Staying on top of the latest in software/hardware security research, vulnerabilities, threats and computer attacks.
Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues.
Dancho Danchev is an independent security consultant and cyber threats analyst, with extensive experience in open source intelligence gathering, malware and cybercrime incident response.
Updated below: Oracle said Thursday that its latest batch of patches will fix 27 security fixes "across hundreds of Oracle products," including eight for the company's database, seven for its e-business suite and six for its application server.In its advisory, Oracle outlines a laundry list of software affected.
A security researcher has unearthed a buffer overflow remote code execution vulnerability that affects QuickTime on both the Windows and Mac platform.The flaw was published Thursday by Luigi Auriemma, who has been busy of late, is the latest in a series of QuickTime issues.
The U.S. Computer Emergency Readiness Team has warned about a code execution flaw in the AOL Radio software.
A security researcher has found a remote command execution exploit in SAP's MaxDB database on the Windows, Linux and Solaris platforms.Researcher Luigi Auriemma published the flaw in MaxDB versions 7.
Secunia has some alarming stats on the lack of patching going on out there.Secunia uses its PSI application to track patches and the state of security.
The dreaded Storm worm is now being used for phishing scams, according to security researchers.F-Secure outlined a phishing scam involving the Storm worm (all resources) on i-halifax.
The latest rootkit in the wild hides on your hard drive's boot sector and is starting to infect Windows PCs, according to security researchers.And the real kicker: The rootkit can't be detected by most antivirus applications.
Microsoft on Tuesday delivered one "critical" addressing two vulnerabilities in XP and Vista and one "important" vulnerability in Windows 2000, XP and Windows Server 2003.The critical patch resolves two vulnerabilities (CVE-2007-0069 and CVE-2007-0066) reported by IBM ISS X-Force.
Computerworld chronicles the tale of Web hosting firm C I Host Inc. and details how its data center was robbed.
Geeks.com, a computer gear e-tailer that sports ScanAlert's "Hacker Safe" logo, has been hacked.