CSOONLINE.com - Application Security

11 Microsoft Security Updates Due Next Week

Fri, 10 Oct 2008 04:00:00 GMT

Next week will be a busy one for system administrators as Microsoft is planning to ship 11 security updates -- four of them rated critical

PCI Application Security: Who's Guarding the Data Bank?

Fri, 10 Oct 2008 04:00:00 GMT

Ben Rothke and David Mundhenk offer compliance strategies for PCI's new application security requirements.

Clickjackers' Could Hijack Webcams, Microphone

Wed, 08 Oct 2008 04:00:00 GMT

Adobe issues a security advisory for Flash, but won't patch until later this month.

New Certification Aims to Secure Software Throughout Development

Joan Goodchild — Tue, 07 Oct 2008 04:00:00 GMT

New ISC2 certification targets practices and expertise that assess threats at the front end of the application development process, instead of after the damage is done.

Prominent Web Sites Found to Have Serious Coding Flaw

Tue, 30 Sep 2008 04:00:00 GMT

CSRF flaw observed in the wild

Clickjacking Vulnerability to Be Revealed

Tue, 30 Sep 2008 04:00:00 GMT

After shelving plans to detail a browser clickjacking vulnerability that is indirectly related to Adobe Systems' products at the company's request earlier this month, a security researcher plans to detail the flaw next month.

After Password Glitch, Firefox Patch Due Next Week

Robert McMillan — Fri, 26 Sep 2008 04:00:00 GMT

Mozilla hopes to release a Firefox 3.0.3 update early next week to fix a password bug affecting some users.

Hackers Resurrect Notorious Attack Tool Kit

Fri, 26 Sep 2008 04:00:00 GMT

Neosploit, thought dead three months ago, is behind PDF attacks, researcher says.

Researchers: Apple's Patch Process Stinks

Wed, 24 Sep 2008 04:00:00 GMT

Apple's patching process proves the company isn't serious about moving Macs into the enterprise, security researchers say.

Mozilla Patches 11 Firefox Bugs

Wed, 24 Sep 2008 04:00:00 GMT

Mozilla Corp. late Tuesday patched 11 vulnerabilities in Firefox 3.0, more than half of them labeled "critical," and fixed 14 flaws in the older Firefox 2.0.

Despite Threats, Companies Lag on Web 2.0 Security

Joan Goodchild — Tue, 23 Sep 2008 04:00:00 GMT

A new study finds organizations may let employees use Web 2.0 technology, but they don't have the proper security tools in place to protect them from the new threats these applications pose.

Grossman: YouTube/Google flaw, step by step

Sun, 21 Sep 2008 04:00:00 GMT

Web app security expert hijacks YouTube accounts

Hacker Posts QuickTime Zero-day Attack Code

Thu, 18 Sep 2008 04:00:00 GMT

The exploit went public just a week after Apple fixed nine other bugs.

Microsoft Launches New Security Approach

Wed, 17 Sep 2008 04:00:00 GMT

Microsoft will soon release tools and methods it has used over the last few years to reduce the number of security problems in its software.

At Adobe's Request, Hackers Nix 'Clickjacking' Talk

Robert McMillan — Wed, 17 Sep 2008 04:00:00 GMT

Two security researchers have cancelled an upcoming talk on clickjacking because it would have disclosed a critical Adobe bug.