Ryan Naraine

Flurry of Bulletins Due on MS Patch Tuesday

Microsoft plans to ship 10 security bulletins to cover a range of potentially serious vulnerabilities in its Windows operating system. After a one-month patching respite, next Tuesdays patch barrage from Microsoft Corp. will cover seven holes in Windows, some rated “critical,” the companys highest severity rating. A “critical” rating is used to rate a vulnerability […]

Patching Tiger: Apple Plugs Buffer Overflows

Apple has released a security update to correct a dozen vulnerabilities in its flagship Mac OS X operating system, including a code execution flaw in the Apple File Protocol server. Security alerts aggregator Secunia has rated the update as “highly critical” and warns that the flaws affect Mac OS X 10.3.9 and Mac OS X […]

Symantec Strikes Back at Adware Vendor

Internet security specialist Symantec Corp. has turned the tables on browser toolbar startup Hotbar.com Inc., filing a lawsuit to retain the right to flag Hotbar products as a potential security risk for PC users. Symantecs suit, filed in the U.S. District Court for the Northern District of California, does not seek monetary damages. Instead, it […]

Microsofts Security Response Center: How Little Patches Are Made

ORLANDO, Fla.—Anxious to shed the companys image as having a lax attitude about software security, officials at the Microsoft Security Response Center are using the Tech Ed conference here to provide a rare glimpse at the step-by-step process used to create, test and roll out security patches. The software maker trained the spotlight on the […]

Windows Security Ranks High on Tech Ed Agenda

ORLANDO, Fla.—Walking into Steve Ballmers keynote on the first morning of Microsofts Tech Ed conference here, one immediately gets the sense that software updates, patch management and Windows security will be front-burner topics. Even before the Microsoft Corp. CEO officially announced the release of WSUS (Windows Server Update Services), attendees were fiddling with free copies […]

Microsoft Planning Lower Rights IE 7.0

ORLANDO, Fla.—A senior Microsoft executive on Monday confirmed that the upcoming Internet Explorer 7.0 browser upgrade will ship with reduced privilege mode turned on by default to help thwart browser-based hacking attacks. During a strategic briefing on security at the TechEd conference, corporate VP of Microsoft Corp.s Security Business & Technology Unit Gordon Mangione said […]

Triple-Barreled Trojan Attack Builds Botnets

Anti-virus researchers are sounding the alert for a massive, well-coordinated hacker attack using three different Trojans to hijack PCs and create botnets-for-hire. The three-pronged attack is being described as “unprecedented” because of the way the Trojans communicate with each other to infect a machine, disable anti-virus software and leave a back door open for future […]

Microsoft Patch Management Suite Rolls at Last

Microsoft is finally ready to ship its long-awaited enterprise security patch-management platform. The software giant is expected to announce on Monday that WSUS (Windows Server Update Services), formerly known as SUS (Software Update Services) and WUS (Windows Update Services), has been released to manufacturing. Ziff Davis Internet News has learned that the announcement will form […]

McAfee Buys Wi-Fi Security Startup

Internet security specialist McAfee on Thursday announced a deal to acquire Wireless Security Corp., a venture-backed startup that sells Wi-Fi network protection to small and midsize businesses and home offices, for $20 million. In announcing the deal, executive vice president of McAfees global consumer business Bill Kerrigan said the immediate plan is to use technology […]

Microsoft to Roll Out Windows 2000 Update Rollup

Microsoft Corp. plans to announce as early as next week that it is ready to ship a Windows 2000 Update Rollup, the final security patch for the 5-year-old operating system. The Update Rollup, which replaces Windows 2000 SP5 (Service Pack 5), is a cumulative set of hot fixes, security patches and critical updates packaged together […]