Security Software

Java 7 Update 25 fixes 40 security issues, turns on certificate revocation checking

Some of the fixed vulnerabilities also affect sever deployments of Java

Shootout results: Best security tools for small business

Check Point comes out on top; Kerio, WatchGuard, Cyberoam and Sophos score high in review of unified threat management (UTM) devices

Microsoft patches critical IE vulnerabilities and actively exploited Office flaw

Patching the vulnerabilities in IE and Office should be a priority, security researchers said

New backdoor malware ‘KeyBoy’ used in targeted attacks in Asia, researchers say

The malware steals credentials and allows attackers to execute commands on infected computers, researchers from Rapid7 said

Bill aims to discourage nations from sponsoring cyberattacks

The new legislation would deny US visas to cyberattackers sponsored by foreign governments

Researchers find Java users woefully tardy on patching

Half of users running version two-years-old or older

Cyberespionage campaign ‘NetTraveler’ siphoned data from hundreds of high-profile targets, researchers say

The operation compromised government institutions, companies and activists from around the world, researchers from Kaspersky Lab said

Defending against exploit kits

Oracle reveals plans for Java security improvements

The company will make changes that suggest it's listening to feedback from the security research community

Software vendors should respond to actively attacked vulnerabilities within seven days, Google says

Vendors should issue fixes or at least mitigation advice for zero-day flaws within a seven-day time frame, Google security engineers say