Blog Elements | SecurityOrb.com

AppSecEU 2014 invites you to join top security architects, developers, technology thought leaders, and executives from Fortune 500 firms to the OWASP AppSec Europe global conference in the beautiful city of Cambridge, UK from June 23-26 2014. This conference is an opportunity to hear about the latest research on a myriad of topics related to web security, as well as establish connections between developers, security experts, and business leaders who are all stakeholders in ensuring applications are as secure as possible.

What to Expect

Cutting-edge topics presented by renowned security professionals from industry and academia.
Training and speeches on a variety of security topics including: web security, mobile security, cloud security, vulnerability analysis, defence and much more
Premier gathering place for executives from Fortune Global 500 companies and technology thought leaders
Group sessions, panel discussions, workshops and learning opportunities for developers, business owners and security experts

Sponsorships are still available. Please see our sponsorship opportunities to learn how you can join other well known companies to showcase your company at this top notch event too!

To learn more or to register please visit https://2014.appsec.eu/

A newly discovered flaw affecting several versions of Microsoft’s Internet Explorer has left a significant portion of the world’s web browsers vulnerable to attack.

Disclosed in an unusual Saturday alert from Microsoft, the flaw is being called a serious “Zero Day” vulnerability by security company FireEye, which claims it affects more than 56 percent of the world’s web browsers currently in use.

It’s a remote code execution vulnerability, which in English means a bad guy can make a target computer run software after a successful attack. “The vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer,” Microsoft’s alert reads. The phrase “arbitrary code” means pretty much any software that the attacker chooses to run.

In a post to its Security Response Center blog, Microsoft explains that the company has so far seen only “limited attacks” exploiting the vulnerability. It says attacks typically occur when a target has been convinced to click on a link.

FireEye, in a post of its own has declared the exploit a zero-day vulnerability, so named because they’re undisclosed or leave potential victims with zero days of warning. The company claims a gang of attackers has already launched a campaign exploiting the flaw.

Read the rest here.

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

AppSecEU 2014 June 23-26, 2014 Cambridge, UK

New Vulnerability Hits Internet Explorer

AppSecEU 2014 June 23-26, 2014 Cambridge, UK

New Vulnerability Hits Internet Explorer

Full Sized Blog Element (Big Preview Pic)

AppSecEU 2014 June 23-26, 2014 Cambridge, UK

New Vulnerability Hits Internet Explorer

INTERESTING LINKS

Latest News

Business Hours