Vulnerability Research

Welcome to the 'Vulnerability Research' tag page at Technorati. This page features content from the farthest reaches of the Blogosphere that authors have "tagged" with 'Vulnerability Research'.

Latest blogosphere posts tagged “Vulnerability Research”

• Patch Tuesday heads-up: MS to fix critical IE, Office security holes

  
  Zero Day — Authority: 578
  Microsoft plans to release six security bulletins next Tuesday (December 8, 2009) to fix security flaws affected IE, Microsoft Office and the Windows operating system.
  16 hours ago

• Critical zero-day flaw found in Adobe Illustrator

  
  Zero Day — Authority: 578
  Adobes security response team is scrambling to deal with the release of exploit code for what appears to be a critical zero-day flaw in the Adobe Illustrator CS4 software product.
  16 hours ago

• Cache poisoning vulnerability in ISC BIND 9

  
  Zero Day — Authority: 578
  The vulnerability exists in the way BIND 9 handles recursive client queries that may cause additional records to be added to its cache.
  18 hours ago

• Beware of rigged PDF files on BlackBerry

  
  Zero Day — Authority: 578
  Hackers can use maliciously rigged PDF files to hack into corporate systems hosting the BlackBerry Attachment Service.
  2 days ago

• Clientless SSL VPNs expose corporate users to attacks

  
  Zero Day — Authority: 578
  This security problem, discussed since at least 2006, could let an attacker could use these devices to bypass authentication or conduct other web-based attacks.
  2 days ago

• Road Vulnerability

  
  husdal.com — Authority: 421
  Today we are going back in time, to one of the seminal articles in road vulnerability. Katja Berdica ’s 2002 article, An introduction to road vulnerability: what has been done, is done and should be done has laid the groundwork for many researchers, and has cited by not few authors since it was first published. ...
  1 week ago

• “Nozzle” counteracting ‘heap spraying’ memory exploits

  
  D' Technology Weblog — Authority: 546
  The goal of any attack’s to get targeted computer to run exploit code supplied by the attacker. To achieve this, two things must happen: code must end up on computer, and computer must run that code. The earliest type of memory exploit took advantage of buffer-stack overflows. The newest, most popular weapon of ...
  1 week ago

• MS Finds Security Flaw In Google Chrome Frame

  
  IT Professionals Database (ITPD) - The European IT Professionals Database Networking Platform — Authority: 146
  Christmas Shopping writes with this excerpt from Kaspersky Labs threatpost: "Back in September, when Google launched the Google Chome Frame plug-in for Internet Explorer users, Microsoft immediately warned that the move would increase the attack surface and make IE users less secure. Now comes word that a security ...
  2 weeks ago

• Inside the Google Chrome OS security model

  
  Zero Day — Authority: 578
  Google will use a combination of system hardening, process isolation, verified boot, secure auto-update and encryption that thwart malicious hackers from attacking its new Google Chrome OS.
  2 weeks ago

• Malicious Java Applet Poses as Carrie Prejean Video

  
  McAfee Avert Labs — Authority: 491
  McAfee Labs has observed various spam runs exploiting the recent sensational Carrie Prejean news . The Prejean video is rapidly becoming one of the most searched-for topics ever on the net since the existence of the tape became common knowledge. Source: Google Trends Java applets provide everything from ...
  2 weeks ago

• Mozilla locks out rogue Firefox add-ons

  
  Zero Day — Authority: 578
  Mozilla has made a significant tweak to this Firefox 3.6 code base to block rogue add-ons from loading in the browsers application components directory.
  2 weeks ago

• Microsoft confirms detailed Windows 7 exploit

  
  Zero Day — Authority: 578
  Exploit code for the vulnerability was released by researcher Laurent Gaffié after failed attempts to get Microsofts security response center to acknowledge that this was an issue that needs to be patched.
  2 weeks ago

• Apple Safari exposes Windows to drive-by download attacks

  
  Zero Day — Authority: 578
  A high-priority Safari update patches vulnerabilities that allow remote code execution (drive-by downloads) if a user simply surfs to a maliciously rigged Web site.
  3 weeks ago

• Microsoft Plugs "Drive-By" and 14 Other Holes

  
  IT Professionals Database (ITPD) - The European IT Professionals Database Networking Platform — Authority: 146
  CWmike writes "Microsoft today patched 15 vulnerabilities in Windows, Windows Server, Excel, and Word, including one that will probably be exploited quickly by hackers. None affects Windows 7. Of todays 15 bugs, Microsoft tagged three critical and the remaining 12 important. Experts agreed that users should focus on ...
  3 weeks ago

• Critical: Beer Distribution

  
  husdal.com — Authority: 421
  I’m not in the habit of making Friday a day for funny blog posts, but today’s article highlights a very interesting issue: Beer distribution is a sector that will be highly affected by a supply chain distribution…in the UK. You could even say that beer distribution is part of the UK critical infrastructure. At ...
  4 weeks ago

• Adobe Shockwave haunted by critical security holes

  
  Zero Day — Authority: 578
  Adobe today released a patch to fix several serious security flaws in its Shockwave Player software. The most serious flaw could allow remote code execution attacks against Windows and Mac users.
  4 weeks ago

• Firefox hit by multiple drive-by download flaws

  
  Zero Day — Authority: 578
  Mozillas flagship Firefox browser is vulnerable to at least 11 "critical" vulnerabilities that expose users to drive-by download attacks that require no user interaction beyond normal browsing.
  5 weeks ago

Comments about Vulnerability Research