IIS flaw under investigation by Microsoft
News Once it is done with its investigation, Microsoft said, it will decide how to address the matter, which could include a security update as part of its monthly Patch Tuesday or an out-of-cycle update. Microsoft on Monday said it is looking into a...
[September 1, 2009, 15:15]
Another third-party Windows fix released
News On Tuesday Microsoft rushed out a fix for the VML flaw, which was also being exploited in attacks and for which ZERT also released a patch. The group, calling itself the Zeroday Emergency Response Team, or ZERT, created the patch so Windows users...
[October 2, 2006, 9:10]
Apple releases QuickTime security update
News This security update complements an earlier bug patch for QuickTime 7.1.6 released by Apple on 1 May, 2007. Apple released a security update for QuickTime 7.1.6 on Tuesday, further removing a vulnerability first used by a security researcher in...
[May 30, 2007, 13:41]
Microsoft considers taking admin rights from employees
News Patch Tuesday There is a programme whereby some Microsoft customers get the patch slightly earlier than the rest of the world. As Microsoft moves its internal desktop systems to Windows Vista, the company is contemplating whether to change a long...
[May 30, 2006, 10:15]
Apple flaw targeted by exploit code
News Attack code that exploits a flaw in Apple’s Mac OS X was publicly released on Wednesday, increasing the urgency to patch. On Tuesday, Apple delivered Mac OS X 10.4.7. This proof of concept was fixed in Tuesday's Mac OS X 10.4.7 update," the...
[June 30, 2006, 10:00]
F-Secure exploit patched
News F-Secure has released a patch for a serious flaw in its antivirus products, the second time in a week a security company has warned of a risk in its software. ISS gave us details of how it could be done, and we created a patch.
[February 14, 2005, 8:25]
EDS tests security update tool
News The patch management piece is now in pilot testing and will be available generally by the fourth quarter of this year, EDS said. EDS said its patch management service enables businesses to know which computers have been updated with appropriate...
[July 15, 2004, 8:00]
Microsoft to fix zero-day XML flaw
News Additionally, the company appears to have no patch ready for a flaw in Visual Studio 2005, which is also already being used in attacks. Microsoft on Tuesday plans to issue six security bulletins, including at least one with a fix for a security...
[November 10, 2006, 8:51]
Back Orifice problems lead to pain for Snort
News Sourcefire has issued a patch, Snort version 2.4.3, to address the problem. The exploit code, published on the Web by FrSirt on Tuesday, demonstrates how vulnerabilities in a Snort sensor designed to detect an exploit tool called Back Orifice can...
[October 27, 2005, 9:45]
Microsoft plans critical Christmas patches
News As part of its monthly patch day, Microsoft also plans to release an updated version of the Windows Malicious Software Removal Tool. As part of its monthly patching cycle, Microsoft plans to release on Tuesday two security bulletins with fixes for...
[December 9, 2005, 9:10]
Attackers exploit 'extremely critical flaw' in Word
News Microsoft has not yet issued a patch for the vulnerability, and users are advised to forgo opening untrusted documents. An "extremely critical flaw" in Microsoft Word 2000 is currently being exploited by malicious attackers, which could lead to...
[September 5, 2006, 17:00]
Exclusive: Pocket PC glitch means few readable e-books
News While Microsoft is expected to address the issue soon, with at minimum a software patch, users of Pocket PC-based units are essentially out of luck when it comes to being able to read certain e-books on their handhelds.
[August 8, 2000, 8:59]
Mozilla patches Firefox flaw
News The Mozilla Foundation issued a patch for a major security flaw in its Firefox browser on Wednesday and advised people to update their software. The Mozilla Foundation released version 1.02 of Firefox on Wednesday to fix the problem and asked that...
[March 24, 2005, 8:30]
OpenSSH patches second specialised flaw
News Information on the latest flaw and a link to the latest patch can be found on the OpenSSH Web site. The open-source project for secure communications technology, known as OpenSSH, plugged a second security hole on Tuesday that affects only users...
[September 24, 2003, 15:25]
Critical Office flaw to be patched
News As part of its monthly patch day, Microsoft also plans to release an updated version of the Windows Malicious Software Removal Tool. As part of its monthly patching cycle, Microsoft plans to release on Tuesday two security bulletins with fixes for...
[March 10, 2006, 12:45]
PDF reader flaw fixed
News Adobe Systems joined Microsoft on "Patch Tuesday" and delivered fixes for two security flaws in the ubiquitous Adobe PDF reader software. The vulnerabilities affect Adobe's Acrobat and Reader software for both the Windows operating system and Apple...
[July 13, 2006, 9:45]
Apple patches OS X
News Apple released a software patch on Tuesday to fix seven vulnerabilities in its Mac OS X operating system. The fix repairs flaws in the Safari browser, the Mail program and the ColorSync utility as well as four open source programs, the computer...
[January 26, 2005, 8:05]
Firefox 3.5.4 plugs security holes
News Mozilla released Firefox 3.5.4 for Windows, Mac, and Linux on Tuesday to patch six critical security holes and some other problems. The new browser version also improves stability and fixes a problem with clearing browser history, according to the...
[October 29, 2009, 8:48]
Tackling Microsoft's August patches: Part 1
News For August's Patch Tuesday, Microsoft released a dozen security bulletins, rating nine as critical threats. The remaining three are important threats. With that many updates in a single month, how do you know which ones to concentrate on first?
[August 22, 2006, 12:20]
Microsoft patches seven holes
News As part of its monthly patch cycle, Microsoft on Tuesday released fixes for six security holes in Office and one flaw in Windows. Five of the six vulnerabilities in Office are specific to Excel. The most serious flaws could allow an attacker to...
[March 15, 2006, 8:45]



