Actualités récentes

Articles populaires

Hover to load posts
Ressources

Centres de ressources

Confident Compliance Starts Here Always-On Tax Compliance For a Changing World The Future of Governed, AI-powered Data Science The Future of Corporate Payments Videos Partner Content Powering Enterprise Data Resilience

Ressources en vedette

Link to The Real AI Power Play: Who Controls Your Enterprise Data Layer?

The Real AI Power Play: Who Controls Your Enterprise Data Layer?

IT and data teams were promised that AI would make work easier. Instead, it's created new layers of complexity.

Link to Building the Backbone of Agentic AI with Trusted, Context-Rich Data

Building the Backbone of Agentic AI with Trusted, Context-Rich Data

In this 10-minute take video, Reltio Principal Solutions Consultant Guy Vorster explains how organizations can overcome fragmented data challenges to power AI agents.

Link to IHG scales real-time, trusted data across global brands

IHG scales real-time, trusted data across global brands

Accelerating time to value while powering data-driven engagement

Link to Dell’s Vrashank Jain on Enterprise AI Data Readiness and AI Data Platform Infrastructure
Dell’s Vrashank Jain on Enterprise AI Data Readiness and AI Data Platform Infrastructure
AI success depends on whether enterprise data is ready, reachable, and close enough to the workloads that need it. In this eSpeaks episode, Dell Technologies’ Vrashank Jain explains why fragmented data, weak metadata, slow pipelines, and poor data locality can stall AI projects before models ever reach production.
Link to BMC’s Jennifer Margules on Intelligent Enterprise Orchestration
BMC’s Jennifer Margules on Intelligent Enterprise Orchestration
In this episode of eSpeaks, Jennifer Margles, Director of Product Management at BMC Software, discusses the transition from traditional job scheduling to the era of the autonomous enterprise.
Link to Global-First Finance: Building Scalable, Compliant Operations in an Uncertain World
Global-First Finance: Building Scalable, Compliant Operations in an Uncertain World
eSpeaks’ Corey Noles talks with Rob Israch, President of Tipalti, about what it means to lead with Global-First Finance and how companies can build scalable, compliant operations in an increasingly uncertain world. They explore how automation, AI, and integrated platforms are helping finance teams tackle today’s biggest challenges, from cross-border compliance and FX volatility to […]
Intelligence artificielle

Articles populaires

Hover to load posts
Vidéo

Meilleures vidéos

Hover to load posts
Mégadonnées et analyse

Articles populaires

Hover to load posts
Cloud

Articles populaires

Hover to load posts
Réseau

Articles populaires

Hover to load posts
Cybersécurité Cybersécurité
Applications Applications
Gestion IT Gestion IT
Stockage Stockage
Mobile Mobile
Petites entreprises Petites entreprises
Développement Développement
Base de données Base de données
Serveurs Serveurs
Android Android
Apple Apple
Innovation Innovation
Matériel informatique Matériel informatique
Avis Avis
Moteurs de recherche Moteurs de recherche
Virtualisation Virtualisation
Blogs Blogs
Événements Événements

Skype Slaps Band-Aid on Code Execution Hole

Écrit par

Jan 21, 2008

1 minute read

eWeek Le contenu et les recommandations de produits sont indépendants de la rédaction. Nous pouvons gagner de l'argent lorsque vous cliquez sur des liens vers nos partenaires. En savoir plus

Skype has moved swiftly to block a security hole that allowed code execution attacks via the software’s video search feature.

The vulnerability, exposed last week by researchers Aviv Raff and Petko D. Petkov, is a cross-zone scripting issue that allowed hackers to use rigged video files to launch full code execution (PC takeover) attacks.

On the Skype blog, Villu Arak confirmed the bug and attack scenario and explained the temporary band-aid:

“Skype has temporarily disabled users’ ability to add videos from the Dailymotion gallery until an official fix has been made available. In turn, Dailymotion is addressing the vulnerability on their web site.“

Skype also released a security advisory with more details.

Ryan Naraine

Recommandé pour vous...

Security Watch

Google Patches 58 Android Vulnerabilities in February Security Update

Google released its second Android patch update of 2017 on Feb. 6, providing users of the mobile operating system with patches for 58 different vulnerabilities, up significantly from the 13 flaws Google fixed in its February 2016 Android update. In the new February 2017 update, 8 vulnerabilities are rated by Google as critical. Among the […]

Sean Michael Kerner

Feb 7, 2017

Security Watch

SecureWorks Finds Most Cyber-Threats Involve Phishing, Network Scans

The vast majority of successful attacks on companies are conducted by cyber-criminals using phishing, network scans for exploitable systems, and strategic web site compromises, security-services firm SecureWorks found in an analysis of six months of incident-response engagements. The analysis of 163 incidents found that 82 percent could be attributed to cyber-criminals, 11 percent to insiders […]

Robert Lemos

Feb 4, 2017

Security Watch

Sophos Phish Threat Aims to Educate Users on Phishing Risks

Security vendor Sophos announced the official launch of its Phish Threat attack simulator on Jan. 25, in an effort to help improve end-user and organizational readiness for phishing attacks. Sophos didn’t build the Phish Threat technology on its own, rather the platform was acquired from privately-held security consultancy Silent Break Security in November 2016. Phish […]

Sean Michael Kerner

Jan 25, 2017

Security Watch

Trump Administration Faces Herculean Cyber-Security Task

As Donald President Trump takes office, his administration will have to take on the complex task of securing the U.S. government’s information technology and networks, currently rated last among 17 different industry groups, according to ratings firm SecurityScorecard. In updated ratings released on Jan. 15, the company found that more than 70 percent of U.S. […]

Robert Lemos

Jan 25, 2017

eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site's focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

Entreprise

À propos Nous contacter Faire de la publicité Editorial Policy

Catégories

Actualités récentes Ressources Intelligence artificielle Vidéo Mégadonnées et analyse Cloud Réseau

Divulgation publicitaire : Certains des produits qui apparaissent sur ce site proviennent d'entreprises dont TechnologyAdvice reçoit une compensation. Cette compensation peut influencer la façon dont les produits apparaissent sur ce site, notamment l'ordre dans lequel ils apparaissent. TechnologyAdvice n'inclut pas toutes les entreprises ou tous les types de produits disponibles sur le marché.

Conditions d'utilisation Politique de confidentialité Californie - Ne pas vendre mes informations