Microsoft is taking a number of steps to try and reassure customers about the integrity of the company’s offerings and to greatly expand the use of encryption across its services.
Microsoft’s advanced notification of its December 2013 Patch Tuesday security updates includes a patch for the TIFF zero day. Microsoft will release 11 bulletins, five of the critical.
Arbor Networks researchers report the discovery of two servers hosting Dexter and Project Hook point of sale malware.
Close to a half million Ucard users’ personal information may have been accessed in a breach at JP Morgan & Chase.
Attackers are able to bypass the reflective cross-site scripting filter in Internet Explorer; the weakness is accepted by Microsoft as part of its design philosophy for the filter and will not be fixed.