Stay updated with breaking news from Eb Security. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
<p>TippingPoint’s Zero Day Initiative has released the rules for this year’s <a href="http://cansecwest.com/index.html">CanSecWest </a>PWN2OWN contest, which will target unpatched flaws in Web browsers and mobile devices.</p> <p>Among the target list this year: Microsoft’s Internet Explorer 8, Apple’s Safari, Google’s Chrome, Windows Mobile, Google Android, BlackBerry, iPhone and Symbian.</p>
<p><object height="344" width="425"> <param name="movie" value="http://www.youtube.com/v/MPyGikZ1UzE&hl=en&fs=1"> <param name="allowFullScreen" value="true"> <param name="allowscriptaccess" value="always"><embed type="application/x-shockwave-flash" src="http://www.youtube.com/v/MPyGikZ1UzE&hl=en&fs=1" allowscriptaccess="always" allowfullscreen="true" height="344" width="425"></object></p> <...
<p>For a long time, the experience of patching Sun’s Java software <a href="http://blog.washingtonpost.com/securityfix/2006/08/sun_acknowledges_major_oops_in.html">has been less than pleasant</a>. The updates were huge and time consuming, the patching instructions <a href="http://cybernetnews.com/2008/08/09/helpful-tip-remove-old-versions-of-java-jre/">were a mess</a> and, even worse, Sun never removed older, vulnerable versions from the patched machine.</p> <p>Now it appears that things have been fixed. For starters, the company ...
<p>It’s been more than six months since Dan Kaminksy detailed the problems he had found lurking in the DNS system, and the coordinated patching effort that followed his discovery was nothing short of extraordinary. A huge percentage of the vulnerable servers were patched before the details of the flaw came out, thanks to behind-the-scenes work by Kaminsky, Microsoft, CERT and others.</p><p>
Despite what you may have seen on 24 or read in Tom Clancy’s novels, the United States is well behind much of the rest of the world in developing both defensive and offensive cybersecurity capabilities, and that’s a deficit that may end up costing us dearly in the long run, according to a longtime government security expert.