Your search for bug returned 275 results.

Yahoo has fixed a vulnerability in its web mail service that, if exploited, could allow hackers access to users' mailboxes. Some scripting languages can now smuggle attacks past your traditional defences, warns Gunter Ollmann. With so much money being moved online these days, cyber criminals are getting greedy - and smarter. Mark Mayne asks the experts for advice. Some scripting languages can now smuggle attacks past your traditional defences, warns Gunter Ollmann. Cisco has fixed multiple flaws in its security management solution that could allow attackers to compromise sensitive information or execute malicious code, the networking giant announced late Wednesday. Security giant Symantec has quickly patched a "highly critical" flaw in its enterprise anti-virus software that could lead to the remote execution of malicious code. Anti-virus giant McAfee apologized to enterprise customers today for failing to disclose sooner a flaw in its widely deployed security management software. Sleuth Kit and Autopsy Browser are excellent examples of what happens when a talented developer builds on good prior work. These products, used together, are freeware open-source computer forensic tools built on the Coroner’s Toolkit. But the developer, Brian Carrier, has taken his considerable expertise in file systems of all kinds and applied it here. Two days after Apple released a security update addressing five flaws in Mac OS X 10.4.7, the computing giant revealed last week that a vulnerability exists in its iTunes software. The ever-present Bagle worm again is making the rounds, this time spreading as an emailed .zip attachment encrypted with a password. This month's topic: Companies should use unofficial patches to fix vulnerabilities Mozilla has patched a "critical" flaw in Firefox that could cause the alternative, open-source web browser to crash. Popular alternative web browser Mozilla Firefox contains a vulnerability that could allow an attacker to launch denial of service (DoS) attacks, security monitoring service Secunia said in an advisory today. Symantec is investigating the report of a vulnerability in its AntiVirus Corporate Edition 10, the security giant said Thursday. Security experts are warning PC users this week about another zero-day Internet Explorer (IE) vulnerability that can be exploited to execute arbitrary code to compromise systems. A senior Apple systems engineer, not impressed by a recent overseas hacking challenge in which the winner reportedly gained root access to a Mac Mini in under 30 minutes, has launched his own security challenge. Oracle, with its next scheduled patch release now a week away, unintentionally released information about a new privilege escalation security hole on a company website last week. Microsoft publicly acknowledged this week’s second newly discovered flaw in Internet Explorer on Wednesday. Google has patched a minor flaw that allowed JavaScript code to run when viewing a Gmail message, the search engine giant said today.