boot Execution Environment) as well as a Web-based […]

Network security vendor DeepNines Technologies is combining one of its products with URL filtering technology from SurfControl to create an intelligent filter to help school districts prevent students from using Web proxies to view unauthorized Web sites. The new tool, named iTrust, is aimed primarily at school districts because of the provisions of the CIPA […]

A buffer overflow vulnerability caused by an integer underflow in the file_printf function in Unix-like operating systems has been patched. The flaw is contained within the file program and could allow an attacker to execute arbitrary code or create a denial of service condition, according to a posting on the United States Computer Emergency Readiness […]

Arbor Networks on April 2 announced a new version of Arbor Peakflow X, featuring an extended audit trail for compliance reporting and other enhancements. Peakflow X 3.7 includes integration of data gathered by Arbors ATLAS (Active Threat Level Analysis System) in an effort to reduce the manual collection and analysis of new vulnerabilities, exploits, botnets […]

A new report by Webroot Software has found that more than 40 percent of companies surveyed had been hit with malware that disrupted their business. Webroots State of Internet Security report details the cost and legal implications to businesses of malware threats. Using the companys Phileas automated spyware research system, Webroot researchers discovered that 4.2 […]

IBM has patched two vulnerabilities uncovered last year in its Lotus Domino product line. Both vulnerabilities were fixed in Lotus Domino 6.5.6 and 7.0.2 Fix Pack 1. Last August, Sterling, Va.-based iDefense Labs reported a cross-site scripting vulnerability affecting IBM Lotus Domino Web Access, a Web-based messaging and collaboration interface for the Lotus Domino server. […]

Oracle has released a new version of Oracle Application Express to help developers build, deploy and manage secure Web applications. Oracle Application Express 3.0 offers several new application design, migration, reporting, security and Web services to users. The enhancements include PDF printing and Microsoft Access Migration support. Oracle Application Express is integrated with all editions […]

Oracle and Sun Microsystems have teamed up to provide information appliance foundations to make it easier for joint Oracle and Sun customers to deploy data warehousing tools based on Oracle Database 10g and Sun servers, storage and the Solaris 10 Operating System. The Oracle-Sun Information Appliance Foundations are reference configurations that provide a recommended database, […]

Websense is taking on mobile device security with new URL classification and filtering software designed to prevent users from accessing malicious or inappropriate Web content. The Websense Wireless URL Categorization Engine collects URLs from Internet sites and classifies them. Depending on the content filters installed with the individual wireless service provider, access to certain Web […]

Trend Micro officials hope to change the forecast for Web-based security threats with its new in-the-cloud Web site reputation technology. The technology is part of the companys Total Web Threat Protection strategy and a key component within the companys plans for its Secure Content & Threat Management security portfolio. “This whole Web threat protection system […]