Pidgin Multiple Vulnerabilities Feb 2014 (Windows)
Pidgin Multiple Vulnerabilities Feb 2014 (Windows)
Apache Web Server ETag Header Information Disclosure Weakness
Apache Web Server ETag Header Information Disclosure Weakness
SQL Injection Vulnerability in WordPress Cart66 Lite Plugin
SQL Injection Vulnerability in WordPress Cart66 Lite Plugin
Are Businesses Knowingly Infecting Their Web Visitors?
A posting from Dark reading in there Vulnerability and Threat section: As cybercriminals have shifted their techniques to get the most efficiency out of their attack campaigns, some of their favorite methods involve two-pronged attacks to first compromise legitimate Web servers and then use them to, in turn, infect unsuspecting visitors to seemingly innocuous sites. While much […]
Gathering More Security Data From Your Endpoints
A posting from Dark Reading in there Endpoint Security section: Even though many of the most troublesome and advanced threats hitting enterprise networks originate from the endpoint, most organizations today aren't investing in the same kind of visibility and control over these devices as they spend on network-based controls. This disparity is leaving organizations with […]
BIOS Bummer: New Malware Can Bypass BIOS Security
A posting from Dark Reading in there Vulnerability and Threat section: As more hardware vendors seek to implement the new NIST 800-155 specification that was designed to make the start-up BIOS firmware on our PCs and laptops more secure, they may need to rethink the security assumptions upon which the standard depends. A trio of researchers from […]
May Patch Tuesday coming up - Microsoft still not sure if latest 0-day fix will make the cut
A posting from Naked Security on patch Tuesday : Microsoft's Patch Tuesday for May 2013 will be published in the coming week. It'll be out on Tuesday 14 May 2013. (Wednesday 14 May for everywhere from about Malaysia eastwards.) Here's the elevator pitch: 33 vulnerabilities identified and fixed. Ten separate patches. Eight rated Important. (Apply ASAP.) Two rated Critical. (Apply […]
Critical Flaw Threatens Millions of BIND Servers
An posting in Threat post on a flaws that my blind severs: There is a critical vulnerability in several current versions of the BIND nameserver software that could allow an attacker to knock vulnerable DNS servers offline or compromise other applications running on those machines. The bug is present in several versions of the ubiquitous […]
Microsoft Windows Ipv6 Router Advertisement Denial of Service
A denial of service vulnerability is present in some versions of Microsoft Windows. The vulnerability is specific to the Neighbor Discovery implementation in the IPv6 stack. Successful exploitation could allow an attacker to cause a denial of service crashing the system.