Linux News: Exploits & Vulnerabilities

The Webification of App Security
September 03, 2009

Web applications are growing in popularity, and with this increasing ubiquity of Web apps, security is more than ever becoming the No. 1 challenge for enterprises. Traditional network component vendors are under pressure to solve security challenges. However, developing this capability on their own is complex, expensive and requires new skills.

Geolocation Data Could Lead Twitter to Treasure or Trouble
August 21, 2009

In a move that might finally open a moneymaking channel for the company, Twitter announced on Thursday that it will launch a geolocation feature as part of its microblogging service. It will also offer a new API so developers can add latitude and longitude data to any tweet. Developers will be given early access to the API.

Is There a Dark Cloud Over SSL's Green Glow?
August 19, 2009

The security of any given computer system is no better than the skills researchers bring to finding the next potential program flaw. Network security workers concentrate on updating patches and making sure only validated users can access the corporate LAN. Meanwhile, security researchers hunt for existing but unidentified infrastructure flaws that could let in the bad guys.

Can Microsoft Keep Its Word?
August 14, 2009

A Toronto company aptly named "i4i" is getting its revenge on Microsoft by kicking it square in the monkeymaker. i4i has sued Redmond, claiming that Microsoft Word infringes on its patents. Judge Leonard Davis of the U.S. District Court for Eastern Texas -- where else? -- has given Microsoft two months to halt sales of the offending software.

Another Day, Another DDoS Blitz for Twitter
August 13, 2009

For the second time in less than a week, Twitter has been hit by a distributed denial of service attack. Unlike the first attack last week, the latest cyberassault, which started on Tuesday, has been confined to Twitter so far -- Facebook has apparently not been affected.

IE6: Dead Browser Walking
August 12, 2009

Google's social network Orkut reportedly plans to phase out support for Internet Explorer 6, igniting a long-simmering debate over continued use of the 8-year-old version of the browser. The current version is IE8. Microsoft intends to maintain support for IE6 in conjunction with its support for Windows XP -- the OS that originally delivered it.

Taking FOSS Security Seriously
August 07, 2009

Code hunters are spotting with greater frequency defective coding that could open security holes in open source software. The Open Source Report 2008 and the Architecture Library Report, conducted by Coverity for the U.S. Department Homeland Security Cybersecurity Open Source Hardening Project, shows more than 10,000 defects fixed since project launch in March 2006.

Smart Meters and Security: Locking Up the Grid
August 06, 2009

Despite reports earlier this year about spies penetrating the computers that help control America's electrical grid, utility companies appear to be slow in clamping down on security, and that perception has led to a tongue-lashing from a House of Representatives committee.

Scammers Try to Hack Hackers With Crooked Cash Machine
August 03, 2009

Fooling with hackers is generally a very bad idea, but the scammers responsible for an apparent ATM grift in Las Vegas may not have been aware of that particular rule of thumb. The ATM scam happened during the Black Hat and Defcon security conferences last week, during which time the Las Vegas Strip was heavily populated with hackers well-versed in the many methods cyberthieves employ to rip off victims.

Apple Seals iPhone's SMS Security Leak
July 31, 2009

Could something as simple as an SMS text message turn your own smartphone against you, allowing a hacker to listen in on your private conversations or direct you to a malicious Web site? It can be done, according to security experts presenting their findings Thursday at the Black Hat security conference in Las Vegas.

Security Testers Spot Worrisome Weakness in SSL
July 30, 2009

Yet more Web security flaws have emerged to threaten Internet users, who are already bedeviled by the likes of drive-by attacks, SQL injections and spam. At the Black Hat security conference in Las Vegas, researchers reportedly demonstrated serious flaws in the Secure Sockets Layer encryption protocol, a commonly used method of protecting communications on the Web.

Mozilla Fixes Firefox JavaScript Glitch
July 17, 2009

Thursday marked yet another chapter in the short, rocky history of Mozilla's Firefox 3.5 browser, as the foundation released a security update a little more than two weeks after unveiling it. Firefox 3.5.1 fixes a JavaScript vulnerability in version 3.5 that exposed users to so-called drive-by attacks.

Cyberattack Defense: Staying One Step Ahead of Hackers
July 16, 2009

Describing cyberterrorism as a "weapon of mass disruption," President Barack Obama released in late May the findings of a 60-day cybersecurity review. The statistics told the ugly story: Last year alone, cybercriminals stole intellectual property from businesses worldwide worth up to $1 trillion.

ActiveX Shark Stalks IE Surfers
July 07, 2009

Microsoft has warned Web surfers that an unused ActiveX control in Internet Explorer could let hackers launch malicious code on the user's system if it's running an older OS like Windows XP or Windows Server 2003. Hackers have reportedly already begun exploiting the vulnerability, and security experts predict the attacks could get worse. Microsoft has posted a fix for the problem online.

China Scrambles to Repair Crumbling Green Dam
June 15, 2009

For years, China's government has kept the country's Internet surfers on a very short leash. Censors attempt to block any content considered immoral, which could be anything from pornography to politically charged blog posts. Its latest plan is to order the installation of filtering software directly into all personal computers.

Windows 7 Beta to Stay Alive Until July
May 26, 2009

Early adopters of Microsoft's next operating system won't face debilitating bi-hourly shutdowns or be forced to clean-install the release candidate until July 1, despite an email that went out over the holiday weekend setting a June 1 deadline. The date for the shutdowns to begin is actually July 1, a month before the Windows 7 beta program expires.