The May 2011 edition of Microsoft’s Patch Tuesday is a relatively modest one with the software giant posting just two bulletins addressing bugs that could allow for remote code execution, but only one of which is rated critical.
In the midst of an apparent civil war, the online hacking collective, Anonymous, has issued yet another public statement denying responsibility for a damaging hack of Sony’s PlayStation Network (PSN) and claiming that Sony is trying to shift blame for “internal problems” onto Anonymous.
Sony’s PlayStation Network remains down after suffering an external intrusion that knocked the online gaming platform offline on April 20, and new reports suggest the popular gaming network may remain so until the end of the month.
Online scammers are recycling video and images released in the wake of the U.S. special forces raid on Osama bin Laden’s Pakistani compound to fuel Web based attacks that have been linked to rogue anti virus installations and botnets, according to Kaspersky Lab.
Skype users on Mac OS X are dealing with some confusing information at the moment about whether Skype has fixed a remotely exploitable bug in the Mac client that was reported several weeks ago. The company said it released a patch in an optional minor update nearly a month ago, but it will push out another fix this week that will force users to upgrade.
The Internet Systems Consortium released an advisory today informing BIND users that certain types of queries to name servers can cause the servers to crash and create a denial-of-service condition.
The OpenID Foundation is warning users about a weakness in the software that could enable an attacker to change some of the data that’s exchanged between parties that use OpenID. The group is telling sites that implement OpenID to update to a new version in order to fix the problem.
The threats and attacks may have changed in the last decade, but one thing has remained constant: software giant Microsoft doesn’t pay for vulnerabilities. Never has. Never will. Even as rivals like Mozilla and Google have introduced bug bounty program, the Redmond Washington giant has stuck doggedly with a position it articulated almost a decade ago, refusing to offer monetary rewards for information on software holes. But security experts say that position may have to change.
A sophisticated attack against RSA, the security division of EMC, shares characteristics with similar attacks against Western firms, according to the security blog Krebsonsecurity.
“Failure is only the opportunity to begin again, only this time more wisely,” is a quote attributed to legendary automaker Henry Ford. While it seemingly has nothing to do with secure application development, all you need to do is talk to a handful of enterprises who have tried to implement a secure development lifecycle – and you’ll certainly see how it applies.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
