In this video from the SOURCE conference in Boston, security researcher Dino Dai Zovi discusses the details of return-oriented programming and the ways in which it can be used to exploit vulnerabilities.
The Microsoft Security Response Center announced today that it will ship ten bulletins in the March edition of patch Tuesday. MSRP considers just two of the patches critical, one of which supplements the currently available “Fix it” tool that resolved the IE vulnerability exploited recently in an attack targeting the U.S. Department of Labor.
For at least the third year in a row, the number of serious vulnerabilities per website has fallen. That sounds like good news until you look at the numbers and realize that the average website carried an astonishing 56 holes in 2012, according to statistics compiled by WhiteHat Security and based upon data gathered from tens of thousands of websites.
Microsoft has released a new version of the MS13-036 patch that was causing some customers’
“Patents against innovation”. Sounds as paradoxical as “bees against honey”, “hamburger patties against buns”, “students against sex” or “rock ...
Fostering knowledge exchange among different generations of security researchers is maybe one of the best traits of a good security conference. Judging by its attendance, NoSuchCon can easily claim to...
Olga Rumyantseva began her 7 Volcanoes expedition in Antarctica as the first Russian woman to climb Mount Sidley. Mount Sidley (4,285 m) is the highest and most imposing of the five volcanic mountai...
Cybersecurity for the next generation!
