security patch Resources

ZDNet Dictionary Definition

Security Patch: A fix to a program that eliminates a vulnerability exploited by malicious hackers. See vulnerability and patch.; Full Security Patch Definition >>

ZDNet Resources

Opera ships security patches, adds malware blocker: Opera ships security patches, adds malware blockerpathetic articleHorrible article describing any brand new version of any software. I'm guessing that When IE 8 and Firefox 3 come out after being in beta for 1-2 years... the title will be "Microsoft patches vulnerabilities" and "Mozilla foundation patches Firefox holes?"This is...; Tags: Patches, Spyware, adware & malware, Cyberthreats, Web browsers, ZDNet Blogs, Opera Software, malware blocker, security, security patch, malware; Discussion threads 2008-06-12
Apple pushes security patches with QuickTime 7.5 update: Apple pushes security patches with QuickTime 7.5 updateAnother QuickTime version, means yet another time I have to ignore iTunes..Another month, another instance of having to re-"ignore selected update" for the iTunes+QuickTime bundle.... UGH!Thanks: this is the right way to report itAnd eminently more sensible in its understanding of what you...; Tags: Digital music, Digital media, Patches, Apple QuickTime, QuickTime 7.5 update, QuickTime 7.5, security patch, Apple Inc., security; Discussion threads 2008-06-11
Microsoft+previews+12+security+bulletins%2C+7+%27critical%27%3B+Excel+fix+likely+en+route: Microsoft+previews+12+security+bulletins%2C+7+%27critical%27%3B+Excel+fix+likely+en+routeLive Update on Exactly WHAT Date?Since we run apps overnight, it would be nice to know WHEN "Windows Live Update" is going to do all this. That way, we can shut all apps properly the night before, and get in early the next morning to do damage conrol, if...; Tags: Microsoft Windows Vista (Longhorn), Patches, OPEN SOURCE, Microsoft Windows Vista, Microsoft Corp., security, Linux, security patch, OpenOffice; Discussion threads 2008-02-07
Super Bowl stadium site packed Trojan horse: Super Bowl stadium site packed Trojan horseEven if you don't want to the security patches...You should at least get the general stability patches, and other such updates to the systems...Yes, good to patch BUT...... it's practically always Windows machines getting hacked and infected.If my newly bought Canon digital camera will...; Tags: Web browsers, Patches, computer, Microsoft Internet Explorer, patch management, Linux, security, security patch, Mozilla Firefox, Web browser, hacker, trojan horse; Discussion threads 2007-02-05
Microsoft irons out security patch: Microsoft irons out security patch"In a world without walls and fences, who needs winodws and gates."Personally , I'm getting tired of all the attention microsoft is getting . {NOT}NOw you know who you can trust>patch would not be offered to users if the initial update failed to install. In certain...; Tags: Patches, Davy Jones, security patch, security, Microsoft Corp., Disney Corp., Gates IS; Discussion threads 2006-07-19

A Practical Methodology for Implementing a Patch Management Process: The time between the discovery of an operating system or application vulnerability and the emergence of an exploit is getting shorter, imposing pressure on IT managers to rapidly patch production systems which directly conflicts with configuration management best practices of quality assurance testing. IT organizations must develop...; Tags: Security Patch, Patch Management, SANS Institute, Patches, Security; White papers 2003-04-01

Additional Resources

Live Webcast: Mid-Year Report: Malware, Spam and Web Threats in 2008: What's NOT happening in 2008? The web continues to be a vector for cyber threats. Incidents of spear-phishing continue to dupe users, and botnets are increasing in popularity amongst growing economies across the globe. Complex polymorphic viruses as opposed to the more mundane Trojan horses are getting...; Tags: Web, Webcast, Sophos Plc., Malware, Spyware, Adware & Malware, Cyberthreats, Viruses And Worms, Channel Management, Security, Marketing; Webcasts 2008-07-24
Attack code published for DNS flaw: The urgency to patch Dan Kaminsky's DNS cache poisoning vulnerability just went up a few notches. Exploit code for the flaw, which allows the insertion of malicious DNS records into the cache of the target nameserver, has been added to Metasploit, a freely distributed attack/pen-testing tool....; Tags: Ryan Naraine; Blog posts 2008-07-23
'Spam King' escapes from federal prison: Edward "Eddie" Davidson, a notorious e-mail spammer who was sentenced to jail time in April, has escaped from a federal prison camp in Florence, Colorado. Davidson left, also known as the "Spam King, made a run for it when his wife visited him last Sunday and is now officially...; Tags: Internal Revenue Service, Restitution, Federal Prison Camp, E-mail, Security, Online Communications, Ryan Naraine; Blog posts 2008-07-23
iPhone vulnerable to phishing, spamming flaws: Security researcher Aviv Raff left has discovered a pair of basic design flaws that could turn your iPhone into easy bait for malicious phishing and spamming attacks. According to an advisory from Raff, the iPhone's Mail and Safari applications are susceptible to a URL Spoofing vulnerability which...; Tags: Apple iPhone, Apple Safari, Vulnerability, Spamming, Flaw, Aviv Raff, Phishing, Spam, Security, Spam And Phishing, Ryan Naraine; Blog posts 2008-07-23
Researchers borrow from Google PageRank for network defense service: Using a link analysis algorithm similar to Google PageRank, researchers at the SANS Institute and SRI International have created a new Internet network defense service that completely revamps the way network blacklists are formulated and distributed. The service, called Highly Predictive Blacklisting (.pdf), will be unveiled next...; Tags: Google PageRank, Attacker, Network, DShield, Highly Predictive Blacklist, Internet, Networking, Security, Ryan Naraine; Blog posts 2008-07-23
Inside the mind - and config - of Terry Childs: Terry Childs's lawyer, Erin Crane, offered the court some insights into the Childs' motivations in changing SF's network passwords. She will argue today for a reduction in his $5 million bail, perhaps to something closer to the bail set for common murderers ($1 mil.) In her written...; Tags: Password, Network, Backup, Terry Childs, Richard Koman; Blog posts 2008-07-23
Fortify sets off FUD flood: The Fortify study did not say enterprises must avoid open source because all open source is a security risk. But that's how lazy reporters played it. by Dana Blankenhorn; Tags: Open Source, Security, Dana Blankenhorn; Blog posts 2008-07-23
Another student hacks another police website: Oh the fun. Once again, another police website has been hacked by a student, showing that even the police aren't safe from all crimes. This is another link in the long chain of attacks over the years from egotistical teenagers trying to get a kick out of life without sticking...; Tags: Web Site, Attack, Web Site Development, Web Technology, Internet, Zack Whittaker; Blog posts 2008-07-23
McAfee debunks recent vulnerabilities in AV software research, n.runs restates its position: Several days after blogging about a research conduced by n.runs AG that managed to discover approximately 800 vulnerabilities in antivirus products, McAfee issued a statement basically debunking the number of vulnerabilities found, and providing its own account into the number of vulnerabilities affecting its own products : "A recent...; Tags: Software, McAfee Inc., Antivirus, Vulnerability, Vendor, Flaw, N.Runs, Dancho, Security, Viruses And Worms, Dancho Danchev; Blog posts 2008-07-23
News to know: Yahoo; VMware; Apple; DNS vulnerability: Notable headlines: Ryan Naraine: Vulnerability disclosure gone awry: Understanding the DNS debacle RIM ships fix for BlackBerry code execution bug Dancho Danchev: Georgia President's web site under DDoS attack from Russian hackers 75% of online banking sites found vulnerable to security design...; Tags: Apple iPhone, Google Inc., Larry Dignan, DNS, Yahoo! Inc., Vulnerability, Dana Blankenhorn, Health Care, Apple Inc., VMware Inc., App Store, Banking, Vertical Industries, Domain Names, Benefits, Healthcare, Security, Financial Services, Enterprise Software, Software, Internet, Human Resources; Blog posts 2008-07-23
75% of online banking sites found vulnerable to security design flaws: In a paper entitled "Analyzing Web sites for user-visible security design flaws" to be published at the Symposium on Usable Privacy and Security meeting at Carnegie Mellon University July 25, Atul Prakash and two of his doctoral students examined 214 financial institutions in 2006, finding that over 75% of all...; Tags: Bank, Online Banking, Flaw, Security, Financial Services, Dancho Danchev; Blog posts 2008-07-23
TTProtect (zip): TTProtect is an advanced software protection tool, it protect software against cracker. It absorb the advantages of the other protections, and adding own characteristics, use of a unique anti-tracking methods, make it difficult to debug protected application. TTprotect features Debugger Detection, Anti-Attached, Drx decoding, Code Chaos and confusion, Virtual Machine...; Tags: Software, TTProtect, Tools & Techniques, Management; Software downloads 2008-07-23
Element Browser (zip): Element Browser is a full featured, fast and Web standards compliant Web browser for the Microsoft Windows platform. It features a intuitive, modern ribbon interface with tools that are designed to simplify every day browsing tasks. Element Browser has been designed from the ground up to be one of the...; Tags: Web Browser, Element Software, Web Browsers, Viruses And Worms, Internet, Security; Software downloads 2008-07-23
Vantage Giga (zip): Suites large to enterprise organizations. Vantage Giga is a monitoring and reporting software that provides interactive reporting interfaces into key functions of Internet and network usage within organizations. Vantage can import and translate different types of log files, providing powerful, yet easy to use, drilldown analysis capabilities with a comprehensive...; Tags: Analysis, Organization, WebSpy, Vantage Giga, Internet; Software downloads 2008-07-23