Ryan Naraine

Microsoft has suddenly yanked four bulletins from next Tuesday’s Patch Day batch, a surefire sign that the company continues to struggle with the patch testing process.

MoAB update: An official patch from VideoLAN, hidden taunts and heated verbal punditry.

Cisco has joined Oracle and others supporting the Common Vulnerability Scoring Standard, but unless Microsoft joins the party, the flaw rating scheme will continue to flounder.

A pair of renegade hackers has launched a project aimed at embarrassing Apple Computer into fixing software vulnerabilities in a timelier manner, prompting new calls for the Cupertino, Calif. company to hire a security czar to head off a growing crisis. The MoAB (Month of Apple Bugs) launched on New Years day with technical details […]

Serious security vulnerabilities in two desktop applications could allow malicious hackers to plant malicious code on millions of computers, according to warnings from the U.S. governments computer emergency response team. The more serious of the two is a cross-site scripting bug in Adobes ever-present Acrobat Plug-In, which fails to properly validate user-supplied data. The issue, […]

Microsofts security response team has announced plans to release eight security bulletins Jan. 9 with patches for a slew of Windows and Office vulnerabilities. Four of the bulletins will deal directly with the Microsoft Office desktop suite, which includes the Microsoft Word software that has been the target of zero-day malware attacks. During December 2006, […]

The rumor mill is buzzing tonight about an $825 million merger between Cisco and IronPort.

LINKS DU JOUR: Google’s blacklisted URL database is chock-full of MySpace log-in credentials; Who knew Symantec had a full-fledged rock band?

UPDATE: The second flaw warning in the Month of Apple Bugs project is for a remote code execution issue affecting the cross-platform VLC media player distributed by VideoLAN.

Its officially a cat-and-mouse race to exploit—and fix—security vulnerabilities affecting Apple Computers Mac operating system. Less than 24 hours after the release of working exploits for two critical media player flaws—QuickTime and VLC—a former engineer in Apples BSD Technology Group has launched an effort to provide run-time fixes for each flaw released during the Month […]

In the security year that was 2006, zero-day attacks and exploits dominated the headlines. However, the year will be best remembered for the work of members of the hacking—er, security research—community who discovered and disclosed serious vulnerabilities in the technologies we take for granted, forced software vendors to react faster to flaw warnings and pushed […]

An easy-to-exploit security vulnerability in Apple Computers QuickTime media player could put millions of Macintosh and Windows users at risk of code execution attacks. The QuickTime flaw kicked off the Month of Apple Bugs project, which promises to expose unpatched Mac OS X and Apple application vulnerabilities on a daily basis throughout the month of […]