Google Ships Chrome 9, Plug Nine Security Holes
Google has officially released version 9.0.597.84 of its Chrome web browser to stable and beta channels for Windows, Mac and Linux, an update that addresses nine separate security vulnerabilities.
Vulnerabilities
Critical Adobe Reader X Patches On Deck
Adobe will join Microsoft on the security patch treadmill next Tuesday (February 8, 2011) with “critical” updates for code execution holes in its flagship Adobe Reader and Adobe Acrobat products.
SAUSAGE Con Delves into IT Security’s ‘Human Problem’
‘Why is security so hard?’ That’s the question that a new conference focused on “useable security” will attempt to answer by bringing together experts on security, software development and human-computer interaction.
By Denis MaslennikovA new version of the Android Market has just been launched, making it possible for every device owner to look for applications, buy or even remotely install apps to an Android device directly from the browser on a desktop computer. Wait, remotely install? Have we misheard something?
As part of this month’s Patch Tuesday schedule, Microsoft plans to ship a dozen bulletins with fixes for 22 vulnerabilities, some serious enough to allow hackers complete access to a vulnerable Windows machine.According to Microsoft’s advance notice, three of the 12 bulletins will carry be rated “critical,” the company’s highest severity rating.
Google has announced plans to pay $20,000 to anyone who can successfully
exploit a vulnerability in their Chrome browser and infiltrate a Cr-48 Chrome
Notebook.
Controversy has erupted around the free online dating site, PlentyofFish.com, after the Web site was
found to contain a serious security vulnerability that could have potentially exposed the personal
information of some 30 million users.
Cross-site scripting bugs have been a major problem for Web site operators for years now, and while their causes and their solutions are both well-understood, they’re still quite pervasive. But a new free service is aiming to help site owners avoid the serious compromises that can follow an attack on an XSS flaw.
The U.S. Department of Homeland Security issued a call for proposals this week in a $40m program to encourage research and development in a wide range of topics related to cyber security: from designing more resilient software, to alternatives to passwords and CAPTCHA technology to prevent automated attacks.
Microsoft is warning its users about a dangerous flaw in the way that Windows handles certain MHTML operations, which could allow an attacker to run code on vulnerable machines. The bug affects all of the current versions of Windows, from XP up through Windows 7 and Windows Server 2008.
