Adobe ships critical PDF Reader, Acrobat patch

Tuesday, June 24th, 2008

Adobe has shipped a critical update to patch a code execution vulnerability affecting multiple versions of its Reader and Acrobat products. According to Adobe’s advisory, the flaw “could potentially allow an attacker to take control of the affected system.” If you have Adobe Reader or Acrobat installed on your machine, this update ...

Firefox 3 suffers its first vulnerability

Wednesday, June 18th, 2008

Less than one day after its launch, Firefox 3 has a vulnerability. According to Tipping Point's Zero Day Initiative, the vulnerability, which it rates as critical, was reported within the first five hours of Firefox 3's release. "Once the vulnerability was verified in TippingPoint's DVLabs and acquired from the researcher, the vulnerability ...

Internet-connected coffee maker has security holes

Tuesday, June 17th, 2008

An Australian man has discovered security vulnerabilities in his Internet-connected coffee maker that could allow a remote attacker to not only take over his Windows XP-based PC but also make his coffee too weak. Craig Wright, a risk advisory services manager at professional services firm BDO, found several security holes, including ...

Security Bonuses for Vista Programmers

Monday, June 16th, 2008

In this era in which software, especially prominent software, must be presumed to be under attack, you need the best tools to defend yourself. Much has been made of security features built into Windows Vista, such as IE Protected Mode, which accrue to all users. However, programmers can easily gain ...

Details emerge of Safari “carpet bomb” flaw

Monday, June 16th, 2008

The vulnerability known as the Safari carpet bomb has still not been fixed, despite Microsoft releasing a security update for Internet Explorer last Tuesday evening. The consensus is that Microsoft's browser is the main cause of the problem, which can create a security hole in combination with Apple's Safari. When Internet ...