Tag: microsoft

  • Patch Tuesday sees serious DNS flaws fixed

    Nothing marked critical, but some very important patches issued. Microsoft ‘s latest ‘Patch Tuesday’ round of security updates for once contains no bulletins marked as ‘critical’, but some of the four updates labelled ‘important’ address major issues posing serious threats to web users worldwide. Two of the patches fix problems with Exchange Server and Windows…

  • Microsoft releases latest Patch Tuesday fixes

    7 vulnerabilities, 3 critical, addressed in June security update. Microsoft has issued its monthly ‘Patch Tuesday’ set of security fixes, with seven separate areas covered of which three are flagged as ‘critical’ and could expose vulnerable systems to remote code execution. The most serious areas affected are the DirectX multimedia system, the Windows Bluetooth stack,…

  • Microsoft increases pressure on Apple to fix Safari blended threat

    ‘Carpet bombing’ vulnerability more serious than Apple claims, MS warns. Microsoft , whose Internet Explorer has come under frequent criticism for security vulnerabilities, has issued a security advisory alerting users of arch-rival Apple ‘s Safari browser to a potential security threat. The issue is a blended threat which combines quirks in both the Apple browser…

  • Latest Patch Tuesday update released

    Microsoft announces five ‘critical’ vulnerabilities need fixing. Microsoft has issued its monthly ‘Patch Tuesday’ security bulletin, with five ‘critical’ and three ‘important’ patches made available. The more serious flaws are vulnerabilities in MS Project and the scripting engines for VBScript and JScript , problems with ActiveX and GDI , and the usual cumulative update fixing…

  • Access flaw exploited via Word

    Microsoft’s employees hunting vulnerabilities instead of Easter eggs. A buffer overrun vulnerability in Microsoft ‘s Jet Database Engine , the underlying database behind Microsoft Access among others, is currently being used in a limited number of targeted attacks. The victim is sent two files as an email attachment, possibly combined in a ZIP file, one…

  • Microsoft acquires Komoku

    Anti-rootkit software to become part of Forefront and OneCare. Just before Easter, Microsoft announced it had acquired Komoku , a Maryland-based company that builds anti-rootkit software. Komoku was founded in 2004 and quickly became one of the leaders in the area of rootkit detection. Among its customers are the American ministries of Homeland Security and…

  • Latest Patch Tuesday release

    March’s Patch Tuesday sees four ‘critical’ updates. Microsoft has released its monthly ‘Patch Tuesday’ security bulletin. This month the bulletin features four ‘critical’ updates, all of which apply to different components of the Office suite of products, and all of which fix vulnerabilities that allow remote code execution on a machine running the affected software.…

  • ‘Olympic’ emails contain malicious XLS attachments

    Malware writers sprint to use vulnerabilities before next Patch Tuesday. Security researchers have reported seeing emails containing XLS attachments designed to exploit a yet unpatched vulnerability in several versions of Microsoft ‘s Excel software. The attachment, which purports to contain information about this summer’s Olympic Games in Beijing, leaves a trojan on the user’s computer.…

  • IE8 to include malware filtering

    New features list includes upgrade to security provision. The next version of Microsoft ‘s Internet Explorer web browser, IE8 , could include malware detection as standard, in an improvement to the current phishing filter provided in IE7 . Details of a range of new additions to the browser accompanied the recent beta of IE8 ,…

  • Vista SP1 clashing with AV products

    Service Pack causing issues for several security suites. Microsoft has released details of several software products that are known to have problems running in conjunction with Service Pack 1 for its Vista operating system. The list includes several security products, including BitDefender 10 , BitDefender Internet Security 10 , Trend Micro Internet Security 2008 ,…