Dennis Fisher

Ntru Cryptosystems Inc. next week will roll out a new public-key toolkit designed specifically for wireless devices running Java applications. Known as Neo Java, the new product encrypts data during transfer and also provides user authentication. The application is less than five KB and is designed for constrained environments such as mobile phones and PDAs. […]

The long-running dispute over when to release vulnerability information is escalating into a bitter turf war among several security companies, all of which claim to have their customers best interests at heart. The flap began Monday when news of a serious vulnerability in the popular Apache open-source Web server software hit security mailing lists. Security […]

At a time when security options are becoming increasingly fragmented with many vendors concentrating their resources on specific, sometimes-arcane pieces of technology, Symantec Corp. is betting that the old concept of an all-in-one vendor has some life left in it. The company, best known for its Norton AntiVirus product, recently moved into other areas of […]

A buffer overrun vulnerability in the Apache HTTP server included with many popular Web servers enables an attacker to execute code on vulnerable machines. The flaw lies in the way that the server handles data transmissions of unknown size. Typically, these transmissions are broken into “chunks” for easier handling. But Apaches HTTP server misinterprets the […]

IBM on Monday announced an improved version of its wireless security monitoring tool, adding self-sensor and self-diagnosis capabilities. Known as the Distributed Wireless Security Auditor, the software runs on Linux-based desktops and laptops and as a thin client on personal digital assistants and other wireless devices. The software can locate rogue and misconfigured wireless LAN […]

All of the Korean-language versions of Microsoft Corp.s Visual Studio .Net developer tool shipped with a help file that is infected with the Nimda virus, company officials said Friday. However, the application doesnt use the infected file so the risk of infection for users is virtually nil, Microsoft said. And, even if a developer were […]

A Russian security researcher claims he has discovered a flaw in Microsoft Corp.s SQL Server 2000 which gives an attacker the ability to either crash the server or execute malicious code on the machine. Microsoft is aware of the advisory and is investigating the issue, the company said. The vulnerability is in the “pwdencrypt” hashing […]

Microsoft Corp. on Wednesday released patches for vulnerabilities in three separate products, including a new buffer overrun flaw in IIS that enables an attacker to run arbitrary code on a target machine. The vulnerability is in HTR, an old scripting language that is rarely used anymore. IIS 4.0 and 5.0 both include support for HTR […]

Security researchers have found two serious buffer overruns in Oracle Corp. products, both of which give an attacker complete control of a vulnerable machine. One flaw affects Windows machines running any version of Oracle9i, while the other affects any machine running the 9i Application Server, according to a bulletin released by Next Generation Security Software […]

Microsoft Corp. on Tuesday released an updated patch for a known vulnerability in its MSN Chat control because the original fix didnt prevent the problem from recurring. Although the original patch resolved the vulnerability, it failed to prevent the vulnerable ActiveX control from being reintroduced into the system, Microsoft said. As a result, the company […]

IBM corp. on Monday announced enhanced capabilities for its Tivoli security software that add further support for Linux and Unix variants. The IBM Tivoli Access Manager for Operating Systems now has access-control support across Linux and numerous Unix-based operating systems, including AIX and HP-UX. The Tivoli Risk Manager is also getting an upgrade, which includes […]

Responding to the overwhelming popularity of instant messaging and peer-to-peer file sharing programs, a San Diego, Calif. startup later this month will roll out a platform designed to monitor and secure the protocols these programs use. Akonix Systems Inc. on Monday announced the pending availability of its L7 platform. The system works by monitoring the […]