Vendors/Products - Page 22
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
The PHP Group released PHP 5.4.3 and PHP 5.3.13 on Tuesday to address two remote code execution vulnerabilities, one of which is being actively exploited by hackers.
Soon, users running Firefox 3.6.x will start being automatically upgraded to the current version 12.0 release of the open source web browser. The plan to auto-update these users has been being discussed since the end of March, when Mozilla Release Manager Alex Keybl proposed the move on a Mozilla planning discussion thread.
Along with new versions of the Firefox web browser, Mozilla has published updates to Thunderbird and SeaMonkey, but they introduce relatively few new features or changes.
The developers of the popular open source blog engine WordPress have released a security update for the software. WordPress 3.3.2 fixes unspecified bugs in three external file upload libraries used in the software and other security problems with the application.
A new security tool developed by Department of Energy engineers is designed to give security and IT administrators the ability to more quickly identify and respond to an issue on the network.
A spate of hacking tools infected with malicious software, or malware, threatens to destroy the credibility of the growing hacktivist movement, writes Adam Turner.
Two weeks after its last security update, the Joomla! project has published another update to the 2.5.x branch of its open source content management system (CMS) which addresses two vulnerabilities. Version 2.5.4 of Joomla! closes an information disclosure hole that allowed unauthorised access to administrative information and fixes a problem that could have been exploited by an attacker to conduct cross-site scripting (XSS) attacks. Versions 2.5.0 to 2.5.3 are affected.
Pastebin.com has promised to police content on its site more tightly by hiring staff to delete data dumps and other sensitive information more quickly.
Over a year ago, a little Firefox add-on program called Firesheep showed just how easy it was to snoop on people on the same Wi-Fi network. Since then, more and more Web sites, like Facebook and Twitter, are securing their Web sites by default. Now, Google is continuing its own push into making its search sites more secure.
It's that time again folks, the hosting of the Pwn2Own hacking contest. This year has, for the first time, seen Google's Chrome browser fall almost immediately to two zero-day exploits, which had avoided discovery for the past three years.
The eyes of the online world are on Joe Sullivan. As the CSO of Facebook, Sullivan is without a doubt one of the most visible security chiefs in the business. He must mitigate myriad security and privacy risks not only for Facebook's employees and corporate systems, but also for the social network's 800 million members.
The PostgreSQL development team has published updates for all actively supported branches of its open source relational database to fix bugs and close security holes found in the previous releases.
Oracle is offering Red Hat Enterprise Linux customers a 30-day free trial of its Ksplice zero-downtime security patch technology, in an apparent move to tempt them into switching to its own Oracle Linux platform.
As part of its bug bounty program, Google doled out $6,837 to purchase the rights to information on the Chrome security vulnerabilities. Google has shipped another Chrome browser update to fix several gaping security holes.
It turns out that stealing someone's Google Wallet funds isn't that much more difficult than stealing that person's actual wallet, according to a few recently publicized exploits. "I think these types of vulnerabilities threaten to kill the adoption of NFC before it is even fully born," said the Yankee Group's Carl D. Howe. "All forms of mobile payment rely on being able to trust the payment system."
Google plans to remove online certificate revocation checks from future versions of Chrome, because it considers the process inefficient and slow. Browsers currently check if a website's SSL certificate has been revoked by its issuing Certificate Authority (CA) when trying to establish an HTTPS connection.
From the start, Google's Safe Browsing API was designed to spot malicious web pages so users wouldn't get trapped in them. Google identifies these sites through its own algorithms and user notification.
The PHP developers are working to fix a critical security vulnerability in PHP that they introduced with a recent security patch. The current stable release is affected; however, it is not yet clear whether the questionable patch was also applied to older versions.