Dennis Fisher

Microsoft Corp. on Wednesday issued patches for three new vulnerabilities, including a critical flaw in its SQL Server database software that enables an attacker to gain elevated privileges and run certain pieces of code on the machine. The flaw results from the combination of a stored procedure, an extended stored procedure and a weak permission […]

CAMBRIDGE, Mass.—If Wednesday nights town hall meeting here was any indication, Richard Clarke is getting just what he asked for. After releasing a draft of the National Strategy to Secure Cyberspace for comment in September, Clarke has embarked on a cross-country tour, soliciting feedback on the document and stumping for passage of the bill that […]

Symantec Corp. on Wednesday reported strong third-quarter earnings, highlighted by a 34 percent jump in revenue to $325 million from $242 million a year ago. Earnings per share grew to $0.33 from a loss of $0.08 per share in the third quarter of 2001. Officials for the Cupertino, Calif., security vendor said there was no […]

In its latest attempt to reinvent itself and refocus its business, Novell Inc. on Wednesday announced a new concentration on secure identity management solutions. The new solution set is known collectively as Nsure and includes new strategic alliances with PricewaterhouseCoopers plc and Deloitte & Touche LLP. In making the announcement, Novell officials acknowledged their past […]

Security researchers have identified a new vulnerability in Internet Explorer that enables an attacker to steal cookies, forge Web content and run code on users machines. The flaw, which lies in the WebBrowser control, affects IE 5.5 and 6.0. Users who have installed IE Service Pack 1 or are running Windows XP with Service Pack […]

Fresh from a long effort to trim its considerable product line, Network Associates Inc. on Tuesday made a big move toward finding other revenue streams by jumping into the professional services arena. Known as Network Associates Expert Services, the companys new offerings will draw on its background in security and networking to give customers services […]

The federal government is pushing ahead with its agenda to improve the security of public and private networks, working to garner support for key components and developing plans to refocus the National Information Assurance Partnership. Specifically, the NIAP is crafting two sets of security guidelines to help federal agencies lock down their networks, and many […]

Kavado Inc. on Monday unveiled a new module for its flagship product, which now is capable of protecting Web services that rely on the SOAP protocol. The companys InterDo software is designed to monitor application traffic at the business logic level and compare it against known policies for violations. In the Web services environment, it […]

Microsoft Corp. on Friday said that a patch it released Thursday for an Outlook Express vulnerability erroneously tells users they need a different version of Internet Explorer in order to install the fix. In fact, the patch requires IE 6, but users who have installed Service Pack 1 for the browser are already protected against […]

Microsoft Corp. on Thursday warned of a critical new flaw in its Outlook Express e-mail client that gives attackers the power to run any code they choose on a vulnerable machine. The company has issued a patch for the problem, which affects Outlook Express 5.5 and 6.0. Machines running Outlook are not affected. The problem […]

In a surprising move, Microsoft Corp. on Thursday announced that it will open up a portion of the source code of its Passport identity service on a limited basis. Speaking at a conference on digital identity in Denver, Microsoft CTO Craig Mundie said the company will make the source code of its Passport Manager available […]

Someone has inserted a Trojan horse into a recent version of the source code for the widely deployed Sendmail package, exposing an unknown number of servers to remote compromise. The files Sendmail.8.12.6.tar.gz and Sendmail.8.12.6.z, available from the open source Sendmail Consortium, are both compromised, according to an advisory released late Tuesday by the CERT Coordination […]