Fully patched Windows systems may be at risk from an unpatched, high-risk security hole affecting the latest version of Internet Explorer. The bug, reported by security researcher Tom Ferris on his website, security-protocols.com, affects Internet Explorer 6 on a fully-patched Windows Server 2003 and Windows XP with Service Pack 2.
Enterprises using a key network management product from Hewlett-Packard may be vulnerable to a serious flaw allowing remote attacks, the company has warned. The problem is in Network Node Manager, an HP OpenView product that carries out auto-discovery, control and monitoring of network devices via SNMP (Simple Network Management Protocol). A patch isn't yet available.
Microsoft has won the first round in its legal action against Google, with a restraining order that prevents a former Microsoft employee from engaging in competing work at the search company. The ruling came from King County Superior Court in Seattle last month and represents an initial, if small, win for Microsoft.
Acrobat and Acrobat Reader, two of the most widely used desktop applications, contain serious security flaws that could be used to take over a system, according to Adobe. The company urged users to update the software immediately.
Microsoft has taken the wraps off a new security program that uses automated "HoneyMonkeys" to patrol the Web, seeking out sites that automatically install malicious code on Windows XP systems.
A large number of DNS servers, a critical part of the Internet's infrastructure, are vulnerable to attacks that could lead to widespread fraud, according to a security researcher. A scan conducted by Dan Kaminsky, a networking security expert, has found that hundreds of thousands of DNS servers could be vulnerable to a type of attack that routes Internet traffic to malicious websites.