A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security.
Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for yea...
The latest accelerated release for Firefox, version 6.0, arrives this week but what can users expect in advance of the more significant changes promised for version 7.0 later this year? The answer for now is better security.
Businesses require reliability, stability and compatibility. It's no wonder business owners prefer to stick with the status quo: It's what works for them. Those entrepreneurs who take the time to research the possibilities outside that status quo find a treasure trove of free and low-cost alternatives. When it comes to software, Linux is at the top of that list. With more than 100 complete distributions from which to choose, Linux is far from a single entity.
When Google first started talking about its Google Chrome OS software a few years ago, one of the selling points was the promise that it would come with much better built-in security than other operating systems. Now, Chrome OS has only been commercially available for a few months, and security researchers have already figured out how to hack it.
Amid recent high-profile hacking attacks on government and corporate websites, Microsoft is offering a $260,000 (P11.026 million) reward for "Blue Hat" hackers who can think of creative ways to support computer security.
Google has announced the release of version 13 of the Chrome web browser. Chrome 13 is the latest version of the WebKit-based browser and is available for all platforms; it adds several new features and addresses a total of 30 security vulnerabilities.
The Department of Defense (DOD) has released a unique Linux distribution designed to be a secure option for people, such as telecommuters, who need remote access to internal government and corporate networks from potentially insecure desktops.
Oracle has bought the Ksplice company which offers services and technology for correcting vulnerabilities and errors in the Linux kernel on the fly. Oracle plans to incorporate the technology into its Unbreakable Linux kernel, as used by its "Unbreakable Linux", and expects this to increase the operating system's reliability, security and availability.
Go Google-hack yourself.
No, it's not a curse. It's a bit of advice being prepared by two researchers who will present a new batch of search engine-based hacking tools at the Black Hat USA conference in Las Vegas next month.
The latest Firefox beta jumps to version 6 and lands with improvements made to security, tablet appearance, memory management, and Android fixes. Download for Windows, Mac, Linux, and Android, Firefox 6 beta comes with a laundry list of changes made to both desktop and mobile platforms.
Two vulnerabilities in the popular BIND 9 DNS server jeopardise the server's stability and can cause the service to crash. One of the flaws can be exploited remotely via specially crafted UPDATE requests and affects both recursive and authoritative servers. The developers say that the nature of the defect makes it impossible to prevent potential attacks using Access Control Lists (ACLs).
I was talking last week to my friend HD Moore who founded and leads the development team for Metasploit at Rapid7. He told me about yet another open source project that Rapid7 has been supporting with financial and engineering support. The venerable John-the-Ripper password cracking project has been the recipient of support from Rapid7 for about a year now, culminating in the latest release which was recently announced.
Make no mistake about it, Google updates its Chrome browser very rapidly. At the beginning of June, Google released the first stable version of Chrome 12, fixing at least 15 different security issues and adding new features. Chrome 12 itself is the fourth major browser release from Google so far in 2011. Now Google is updating Chrome
As I have gone through the 30 Days With Ubuntu Linux experience--and especially the past couple days as I have toyed with Wine and trying to get Windows software to run within Ubuntu--I have seen ample evidence of the security features of the OS. Simply put, Ubuntu Linux (and, I assume, Linux in general) is more secure by default.
Companies and bloggers that run their own WordPress installations should make sure that they have not downloaded any of three popular plugins that were, for about 24 hours, playing host to malicious code, WordPress creator Auttomatic warned.
We are heading into the home stretch on the 30 Days With Ubuntu Linux series. If I were to score Ubuntu Linux today, it would get generally high marks, but there is one thing that has really been annoying me--the updates.
A security hole has been discovered in the WebGL implementation of Firefox 4 by the British security researchers at Context Information Security. The researchers have been continuing their previous work looking for flaws in WebGL and have found they can perform a "memory stealing" attack using WebGL.
A new version of Google's JavaScript rendering engine and security fixes land in Google Chrome 14.0.794.0 dev today, available for download for Windows, Mac, Linux. The latest rough version of the browser improves secure HTTP support in several ways, updates the V8 JavaScript engine to version 3.4.3.0, and tightens security when installing Web apps from the Chrome Web Store.