When it comes to updating security threats and bugs in their operating systems, Microsoft is, for the most part, pretty good about it. True, there are threats here and there that get overlooked, but eventually,... More...

If you're attempting to take some cash out from an ATM in East London this week then the question "some moolah for ya sky rocket?" may be greeting you shortly. Confused? You might well be,... More...

Google Maps street view is a massive undertaking by Google. The idea of bringing a street level view to almost every major road in the country is nothing to scoff at and then to... More...

Security Researcher Aditya K Sood is alleging that Yahoo was at risk from a pair of critical phishing and redirection vulnerabilities. According to Sood, the first vulnerability could have allowed certain specific URLs linked on... More...

Apple has slammed the door shut on denial-of-service attacks and a security bypass that Type 0 routing headers in IPv6 let in. The company on June 20 put out an update, Mac OS X 10.4.10,... More...

The Academic Advising Center of the University of Colorado's College of Arts and Science made the mistake of not applying a patch to its Symantec Corporation anti-virus management console which resulted in the compromise of... More...

Apple Incorporated has released a fix on its website for its wireless networking hub (AirPort Extreme Base Station with 802.11n) that addresses a flaw that permitted incoming connections through the Wi-Fi hub, and another security... More...

Researchers at eEye Digital Security of Aliso Viejo, California, say they have found a flaw in Microsoft's newly released Office 2007 software whose risk-level is described as "high" since it could let an attacker run... More...

Microsoft has confirmed an issue with the Windows Vista Speech Recognition feature. An issue has been identified publicly where an attacker could use the speech recognition capability of Windows Vista to cause the system to... More...

The update fixes a vulnerability, which was disclosed in November as part of the Month of Kernel Bugs campaign, that affects both the server and client versions of Mac OS X, Apple said in its... More...

Adobe Systems has issued updates to fix security flaws in its Reader and Acrobat software that Secunia rated as "highly critical". An attacker could remotely commandeer a computer via vulnerabilities in Adobe Reader, Acrobat... More...

A security flaw in Google's search appliances could expose Web sites that use the products to information-stealing phishing attacks, experts warned Monday. The Google Search Appliance and Google Mini are used by organizations including banks... More...

Microsoft is investigating reports of a vulnerability in a Windows ActiveX control that could allow an attacker to remotely take control of a computer. One security company rated the vulnerability critical, while Microsoft said it... More...

Skype on Tuesday issued an update that fixes a serious security flaw in its Internet telephony software for Apple Computer's Mac OS X. A vulnerability exists in the way Skype for Mac handles Web links,... More...

Yahoo said it has fixed a security vulnerability in its Yahoo Mail service that could have allowed malicious hackers to hijack accounts and harm users in a variety of ways. "We have developed a fix... More...

The first wave of malicious attacks against the MS06-040 vulnerability is underway, using malware that hijacks unpatched Windows machines for use in IRC-controlled botnets. The attacks, which started late Aug. 12, use a variant of... More...

Detailed exploit code for a critical Windows worm hole has been published on the Internet, putting millions of users at risk of PC takeover attacks. The code, which was posted to the Milw0rm Web site,... More...

Security vulnerability discoveries were reported last February to D-Link and surprisingly they still have not been fixed yet! The vulnerability allows remote code to be executed through the routersfirmware potentially leaving affected customers vulnerable to... More...

Secunia published an advisory on Tuesday stating that an error could be exploited to fake the address bar in a browser window. This tactic could be used in phishing scams that attempt to trick people... More...

A bug discovered in an operating system that runs the majority of the world's computer networks would, if exploited, allow an attacker to bring down the nation's critical infrastructure, a computer security researcher said Wednesday... More...

Microsoft is developing a patch for a newly discovered security flaw in versions of Windows XP which poses a particular threat to computers running XP Media Center edition. The flaw is in Windows Remote Desktop... More...

One week after confirming a code execution flaw in its flagship Internet Explorer browser, Microsoft has shipped a "killbit" package to disable the affected control, javaprxy.dll. The killbit, also known as a registry key update,... More...

Microsoft late Thursday confirmed a security flaw in its dominant Internet Explorer browser could be potentially exploited by malicious hackers to take "take complete control of the affected system." The software giant released a security... More...

Firefox has unpatched "extremely critical" security holes and exploit code is already circulating on the Net, security researchers have warned. The two unpatched flaws in the Mozilla browser could allow an attacker to take control... More...

Digital media delivery outfit RealNetworks Inc. on Wednesday released patches for a high-risk security flaw in several versions of its widely deployed RealPlayer software. The Seattle, Wash.-based company said the flaw could allow an attacker... More...

Apple has still not properly fixed the HFS+ filesystem named fork vulnerability discovered last week, according to the company that first noticed it, NetSec. The fix put out by the company at the end of... More...

US-CERT on Wednesday warned of a fresh hole in Internet Explorer that could allow attackers to take control of a PC via an HTML e-mail message or a malicious Web page. The flaw is all... More...

Search engine darling Google Inc. has patched a hole in its search engine the could have allowed malicious hackers to modify the content of the Google search results page or silently modify search results, but... More...

Deutsche Telekom this week was forced to suspend all activities of its Online Business Service Operation Centre (OBSOC), a German version of the Microsoft's Passport system, which enables customers to order and pay for online... More...

A new security hole has been found in Linux. All it takes is a C program and shell access (to upload and run the program). Not only did this young program find the bug,... More...

A critical hole in Apple Computer Inc.'s QuickTime media player has been identified and is waiting on a patch from the vendor. The vulnerability rated at "high severity" by eEye Digital Security -- the company... More...

A security vulnerability exists in Microsoft Virtual PC for Mac. The vulnerability exists because of the method by which Virtual PC for Mac creates a temporary file when you run Virtual PC for Mac. An... More...

A security hole in Microsoft Corp.'s Internet Explorer could prove devastating. Following the exposure of a vulnerability in Windows XP earlier this week, "http-equiv" of Malware has revealed that Explorer 6 users (and possibly users... More...

Apple Computer has issued a security update that, among other fixes, closes a hole in Mac OS X that could have allowed hackers to take control of a computer under particular circumstances. The patch, which... More...

IF AND WHEN AMD'S new AthlonFX "Thorton" goes on sale - and it's not yet certain if that name is anything other than a marketing doodle, it's unclear where the chip wil fit in the... More...

Programmers disclosed a security hole this week in a part of the heart of the Linux operating system that could let users of a machine take it over even if they don't have privileges to... More...

A flaw in Sun Microsystems' Web server software could allow hackers to gain control of Web sites, a security consulting company warned. Cambridge, Mass.-based @Stake issued a bulletin late Thursday on the vulnerability... More...

Microsoft on Friday raised its threat rating for a security flaw in its Internet Explorer browser to "critical," in response to criticism of its initial assessment of the hole's danger. A... More...

New KDE binary RPMs have been released, as promised, with a fix for the SSL certificate vulnerability affecting Windows and Konqueror. KDE 3.0.3 primarily provides stability enhancements over KDE 3.0.2, which shipped in early July... More...

A security hole in the widely used Macromedia Shockwave Flash file format used with Web browsers can allow an attacker to execute code of their choice on affected systems, according to a new security alert... More...

Thanks creamhackered who spotted this one! Millions of UK internet users could face a huge slowdown in service next week after Dutch firm KPNQwest, which handles almost half of Europe's internet traffic, went bankrupt. ... More...

In January 2002, a hole was discovered in the AOL Instant Messaging client. After many attempts to contact AOL about the hole, w00w00 (the group who discovered the hole) eventually managed to... More...

HACKERS CAN POTENTIALLY exploit a format string vulnerability in remote wall requests in order to execute arbitrary code in Solaris, Sun Microsystems version of the Unix operating system, security experts have warned. Sun... More...

Online auction powerhouse eBay Inc. closed a security hole in a password-maintenance feature late Tuesday that could have allowed attackers to take over a user's account and commit fraud. The vulnerability existed in the... More...

Thanks Don Williams for the heads up. The recent exploit allowing hackers to bypass the country, state and zip code part of the password reset feature in Hotmail has been fixed. Hackers used... More...

I spotted this on 3DSpotlight.com. It seems this page was made to expose the known holes in IE to put pressure on Microsoft to fix them. "This page was made public to put... More...

According to a post on Musiccity.com, the recent "bug" which was allegedly found in Music City's Morpheus media file sharing application is a hoax. (thanks Blasphemous Girl for the heads up) The file... More...

Thanks to neo1980 on the forums for the heads up on this one :) I thought I'd post this here to alert all you Neowinians out there: A nifty feature... More...

Microsoft has defended the reputation of its new Web services software, claiming that a virus targeting files used in its .Net Framework is actually based on an old Windows virus. Antivirus vendors... More...

Slashdot is all over this story, from NewsByte and SecurityFocus, where it is being reported that a serious vunerability was discoverred in IE on the 19th November, but as of today, Microsoft have not released... More...