Brian Prince

Oracle plans to release patches to plug 37 security holes in its products next week, according to a preview of the upcoming Critical Patch Update released April 10. The update will be made available April 17 and will include 13 security fixes for Oracle Database, two for Oracle Enterprise Manager, and one each for Oracle […]

Patch Tuesday has arrived, and brought with it patches for a number of security vulnerabilities rated “critical” by Microsoft. The four updates considered critical deal with remote code execution vulnerabilities in Microsoft Agent, the Universal Plug and Play service, Content Management Server and the Windows Client/Server Run-time Subsystem (CSRSS). A fifth update is rated “important” […]

Yahoo has patched a buffer overflow vulnerability in its instant-messaging tool that would have enabled attackers to potentially execute code on a compromised machine. The flaw exists in an ActiveX control that is part of the Yahoo Messenger audio conference control. If exploited, a buffer overflow could cause a user to be involuntarily logged out […]

Trend Micro officials hope to change the forecast for Web-based security threats with its new in-the-cloud Web site reputation technology. The technology is part of the company’s Total Web Threat Protection strategy and a key component within the company’s plans for its Secure Content & Threat Management security portfolio. “This whole Web threat protection system […]

Microsoft is investigating a new flaw uncovered in Internet Explorer 7 that opens users up to phishing attacks. The vulnerability was discovered by noted Israel-based security researcher Aviv Raff. Using a cross-site scripting attack, an attacker can exploit a design flaw in IE 7, he wrote on his Web site. He said an attacker can […]

An unencrypted CD containing personal information of 75,000 customers of Empire Blue Cross and Blue Shield has been recovered. The CD was apparently lost in transit earlier this year when Health Data Management Services—a subcontractor to Magellan Behavioral Solutions of Avon, Conn.—sent it to Magellan via UPS. The disc contained medical and personal information, including […]

Several analysts with an eye on the security information management market are forecasting increased consolidation between vendors as SIM providers look to address their customers’ needs. “I reckon the stand-alone SIM market will get sucked up by the larger systems management players—either that or SIM vendors will start to develop and acquire more systems management […]

A bug was recently uncovered in Firefox that could allow a malicious Web site to appear authentic. The bug affects the way Firefox handles writing to the “location.hostname” DOM property, according to a posting by security researcher Michal Zalewski on the security mailing list Full Disclosure. The vulnerability could potentially allow a malicious Web site […]

The Storm worm that wreaked havoc in January has opened up a new front in its war against users—instant messaging. The Trojan virus that was responsible for countless spam e-mails sent around the globe has spawned a new variant that is using AOL Instant Messenger, Google Talk and Yahoo Messenger to proliferate. The worm attacks […]

The U.S. Department of Homeland Security is planning a massive test in March of 2008 to determine how the nation will respond to a major cyber-attack. The test, called Cyber Storm 2, is the second of its kind, following a week-long simulation in 2006 that involved 115 private international and domestic companies and organizations. Last […]

SAN FRANCISCO—With the number of employees using smart phones and other mobile devices, corporations must start to focus their security on more than just their network perimeter, according to security analysts and specialists attending the RSA Conference here. Research done by the Business Forum Management Program in 2006 found that roughly 49 percent of the […]

It could be as simple as a smart phone dropping out of a CEO’s pocket. From there, countless pieces of data fall from a pants pocket into the wrong hands. With that in mind, companies need to secure network access and have the proper procedures in place to secure their mobile workforce, industry insiders said […]