A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security.
Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for yea...
By now, you may have seen the latest promo for the upcoming Chrome notebook. Advocating the advantages of the cloud-based Chrome OS, the video is mildly amusing and largely irrelevant -- a case at least as strong could be made for preferring locally-installed applications, and I suspect that what people really want to see are close-ups of Chrome OS.
Google has released version 8.0.552.224 of Chrome for Windows, Mac OS X and Linux into its Stable and Beta channels. The security update addresses a total of five vulnerabilities in the WebKit-based browser, two of which are rated as "High" priority.
The WordPress development team has released version 3.0.3 of the popular open source blogging and publishing platform, a security update for the 3.0.x branch of WordPress. According to the developers, the update addresses a privilege escalation issue in the remote publishing interface that, under certain circumstances, could have allowed Author and Contributor-level users to improperly edit, publish or delete posts.
Comodo, a leading Certificate Authority and Internet security organization, today announced that its Comodo Internet Security (CIS) software earned the prestigious ICSA labs certification, a leading independent security product testing facility.
Juniper Networks announced today it has bought virtual security vendor Altor Networks for $95 million.
The acquisition builds on an existing relationship between the two companies, and Juniper actually invested in the company earlier this year.
Maintainers of the open-source WordPress blog publishing platform has shipped a mandatory security update to cover a potentially serious security vulnerability.
Apple has released versions 5.0.3 and 4.1.3 of Safari, updates that address several security vulnerabilities in the WebKit-based browser. In total, the Safari updates fix 27 security holes in the browser's open source WebKit rendering engine, most of them rated as critical.
Adobe has released the next-generation version of its Reader software that includes a protected mode to prevent attacks through PDF files. The release of Adobe Reader X on Windows follows closely behind Adobe Acrobat X.
During Red Hat's official launch event for their new Red Hat Enterprise Linux 6 (RHEL 6) release, executives from the company focused heavily on new performance gains. While performance and scalability are key elements of RHEL 6, so too is security.
It's bound to happen: you create a cool, forward looking incentive program designed to tap the "wisdom of the crowd" and help make your products better, only to find out that, in fact, the "crowd" isn't all that wise - and now wants you to pay cold, hard cash for their tepid ideas.
Insecurity experts at Sophos have released a Linux-based do-it-yourself defence against the HTTP hijacker known as Firesheep and said people can use it in order to browse the web safely over unencrypted WiFi.
Fedora Project leaders have banned a popular penetration-testing tool from their repository out of concern it could saddle the organization with legal burdens.
For the first time in its 13-year history, Microsoft's Hotmail comes with the ability to protect email sessions with secure sockets layer encryption from start to finish.
Fedora 14 is out and shines with new desktop virtualization technology, security improvements, and developer tools. The Red Hat sponsored Linux distribution, codenamed "Laughlin," introduces the first release for Amazon
Google has released version 7.0.517.44 of Chrome for Windows, Mac OS X and Linux, a security update that addresses a total of 12 vulnerabilities, all of which the developers rate as "high" priority. As part of its Chromium Security Reward programme, Google rewarded those who reported the security vulnerabilities with between $500 to $1,000.
Taking a page from the Chrome playbook, Google has launched a program to encourage outsiders to find security vulnerabilities in its Web properties.
Under the Chrome vulnerability-finding bounty program, the company already has been paying varying sums to those who locate holes in the browser.