SEARCH RESULTS
 
Showing 1-10 of 267 records
 
Expand article

Reversing a Security Patch with Automated Exploits

2008-05-06 20:10:09 by Editor in IT Security - The IT Security Industry's Web Resource
 
...patch for the vulnerability is released. Since many dont know about vulnerabilities until a patch comes out, and many people dont apply patches immediately, the new information gives hackers an extra in, into the systems Hackers exploit this period of time - the so-called patch window - to launch attacks against unpatched machines. Typically,...
 
Tags: patch, phenomena hackers, hackers, hackers exploit, apply patches immediately, patch window, exploits, patches, exploit
 
 
 
 
Expand article

Oracle behind Microsoft on patch management, says database expert

2008-03-13 13:00:00 by Editor in Computerworld Security News
 
People may have laughed at Microsoft's Trustworthy Computing project back in the early days, but the company's demonstrated true leadership on the patch front -- unlike, say, Oracle, which lags five years behind it on patch management, according to one expert
 
Tags: patch management, oracle, patch front, microsoft, true leadership, expert, unlike, lags, project
 
 
 
 
Expand article

Massive Coordinated Patch Effort To DNS System Flaw

2008-07-08 17:56:25 by Editor in Cheap Hack
 
...patch in today's Microsoft monthly patches wasn't just a Microsoft problem. It was part of a coordinated effort to patch numerous DNS servers for a series of problems that are common to DNS implementations. The US-Cert advisory on the problem describes three problems which, research has shown, can be combined into effective spoofing attacks...
 
Tags: microsoft monthly patches, microsoft, dns servers, isc bind, isc, servers, attacks, internet systems consortium, status
 
 
 
 
Expand article

Massive Patch Effort Coordinated for DNS System Flaw

2008-07-08 17:56:25 by Editor in Cheap Hack
 
...patch in the July 8 set of Microsoft monthly patches wasn't just a Microsoft problem. It was part of a coordinated effort to patch numerous DNS servers for a series of problems that are common to DNS implementations. The US-CERT advisory on the subject describes three problems that, research has shown, can be combined into effective spoofing...
 
Tags: microsoft monthly patches, microsoft, dns servers, isc bind, isc, servers, attacks, internet systems consortium, status
 
 
 
 
Expand article

Apple's patch fails to fix DNS flaw, researchers claim

2008-08-01 13:00:00 by Editor in Computerworld Security News
 
Apple issued patches for 17 vulnerabilities in Mac OS X, including one meant to fix a critical bug in the Internet's Domain Name System. But according to researchers, the DNS patch didn't actually patch anything, at least on the client side
 
Tags: patch, dns patch, fix, apple, researchers, critical bug, internet, system, client
 
 
 
 
Expand article

Massive Patch Effort Coordinated for DNS System Flaw

2008-07-08 17:56:25 by Editor in Cheap Hack
 
...patch in the July 8 set of Microsoft monthly patches wasn't just a Microsoft problem. It was part of a coordinated effort to patch numerous DNS servers for a series of problems that are common to DNS implementations. The US-CERT advisory on the subject describes three problems that, research has shown, can be combined into effective spoofing...
 
Tags: microsoft monthly patches, microsoft, dns servers, isc bind, isc, servers, attacks, internet systems consortium, status
 
 
 
 
Expand article

Patch Tuesday haul nets 11 fixes

2008-08-14 00:00:00 by Jason Meserve in Network World on Security
 
...Patch Tuesday brought the largest haul of patches in quite some time and included another fix for the company's WSUS patch management tool for businesses. A previous fix in July didn't fix the initial problem entirely, so a second update was required. VMWare users also have a bevy of patches to install, particularly the users that woke up to...
 
Tags: previous fix, fix, software bug, monthly patch tuesday, users, bug, vmware users, java implementation, nokia series
 
 
 
 
Expand article

Microsoft Releases Emergency Patch For Critical Windows Vulnerability

2008-10-24 01:01:14 by CyberInsecure in CyberInsecure.com
 
Microsoft has released an out-of-band patch to fix an extremely critical vulnerability that exposes Windows users to remote code execution attacks. The emergency update comes just one week after the regularly scheduled Patch Tuesday and follows the discovery of a targeted zero-day attack, Microsoft said in an advisory. The vulnerability is rated...
 
Tags: vulnerability, windows, critical, extremely critical vulnerability, microsoft, exposes windows users, patch tuesday, zero-day attack, emergency
 
 
 
 
Expand article

Patch For Android Security Flaw Released By Google And T-Mobile

2008-11-05 02:30:58 by CyberInsecure in CyberInsecure.com
 
During the weekend, Google has started issuing a patch to tighten up a well-publicized security hole in its Google Android mobile operating system. The patch is being pushed out to users in the form of a system update and users are given a choice to update now or later. The flaw and the PoC were
 
Tags: google, google android mobile, patch, system, users, flaw, security hole, weekend, poc