Hackers find new crack in Windows

Saturday, December 20th, 2008

Microsoft Corp. rushed out an emergency patch Wednesday to fix a major security flaw in its Internet Explorer Web browser that has allowed hackers to infect millions of computers with viruses and steal personal information. So far, the vulnerability has not led to the widespread infections common a few years ago. ...

Firefox Issues Eight Patches

Wednesday, December 17th, 2008

Mozilla has issued eight patches for its Firefox Web browser, three of which fix problems classified as critical. The patches come after security experts have recommended using a browser other than Microsoft's Internet Explorer 7 and older versions of IE due to a dangerous vulnerability. Microsoft is due to release an ...

WP-DB-Backup Leaves Your Data Exposed on the Internet

Sunday, December 14th, 2008

Older versions of the popular Wordpress plugin WP-DP-Backup leaves the copy of your entire database in a public folder for all to see.  The databases were stored in wp-content/backup/ and a quick Google search today still returns many databases of sites, including some as recent as a few days ago: http://www.google.com/search?num=100&hl=en&suggon=0&safe=off&q=intitle%3A%22index+of+%2Fwp-content%2Fbackup%22&btnG=Search For ...

All Internet Explorer Versions Have Hole

Saturday, December 13th, 2008

The unpatched bug in Internet Explorer 7 (IE7) that hackers are now exploiting also exists in older versions of the browser, including the still-widely-used IE6, Microsoft Corp. said. Friday, a Danish security researcher added that Microsoft's original countermeasure advice was insufficient, and recommended users take one of the new steps the ...

Google Chrome Puts Security in a Sandbox

Thursday, December 11th, 2008

The Google Chrome browser is no longer a beta, and has been outfitted with a coat of security armor Google hopes will both protect users and help Chrome compete with rival browsers. The toughest piece of that armor involves sandboxing. In Chrome, HTML rendering and JavaScript execution are isolated in their ...