Ryan Naraine

An independent security researcher on Tuesday posted an advisory—with zero-day exploit code—for a potentially dangerous security hole in media players marketed by RealNetworks Inc. The vulnerability, which remains unpatched, has been confirmed in RealPlayer version 10.0.5.756 (gold) and affects only the Linux/Unix platforms. Security alerts aggregator Secunia Inc. rates the bug as “highly critical” and […]

Apple Computer Inc. on Friday posted a security update to correct 10 security flaws in its Mac OS X operating system, warning that the most dangerous vulnerability could put users at risk of code-execution attacks. It is the second time in two weeks that the computer maker has shipped a security patch to swat potentially […]

Symantec on Thursday announced plans to purchase WholeSecurity, a deal that adds behavior-based and anti-phishing technology to its Internet security product roster. Financial terms of the transaction, which is expected to close in October, were not disclosed. The purchase of WholeSecurity Inc., based in Austin, Texas, gives Symantec Corp. ownership of a legitimate player in […]

HUNTINGTON BEACH, Calif.—The Demo conference here feels a lot like the 1990s. Dot-coms and early startups are everywhere, bum-rushing journalists and venture capitalists with elevator pitches of the next “game-changing idea.” But, unlike in the bubble days, its not only about the technology. The nitty-gritty of the business model is an important part of the […]

HUNTINGTON BEACH, Calif.—Looking to take advantage of the buzz around Internet security, a cast of small companies helped kick off the Demo emerging technology show by showing off a range of new enterprise and consumer-facing products. Among the startups making news here was Sana Security Inc., a company based in San Mateo, Calif., which is […]

There wont be a Patch Day this month after all. Microsoft has cancelled plans to roll out a solitary bulletin with patches for a Windows flaw, citing an unknown “quality issue.” The software giant had previously announced that a single “critical” bulletin would cover a vulnerability that could be ripe for exploitation by a worm. […]

Internet typosquatters are registering misspelled domains of anti-virus vendors and making money by redirecting surfers with Googles AdSense pay-per-click program. The startling discovery was made by Finnish security vendor F-Secure Corp., a company thats being targeted in the elaborate scam. In a notice posted online, director of anti-virus research at F-Secure Mikko Hypponen said unknown […]

Buoyed by the success of an internal blueprint used to cut down on security vulnerabilities in Internet-facing software products, Microsoft Corp. is preaching the “Security Development Lifecycle” to partners and third-party developers. The SDL, a collection of high-level principles and procedures covering every stage of software creation at Microsoft, was the topic du jour at […]

The Mozilla Foundation has shipped release candidates for a new version of its Firefox Web browser to provide a thorough fix for a known code execution security vulnerability. The Firefox 1.0.7 makeover comes just one week after a private security researcher posted a proof-of-concept demonstration of a buffer overflow affecting users of the open-source browser. […]

Apple Computer Inc. late Tuesday posted a Java security update for Mac OS X to plug five vulnerabilities that could cause system hijack, security bypass, data manipulation and privilege escalation attacks. In a security advisory, Apple posted a Java Security update for users of Mac OS X 10.3.9 and recommended that customers running Mac OS […]

Microsoft on Tuesday reissued the Windows 2000 Service Pack 4 Update Rollup to correct a range of embarrassing glitches haunting users of the enterprise-facing operating system. The re-release comes less than three months after the software maker first shipped the Update Rollup with more than 50 security patches and system reliability fixes. Immediately after the […]

There wont be a Patch Day this month after all. Microsoft Corp. late Friday cancelled plans to roll out a solitary bulletin with patches for a Windows flaw, citing an unknown “quality issue.” The software giant announced on Thursday that a single “critical” bulletin would cover a wormable vulnerability. During last-minute testing, however, researchers at […]