Ryan Naraine

The list of unpatched security vulnerabilities in products embedded in the Microsoft Windows operating system just got longer. Researchers at eEye Digital Security have flagged another high-severity flaw affecting users of two widely used Microsoft Corp. products—the Internet Explorer browser and the Windows Media Player application. The company released an advisory with basic details of […]

Microsoft has confirmed plans to bundle anti-spyware protection into Windows Vista, a move that is sure to raise eyebrows among competitors and possibly antitrust regulators. The Windows AntiSpyware product, which currently ships to consumers as a free standalone application, will be integrated into Vista, as is indicated in the newest beta build of Vista distributed […]

Microsoft Corp.s patch for a worm-vulnerable security flaw in the Windows 2000 operating system is causing problems for some users. The software giant late Friday confirmed several “isolated deployment issues” with the MS05-051 update, but insisted that the problems should not stop anyone from applying the critical patch. Word of problems with the patch comes […]

Network computing giant Sun Microsystems Inc. has released patches for an information disclosure security flaw in certain releases of the Sun Java System Application Server. In an advisory posted online, Sun warned that the vulnerability may allow a remote unprivileged user the ability to view the source code of Java Server pages. Security alerts aggregator […]

Fears of a network worm attack targeting unpatched Windows 2000 systems heightened on Thursday with news that private security researchers have already reverse-engineered Microsofts critical MS05-051 update to create proof-of-concept exploits. The MS05-051 bulletin, which shipped as part of Microsoft Corp.s October batch of patches, includes fixes for four different Windows flaws, one of which […]

Microsoft Corp.s October batch of security patches comes with a terse warning for Windows 2000 users: Pay special attention to MS05-051, a critical bulletin that covers a worm hole in the operating system. The bulletin, which addresses four different Windows vulnerabilities, creates a “remote, unauthenticated attack vector” on Windows 2000 systems, triggering fears that a […]

Google Inc. has quietly patched a potentially dangerous security flaw in two of its business-facing services after a private security research outfit warned that malicious hackers could exploit the bug to hijack sensitive user information. The vulnerability was flagged—and fixed—in the Google AdWords and Google Services subdomains. Because both sites use data from the Google […]

Microsoft Corp. has not yet launched a paid anti-virus product, but questions about software bundling and unfair competition are already swirling in Europe. Rival Symantec Corp. acknowledged late this week that it has responded to a request for information from European Union regulators regarding the state of the security market and Symantecs role in it. […]

Weblog pioneer Dave Winer has sold his Weblogs.com ping server to Internet and telecommunications services giant VeriSign Inc. News of the deal swirled around the blogosphere all day Thursday and was confirmed by Michael Graves, technology evangelist for VeriSigns Real Time Web team. Financial terms of the deal were not released but bloggers tracking the […]

It figures to be a busy patch day for Windows system administrators next Tuesday. As part of its monthly security update release cycle, Microsoft Corp. plans to ship nine bulletins with fixes for holes in the Windows operating system. An advance notice from Redmonds security response center said eight of the bulletins will address bugs […]

Less than a year after its acquisition of enterprise anti-virus vendor Sybari Software Inc., Microsoft Corp. is revamping and rebranding the flagship Antigen product line. The product will now assume the Microsoft name and a new virus scan engine that was internally developed at Redmond using technology acquired from GeCAD Software Srl. The Antigen line […]

Microsoft moved a step closer to becoming a key player in the Internet security business with the announcement Thursday of a new enterprise-class anti-spyware product featuring technology to thwart viruses, worms and kernel rootkits. The new offering, dubbed Microsoft Client Protection, will go into limited beta before year-end with a full rollout expected in 2006. […]