Ryan Naraine

Beware How You Google

A simple misspelling of Googles domain name could lead to a Web surfers worst nightmare. In a new twist to the old practice of “typosquatting,” virus writers have registered a slight variation of Google Inc.s popular search-engine site to take advantage of any users who botch the spelling of the google.com URL. The malicious site, […]

Netscape Upgrade May Not Fix Critical Flaw

AOL on Wednesday urged users of its Netscape Web browser to upgrade immediately to the latest beta version to protect against a potentially dangerous security vulnerability. The flaw, which carries a “highly critical” rating from Secunia, has been confirmed in Netscape versions 6.x through 7.x. Secunia did not release details on the vulnerability, but it […]

SurfControl, Tenebril Make Anti-Spyware Splash

Its becoming a bit crowded in the enterprise anti-spyware business. One week after Symantec Corp. hopped aboard the anti-spyware gravy train, two new companies—SurfControl plc. and Tenebril Inc.—announced plans to jostle for elbow room in the burgeoning sector. SurfControl, known for its policy management and filtering software, said its new SurfControl Enterprise Threat Shield would […]

Adobe Issues Fix for Reader, Acrobat Flaw

Users of the ubiquitous Adobe Reader and Adobe Acrobat programs are at risk of a local file detection flaw, according to an alert from a private security research outfit. Adobe Systems Inc. earlier this month sneaked out a fix for the vulnerability and recommended that users upgrade to versions 7.0.1 of the freely available programs. […]

RealNetworks Unveils Rhapsody to Go

Streaming-media pioneer RealNetworks on Tuesday borrowed a page from Napsters playbook to help fuel its digital music battle with Apple. The Seattle-based RealNetworks Inc. announced a new “to go” option for its Rhapsody music service to allow subscribers to transfer monthly song rentals to portable devices. The new Rhapsody to Go service is priced at […]

Yahoo Zaps MusicMatch Jukebox Flaws

Yahoo has shipped new versions of its MusicMatch Jukebox media player to fix security holes that could put users at risk of buffer overflow attacks. In an online advisory, Yahoo Inc. strongly recommended that users upgrade to avoid code-execution and cross-site scripting attacks. “Some potential impacts of a buffer overflow and cross-site scripting may include […]

Forum Systems Plans XML Anti-Virus Firewall

Web services security pioneer Forum Systems on Monday announced plans to add virus protection to its flagship XML Firewall product. Forum Systems Inc., of Salt Lake City, will partner with Computer Associates International Inc. to integrate CAs eTrust anti-virus scanning engine with its Forum XWall Web Services Firewall. The deal paves the way for what […]

Microsoft Confirms Critical Win2K Flaw

Software engineers at Microsoft Corp.s security research center on Thursday confirmed a potentially dangerous security hole in fully patched Windows 2000 systems that could put users at risk of malicious hacker attacks. The Redmond, Wash., software maker was forced to go public about the unpatched vulnerability after a private security research company posted details and […]

High-Risk RealPlayer Hole Patched

Digital media delivery outfit RealNetworks Inc. on Wednesday released patches for a high-risk security flaw in several versions of its widely deployed RealPlayer software. The Seattle, Wash.-based company said the flaw could allow an attacker to run arbitrary or malicious code on unpatched machines. “RealNetworks has received no reports of machines compromised as a result […]

Researchers Propose Early Warning System for Worms

Researchers at the University of Florida have designed an Internet-worm early warning system that offers a new approach to pinpointing the first sign of a malicious network attack. Shigang Chen and Sanjay Ranka, professors in the universitys Computer and Information Science and Engineering department, outlined the plumbing for the system in a research paper (here […]