Sponsored White Papers, Webcasts, and Downloads
Additional Resources
- Researchers find insecure BIOS 'rootkit' pre-loaded in laptops
- LAS VEGAS -- A popular laptop theft-recovery service that ships on notebooks made by HP, Dell, Lenovo, Toshiba, Gateway, Asus and Panasonic is actually a dangerous BIOS rootkit that can be hijacked and controlled by malicious hackers. The service -- called Computrace LoJack for Laptops -- contains...
- Tags: Laptop Computer, Rootkits, BIOS, Security, Spyware, Adware & Malware, Hardware, Components, Ryan Naraine
- Blog posts 2009-07-30
- Microsoft patches 31 Windows, IE, Office security holes
- Microsoft's batch of patches this month is a big one: 10 bulletins covering a total of 31 documented vulnerabilities affecting the Windows OS, the Internet Explorer browser and the Microsoft Office productivity suite (Word, Works and Excel). Five of the 10 bulletins are rated "critical," Microsoft's highest...
- Tags: Microsoft Word, Microsoft Windows Server, Window, Vulnerability, Microsoft Internet Explorer, Microsoft Corp., Microsoft Windows Server 2003, Microsoft Windows, Security, Microsoft Office, Operating Systems, Software, Office Suites, Ryan Naraine
- Blog posts 2009-06-09
- Mac OS X vulnerable to 6-month old Java flaw
- Attention Mac OS X users: Turn Java off immediately or you could be at high risk of malicious code execution attacks. Tired of waiting for a patch from Apple for a Java flaw that was fixed upstream six months ago, Mac developer Landon Fuller (of Month of...
- Tags: Malicious Code, Apple Macintosh, Java Applet, Flaw, Vulnerability, Apple Inc., Applet, Landon Fuller, CVE-2008-5353, Apple Mac OS X, Apple Mac OS, Java, Programming Languages, Operating Systems, Security, Software, Software Development, Software/Web Development, Ryan Naraine
- Blog posts 2009-05-20
- News to know: Google; Facebook; HP battery recall
- Here are today’s notable headlines. You can get News To Know via email alert and RSS daily. For continuous updates see BNET’s around-the-Web tech coverage. Ryan Naraine: Apple eliminates CanSecWest Pwn2Own flaws Larry Dignan: Cloudy day: Google falters; Packets lost in key cities Sam Diaz: Google outage...
- Tags: Google Inc., Facebook, Larry Dignan, Hewlett-Packard Co., Battery, Twitter, Engineering, Wireless And Mobility
- Blog posts 2009-05-15
- Hacker claims to have phished Steve Jobs Amazon account
- Hacker claims to have phished Steve Jobs Amazon accountHacker claims to have phished Steve Jobs Amazon accountClassicRE: Hacker claims to have phished Steve Jobs Amazon accountOh, yeah, classic alright, classic BS.First of all, this guy has offered no unrefutable proof of his claims. Could all be BS.Second, even if...
- Tags: Hacking, Apple Mac OS X, Operating systems, Cyberthreats, Steve Jobs, Amazon.com Inc., hacker, Apple Inc., Apple Safari, operating system, security
- Discussion threads 2009-05-15
- Apple eliminates CanSecWest Pwn2Own flaws
- Apple eliminates CanSecWest Pwn2Own flawsFault EliminationI did see the SVG fix in your article on 10.5.7's release and your relaying of Apple's attribution of discovery to "Nils." Regarding the IE8 issue, this is difficult to research because the signal to noise ratio is real low, but it looks as though...
- Tags: SECURITY, Patches, OSX, IE8, Apple Inc., vulnerability
- Discussion threads 2009-05-14
- Apple eliminates CanSecWest Pwn2Own flaws
- Here's a little ditty that was almost lost in the sheer volume of this week's Mac OS X security update: Apple has finally patched the two vulnerabilities used to win this year's CanSecWest Pwn2Own hacking contest. The two flaws were used by Charlie Miller and a German...
- Tags: Apple Safari, Flaw, Vulnerability, Apple Inc., Hacker, Hacking, Security, Ryan Naraine
- Blog posts 2009-05-14
- Apple Patch Day: 67 Mac OS X, Safari vulnerabilities
- On the same day Microsoft shipped a bundle of patches for gaping holes in its PowerPoint software, Apple followed suit, dropping a monster Mac OS X update to correct 67 security vulnerabilities. The sudden Apple Patch Day also included a patch to cover a trio of flaws...
- Tags: Apple Macintosh, Apple Safari, Vulnerability, Apple Inc., Arbitrary Code Execution, Apple Mac OS X, Apple Mac OS, Operating Systems, Security, Software, Ryan Naraine
- Blog posts 2009-05-12
- Critical security hole in Google Chrome
- Critical security hole in Google ChromeDoes the sandboxing mitigate the problem?[i]A failure to properly validate input from a renderer tab process could allow an attacker to crash the browser and possibly run arbitrary code with the [b]privileges of the logged on user[/b].[/i]Does this apply to v1.x alone or also to...
- Tags: Web browsers, Viruses and worms, Google Chrome, Google Inc., Web browser, Apple Inc., vulnerability, Chrome, security
- Discussion threads 2009-05-06
- Firefox 3.0.8 fixes Pwn2Own bug and one that "fell through the cracks"
- Firefox 3.0.8 fixes Pwn2Own bug and one that "fell through the cracks"This is a great article to link to......the next time I am told how wonderful/fast Mozilla is when it comes to patching vulnerabilities.Thanks!Watch And Learn MSPeople are actually paying you to sort out incidents like this, if you modularised...
- Tags: Web browsers, SECURITY, Pwn2Own bug, Pwn2Own, vulnerability, Mozilla Firefox
- Discussion threads 2009-03-30
- Firefox 3.0.8 fixes Pwn2Own bug and one that "fell through the cracks"
- The latest update to Firefox has been pushed out to users via an automatic update. This one was rushed through, mainly to fix the vulnerability used to win the 2009 CanSecWest Pwn2Own contest (MFSA 2009-13: Arbitrary code execution through XUL <tree> element). In addition it contains a...
- Tags: Mozilla Firefox, Vulnerability, Bug, Crack, Web Browsers, Patches, Security, Internet, Ed Burnette
- Blog posts 2009-03-30
- Mozilla kills Firefox Pwn2Own bug
- Mozilla has won the race among browser makers to fix code execution holes exploited during this year's CanSecWest Pwn2Own hacker contest. The open-source group today shipped Firefox 3.0.8 with fixes for two separate vulnerabilities, including a drive-by download issue used by a hacker named "Nils" to win...
- Tags: Mozilla Firefox, Vulnerability, Mozilla Corp., Community Member, Web Browsers, Security, Internet, Ryan Naraine
- Blog posts 2009-03-27
- "No more free bugs"? There never were any free bugs
- Vulnerability researchers have always extracted value out of their work, even before there was a monetary value placed on exploits. Security researchers at last week's CanSecWest conference dramatically announced their new philosophy that software vulnerabilities should no longer be given away. The movement cites the existence...
- Tags: Researcher, Vulnerability, Exploit, Security, Adam O'Donnell
- Blog posts 2009-03-24
- Hackers steer clear of Google Chrome, say too challenging
- At the CanSecWest security conference in Vancouver BC, hackers were invited to find and exploit holes in modern browsers. A popular target for hackers at this year's conference was Safari on a Mac -- definitely the lowest hanging fruit. Charlie Miller explains that it's not whether...
- Tags: Google Inc., Google Chrome, Hacker, Sandbox, Charlie Miller, Hacking, Security, Garett Rogers
- Blog posts 2009-03-23
- Nils2Own: 'I want to see security flaws fixed'
- Nils2Own: 'I want to see security flaws fixed'Small one, big one....It was still cracked. Even easier than Windows. Deal with it.You're not allowed to whine "This one's not really that big of a deal", then point out the same kinds of intrusions into Windows systems as proof that MS products...
- Tags: Operating systems, Cyberthreats, Apple OSX user, Apple OSX, security, Apple Inc., Linux, Apple Mac OS X, Microsoft Windows, security flaw
- Discussion threads 2009-03-23
- Nils2Own: 'I want to see security flaws fixed'
- VANCOUVER, BC -- Charlie Miller may have dominated the headlines but the undisputed champion of this year's CanSecWest Pwn2Own contest was a hitherto unknown hacker who asked to be identified simply as "Nils." A day after his perfect sweep of the breaking into...
- Tags: Apple Macintosh, Mozilla Firefox, Vulnerability, Bug, Microsoft Internet Explorer, Web Browser, Exploit, Web Browsers, Apple Mac OS X, Apple Mac OS, Desktops, Operating Systems, Security, Internet, Software, Hardware, Ryan Naraine
- Blog posts 2009-03-23
- Researchers demo BIOS attack that survives hard-disk wipe
- A pair of Argentinian researchers have found a way to perform a BIOS level malware attack capable of surviving even a hard-disk wipe. The researchers -- Alfredo Ortega and Anibal Sacco from Core Security Technologies -- used the stage at last week's CanSecWest conference to demonstrate methods...
- Tags: Hard Drive, Researcher, Attack, BIOS, Rootkits, Security, Hardware, Components, Spyware, Adware & Malware, Ryan Naraine
- Blog posts 2009-03-23
- Browser wars renewed
- The browser wars escalate with the introduction of Internet Explorer 8, Google Chrome beta, and Opera's Turbo mode. Plus, at CanSecWest hackers blew through security in Safari, Firefox, and IE8 like child's play.
- Tags: Web Browser, Web Browsers, Internet
- Articles 2009-03-20
- Questions for Pwn2Own hacker Charlie Miller
- VANCOUVER, BC -- At the CanSecWest security conference here, I got a chance to sit down with Charlie Miller, the researcher who broke into a fully patched MacBook machine using a Safari code execution vulnerability. We discuss the state of Web browser security, the vulnerability marketplace and...
- Tags: Apple Macintosh, Mozilla Firefox, Apple Safari, Vulnerability, Bug, Microsoft Internet Explorer, Google Chrome, Hacker, Exploit, Web Browsers, Security, Internet, Ryan Naraine
- Blog posts 2009-03-19
- << Previous
- page 1 of 1
- Next >>
White Papers and Webcasts