Articles Related to security holes

Is the practice of penetration testing headed the way of desktop publishing and the PDA? Well probably not dead as is dead and gone, it just won't be as cool as it was before. Here's a look at the possible reincarnation of penetration testing

Is full, public disclosure of security vulnerabilities a better strategy than trying to keep them secret?

Oracle Corp. acknowledged the existence of multiple security holes in its database software Tuesday and said it would issue an alert to customers shortly. The U.K. security expert who found the holes criticized Oracle's conduct, saying that it has been sitting on patches that would fix the holes for about two months.

Pyra Labs Inc. patched a number of security holes in its Blogger Web-based publishing tool this week that could have enabled a hacker to publish thoughts on Web logs owned by others.

A RealNetworks Inc. security patch for its media player software is flawed, leaving millions of users at risk of attacks, a security researcher said Wednesday.

Microsoft Corp. has responded to criticism from users and issued a software patch for a major security vulnerability in the Windows XP operating system, reversing an earlier decision to require users to upgrade to Windows XP Service Pack 1 to remove the vulnerability.

Deep in the midst of an effort to beef up the security of its software, Microsoft Corp. Monday made available a free tool designed to search out security vulnerabilities hiding in Windows-based computers.

A collection of security companies have formed a group to create standard policies and guidelines for how information about software security flaws is distributed and published.