HomeBlogsSecurity Watch

Security Watch

Firefox, Flock Recommended at Netscape Funeral

After a short stay of execution, America Online has finally pulled the plug on Netscape with an update notice encouraging users to migrate immediately...

Security Features High in Firefox 3 Beta 3 Release

Mozilla is inching closer to delivering the next major refresh of its flagship Firefox browser.Late this evening, the open-source group shipped Firefox 3 Beta...

R.I.P, Dude

If you subscribe to the main security mailing lists like Full Disclosure or Funsec, chances are you're familiar with the name Dude VanWinkle.According to...

Asus Eee PC Ships with Remotely Exploitable Flaw

Out of the box, the highly touted Asus Eee PC ships with a known code-execution vulnerability that allows a hacker to remotely gain root...

Adobe Confirms Critical PDF Fix, Will Issue Bulletin

Here's a quick update on the Adobe Reader silent fix I wrote about earlier today.Adobe spokesperson John Cristofano sent me a statement confirming the...

Hey Apple, Where’s my iPhoto Security Patch?

Two days ago, Apple released iPhoto 7.1.2 to patch a format string vulnerability that was found and reported by Ernst & Young researcher Nate...

What’s Behind Drop in 2007 Vulnerability Counts?

For the first time since people started keeping track of this stuff, 2007 saw a noticeable decline in publicly reported security vulnerabilities.In fact, according...

How to Disable ActiveX Controls in Internet Explorer

As a follow up to two separate stories I wrote on vulnerable ActiveX controls affecting high-profile Web sites, here's a quick primer on configuring...

‘Critical’ Flaw in MySpace, Facebook Image Uploader

Security researchers have raised an alert for serious security problems with the MySpace and Facebook image upload feature.According to a warning from Symantec's DeepSight...

RealPlayer Slapped with ‘Badware’ Label

The Google-backed StopBadware.org project has slapped a "badware" label on the widely deployed RealPlayer media player for problems associated with disclosure and uninstallation.For the...