Vendors/Products

Discover Vendors/Products News

Bug disclosure, fix process improving

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Several users welcomed the growing willingness of vendors and security researchers to work together to identify and fix software vulnerabilities in the wake of last week's disclosure of a major hole in a widely used e-mail protocol .. . .

LinuxSecurity.com Team
Mar 12, 2003

When Bad Things Happen to Good Demos

A slick security product demonstration only serves to prove that vendors often don't think enough about what security managers need. How much money do you have in your budget? You have to be aware that this is very expensive software." . . .

LinuxSecurity.com Team
Mar 11, 2003

Guardian Digital Launches Open Source Secure Mail Suite

Guardian Digital, Inc., the leading open source security company, today announced the availability of the Guardian Digital Secure Mail Suite, the industry's most secure and cost-effective email platform. Designed to meet the needs of small businesses, enterprise level companies, ISPs and ASPs looking to secure and manage corporate email operations, Secure Mail Suite is capable of managing all email functions within an organization. . . .

LinuxSecurity.com Team
Mar 07, 2003

Net Security Software Exposed

The most commonly used security system to protect passwords over the internet has been cracked by researchers at one of Switzerland's top technology universities. A team at the Federal Institute for Technology in Lausanne said they had been able to . . .

LinuxSecurity.com Team
Feb 20, 2003

Tracking Network Traffic

Network Associates Inc.'s Sniffer Technologies division on Monday introduced a new forensics analysis solution that has the ability to capture, inspect, reconstruct and replay network traffic. The solution is designed to allow administrators to delve into security events and other . . .

LinuxSecurity.com Team
Feb 10, 2003

Should Microsoft pay your security patch costs?

Bill Gates must be livid. Just after he publishes an e-mail letter to customers outlining Microsoft's progress on its Trustworthy Computing initiative, the SQL Slammer worm--376 bytes of code also known as Sapphire, w32.SQLexp.worm, and Helkern--exploits known vulnerabilities in Microsoft SQL 2000 servers. It creates a global Internet slowdown and another embarrassment for the chairman of the world's most powerful software company. And to top it off, Microsoft's own servers were Slammed.. . .

LinuxSecurity.com Team
Jan 31, 2003

MPEG-4 Consortium Keys on Security

A streaming-media consortium set a schedule this week for finalizing technical specs for MPEG-4 security and rights management--components that are key to the open standard's adoption among content owners. The Internet Streaming Media Alliance (ISMA)--a global group of companies including Apple Computer, Cisco Systems and Sun Microsystems. . .

LinuxSecurity.com Team
Jan 29, 2003

Security Hole Found In CVS Open-source Tool

A critical vulnerability has been found in the Concurrent Versions System (CVS), which is used by the vast majority of open-source projects to update and maintain source code, according to an advisory from the Computer Emergency Response Team (CERT) Coordination Center. . . .

LinuxSecurity.com Team
Jan 23, 2003

AMD Boosts Wireless Security with New Memory Chip

In an effort to step up wireless security in mobile devices, chipmaker AMD (NYSE: AMD) Latest News about AMD has released new flash memory technology designed to frustrate signal thieves and prevent fraudulent call billing. The 64-megabit page-mode flash memory . . .

LinuxSecurity.com Team
Jan 22, 2003

ISS Eyes Brass Ring of Security Management

Internet Security Systems Inc. on Thursday announced its plans to make a grab for the brass ring of security management: dynamically protecting networks and individual machines by tying threat data to vulnerabilities in real time. . .

LinuxSecurity.com Team
Jan 20, 2003

STADRIN Authentication

The Rekonix LTD company have introduced today a new version of their popular strong authentication system STADRIN 1.1.5 targeting the Linux platform using PAM authentication schemes with a Vasco tokens backend. The new version makes the implementation process more easy and . . .

LinuxSecurity.com Team
Jan 17, 2003

Gearing Up For Next-Generation Viruses

Trend Micro Inc. on Tuesday introduced technology and services designed to help companies do a better job of blocking a new generation of tougher, smarter viruses before they get into the enterprise, as well as cleaning up when viruses do get . . .

LinuxSecurity.com Team
Jan 15, 2003

Transmeta Embeds Security Features in Mobile Chip

Chipmaker Transmeta has announced it will be the first company to release a mobile chip that includes security features built in at the processor level. The company said it has received designs for its Crusoe TM5800 processor, an x86 chip designed . . .

LinuxSecurity.com Team
Jan 15, 2003

Vendors Mum on Ethernet Driver Warnings

Despite being informed six months ago of a potentially serious security hole that may exist in Ethernet device drivers, many leading software and hardware manufacturers have yet to indicate whether their products contain the vulnerability. The vulnerability concerns the way . . .

LinuxSecurity.com Team
Jan 13, 2003

Buffer Overflows in SSH and PHP

Some SSH clients and servers have buffer overflows in the key exchange initialization and startup code that may be exploitable by a remote attacker in a denial-of-service attack or, under some conditions, allow the execution of arbitrary code as the root . . .

LinuxSecurity.com Team
Jan 10, 2003

Panel Lets Security Makers Off The Hook

Security software and hardware makers should not have to submit their products for mandatory performance testing, a federal advisory council said Wednesday. Members of the National Infrastructure Advisory Council (NIAC), a presidentially appointed panel, voted during a conference call Wednesday . . .

LinuxSecurity.com Team
Jan 09, 2003

Flaw Found in Ethernet Device Drivers

Security researchers have discovered a serious vulnerability that may be present in many Ethernet device drivers that is causing the devices to broadcast sensitive information over networks. . .

LinuxSecurity.com Team
Jan 07, 2003

ComputracePlus Deletes Stolen Data

Theft happens. And in the case of notebook computers, it happens a lot. When preventive measures fail and a notebook is stolen, the focus then becomes recovery. One breed of recovery products tracks the machine via an agent that notifies . . .

LinuxSecurity.com Team
Dec 30, 2002

IP Security Validator

Frank submits IP Security Validator is an experimental tool that allows validation of Virtual Private Network (VPN) configurations between two network interfaces. As with testing connectivity using the Ping program, IP Security Validator enables verification and validation of VPN . . .

LinuxSecurity.com Team
Dec 19, 2002

Researchers Warn of Serious SSH Flaws

Security researchers have discovered a set of vulnerabilities in several vendors' implementations of the SSHv2 protocol that could give an attacker the ability to execute code on remote machines. The new flaws are especially dangerous in that they occur before authentication . . .

LinuxSecurity.com Team
Dec 17, 2002

Ubuntu 24.04 Security Enhancements Analyzed

Ubuntu Linux 24.04 LTS Beta Released with Enhanced Security & Performance

Fedora 40 Released with Impressive Speed & New Security Features