- Mythbuster busts his own tale
- 10 open source companies to watch
- Sony recalls 73,000 Vaio laptops
- Tool to evade China's Web censorship
- Chrome and Firefox and add-ons
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:App Performance | On Demand Security | Networking Solution | SOA | Value of WDS
Jason Meserve provides up-to-the-minute news on vendor security alerts and fixes.
Apple patches 25 Mac OS X security vulnerabilities
Apple Tuesday issued its fourth security Mac OS X update of the year, patching 25 vulnerabilities, nearly half of them considered
critical. The company also updated Safari for the Mac to plug a hole already fixed in the Windows version of the browser and
released an update to bring the OS to version 10.5.4. Computerworld, 07/03/2008.
Apple advisory
**********
Mozilla patches 13 bugs in Firefox 2
After patching its older Firefox 2.0 yesterday to quash 13 bugs, Mozilla Corp. announced that it would end support for the
browser in mid-December. Firefox 2.0.0.15 addresses 13 vulnerabilities, five of which the open-source company rated "critical,"
according to advisories posted on Mozilla's site Tuesday. Of the remaining bugs, four were labeled "high," two as "moderate,"
and two as "low." Computerworld, 07/02/2008.
After reading the highlights of this survey ("Study: Unpatched Web browsers prevalent on the Internet"), it's important to update Firefox 2.0 browsers as soon as possible.
**********
Two new updates from Gentoo:
Python (multiple integer overflows, code execution)
Motion (multiple flaws, code execution)
**********
Two new fixes from rPath:
wireshark (denial of service, information disclosure)
mercurial (authenication bypass, file overwrite)
**********
Two new patches from Ubuntu:
Samba (regression error)
**********
Today's malware news:
Trojan lurks, waiting to steal admin passwords
The criminals behind the Coreflood Trojan are using the software to steal banking and brokerage account usernames and passwords.
They've amassed a 50G-byte database of this information from the machines they've infected, according to Joe Stewart, director
of malware research with security vendor SecureWorks. IDG News Service, 07/01/2008.
F-Secure warns against new, efficient malware
Watch out for the newest generation of malware that is difficult to crack and efficient, warns antivirus firm F-Secure. Computerworld,
07/01/2008.
**********
From the interesting reading department:
Clear Choice Test: Security management tools come up short
After 10 years on the market, products should be better at reporting, usability and advanced correlation features. Network
World, 06/30/2008.
Jason Meserve is multimedia editor at Network World.

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
The ROI and TCO Benefits of Data Deduplication for Data Protection in the EnterpriseThis paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...
Harnessing the power of communications to increase workplace performanceDue to the convergence of IT and telecommunications technologies, the business workplace has been...

We have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment