A widespread security vulnerability disclosed eight months ago is apparently still lurking in Mac OS X 10.5 and 10.6. A pair of security researchers have released a proof of concept exploit.
Adobe has confirmed the existence of a critical vulnerability in Adobe Reader and Adobe Acrobat, and plans to release an update by the middle of January 2010.
If someone spots a potentially costly security hole in your product would you say thanks and fix it, or send in the lawyers? Microsoft opted for the latter, and it was absolutely wrong on this occasion to do so.
As expected, Microsoft released 13 new security bulletins overnight (Australian time). A mammoth 34 vulnerabilities are addressed, including some affecting Windows 7.
Adobe is preparing to release critical security updates for Acrobat and Reader this week. At least one of the vulnerabilities is being targeted by attackers.
Along with the iTunes and iPod announcements, Apple pushed out a new release of iPhone OS with varied security fixes. Multiple security issues concerning its QuickTime media software for Mac OS X and Windows were also fixed.
Microsoft has widened the scope of a security advisory concerning vulnerabilities in the FTP service in Internet Information Services (IIS). The versions shipping with Vista and Server 2008 are now known to be affected as well as those in older versions of Windows.
A flaw in the FTP component within Microsoft's Internet Information Services (IIS) allows the execution of malicious code, potentially giving an attacker complete control of a targeted system.
Premier Election Solutions, formerly known as Diebold, patched a security weakness in its electronic vote tabulation software this week. Nice, but how many flaws are required before governments mandate open source solutions?
This week Microsoft pushed out a regular assortment of Windows updates but one in particular caught my eye. It was an important security update for Visual Studio. The description said an attacker could compromise your Windows-based system – with Visual Studio? Actually, no; the truth is worse, when good programs go bad.